| |
| |||||||
Log-Analyse und Auswertung: svchost prozess wird von avast geblockt Win-XPWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
26.12.2013, 13:29
| #1 |
| |  svchost prozess wird von avast geblockt Win-XP Guten Tag, Habe Win-XP SP3, ein bootscan mit Avast Antivirus hat div viren gefunden und in Container verschoben, seitdem bekomme ich immer wieder Meldungen das Avast webschutz eine schädliche seite blockiert hat prozess:svchost Daraufhin habe ich eine Rep-Inst durchgeführt hat aber keine Verbesserungen gebracht. das avast log file network-shield z.B. zeigt diese blockierten Versuche (nur Auszug) Code:
ATTFilter 26.12.2013 10:20:29 Network Shield: blocked access to malicious site hxxp://podserveruho.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([5.231.41.152]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 10:29:30 Network Shield: blocked access to malicious site hxxp://new-onlinegames-wow.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([62.157.140.133]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 10:32:30 Network Shield: blocked access to malicious site hxxp://wow-unrealgaming.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([80.156.86.78]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 10:45:31 Network Shield: blocked access to malicious site hxxp://tm-obigurs.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([96.55.183.139]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 10:48:31 Network Shield: blocked access to malicious site hxxp://podserveruho.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([5.231.41.152]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 12:52:33 Network Shield: blocked access to malicious site hxxp://wow-unrealgaming.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([62.157.140.133]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 12:58:34 Network Shield: blocked access to malicious site hxxp://proton-h99z.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([80.156.86.78]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 13:05:34 Network Shield: blocked access to malicious site hxxp://tm-obigurs.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([96.55.183.139]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 13:08:35 Network Shield: blocked access to malicious site hxxp://podserveruho.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([96.55.183.139]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 13:17:41 Network Shield: blocked access to malicious site hxxp://new-onlinegames-wow.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([62.157.140.133]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 13:20:40 Network Shield: blocked access to malicious site hxxp://wow-unrealgaming.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([62.157.140.133]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
26.12.2013 13:26:40 Network Shield: blocked access to malicious site hxxp://proton-h99z.com/signup.php?text=%67%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64%61%71%72%78%6C%6F%75%66%70%6A%67%74%65%6E%76%64&img_url=http%3A%2F%2F%56%79%6B%6D%51%69%64%59%4D%6C%78%52%51%55%4A%49%57%46%6C%41%56%55%42%61%56%30%52%66%58%6B%5A%56%55%55%73%6C%45%51%49%4C%47%68%45%44%53%6A%38%6B%58%31%34%4F%56%46%56%42%52%55%4A%5A.png&rpt=simage&pos=5 ([80.156.86.78]:80) [ C:\WINDOWS\system32\svchost.exe ( 3092 ) ]
der Report des bootscans Code:
ATTFilter 12/22/2013 14:17
Prüfung aller lokalen Laufwerke
Datei C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\svchost.exe ist infiziert von Win32:Gamker-F [Cryp], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\OpenMin\miner\service.exe ist infiziert von Win32:Miner-B [PUP], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\OpenMin\mn.zip|>miner\service.exe ist infiziert von Win32:Miner-B [PUP], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\OpenMin\reader.exe ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{00003AEA-6838-A9B6} ist infiziert von Win32:Gamker-F [Cryp], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{000093A1-4167-CCC5} ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{0000EDC7-28B9-B9B} ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{00013B73-46D5-6777} ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{00016413-2285-1DC7} ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{0001709A-9E5C-9C9E} ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\Programme\Windows NT\execsa.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\Programme\Windows NT\ptjpfimdgxpidbgvhaqv.txt ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\Programme\Windows NT\tmuwbvdtowvzeho.txt ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1170\A0344637.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1173\A0344799.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1174\A0344837.exe ist infiziert von Win32:Zbot-SCI [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1177\A0344906.exe ist infiziert von Win32:Inject-BAI [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1178\A0344927.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1180\A0344993.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1181\A0345039.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1183\A0345102.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1183\A0345103.exe ist infiziert von Win32:Zbot-SEH [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1183\A0345113.exe ist infiziert von Win32:Zbot-SEH [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1187\A0345320.exe ist infiziert von Win32:Zbot-SEH [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1188\A0345333.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1188\A0345351.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1190\A0346357.exe ist infiziert von Win32:Injector-BNC [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1191\A0346547.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1192\A0347563.exe ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1193\A0347585.exe ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1194\A0349611.exe ist infiziert von Win32:Crypt-QIG [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1199\A0357712.exe ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1203\A0359070.exe ist infiziert von Win32:Wemosis-B [Cryp], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1203\A0359072.exe ist infiziert von Win32:Gamker-F [Cryp], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1203\A0359073.exe ist infiziert von Win32:Miner-B [PUP], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1203\A0359074.exe ist infiziert von Win32:Agent-ASMC [Trj], In Container verschoben
Datei C:\System Volume Information\_restore{B1970578-16EE-4B83-925E-AD2F7AA563A0}\RP1203\A0359075.exe ist infiziert von Win32:Malware-gen, In Container verschoben
Datei C:\WINDOWS\Temp\_avast_\unp251583367.tmp ist infiziert von Win32:Wemosis-B [Cryp], In Container verschoben
Datei C:\WINDOWS\SoftwareDistribution\Download\7e8746adac466548566012b41b976217\BIT1E.tmp|>NDP30SP2-KB2604110.msp Fehler 42127 {CAB-Archiv ist beschädigt.}
Datei C:\WINDOWS\SoftwareDistribution\Download\0d4af5ae5a0f48e42da23a2130e61d58\BIT36.tmp|>_sfx_0010._p Fehler 42127 {CAB-Archiv ist beschädigt.}
Datei C:\WINDOWS\SoftwareDistribution\Download\be484324a7df8ab3ce6c93dea4092c4d\BITAC.tmp|>mrt.exe Fehler 42127 {CAB-Archiv ist beschädigt.}
Anzahl durchsuchter Ordner: 10254
Anzahl der geprüften Dateien: 14810685
Anzahl infizierter Dateien: 38
defogger_disable.log Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:23 on 26/12/2013 (salva)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
das logfile von FRST hab ich als Anhang angefügt da es zu lang war. Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-12-2013
Ran by salva at 2013-12-26 10:26:42
Running from C:\Dokumente und Einstellungen\salva\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
==================== Installed Programs ======================
7-Zip 4.65
Acronis*True*Image*Home (Version: 13.0.7046)
Adobe Flash Player 11 ActiveX (Version: 11.6.602.180)
Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Adobe Shockwave Player 11.5 (Version: 11.5.7.609)
AFPL Ghostscript 8.51
AFPL Ghostscript Fonts
AGFEO Fernkonfigurator 32
avast! Free Antivirus (Version: 9.0.2011)
AVM FRITZ!
AVM FRITZ! LAN Assistent
AVM ISDN CAPI Port
AVM ISDN TAPI Services for CAPI
B1315AppGuid (Version: 1.0.0)
BirdieSync 2.4.4.0 (Version: 2.4.4.0)
Brother Driver Deployment Wizard (Version: 1.09.000)
Brother MFL-Pro Suite MFC-5490CN (Version: 1.0.1.0)
Brother MFL-Pro Suite MFC-J6710DW (Version: 1.0.20.0)
Buyertools Reminder (Version: 1.5)
Canon CAPT-Drucker
CDDRV_Installer (Version: 4.60)
ClipboardPath (Version: 1.2.4)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
coolbuddy Screensaver Laetitia Casta01
DasÖrtliche Such-Leiste
DasÖrtliche Toolbar
DBF Viewer 2000 3.45 (Version: 3.45)
DMMultiView
EURACOM
Express ClickYes 1.2 (Version: 1.2)
FaJo XP File Security Extension v1.2 (Version: v1.2)
FreePDF XP (Remove only)
FRITZ!Box
GeoVision AAC
GeoVision ADPCM
GeoVision H264
GeoVision JPEG
GeoVision MJPG
GeoVision MPEG2
GeoVision MPEG4 ASP
GeoVision MPEG4 AVC
GeoVision MXPG
Google Earth Plug-in (Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4805.320)
Google Update Helper (Version: 1.3.22.3)
Hotfix für Windows XP (KB952287) (Version: 1)
Hotfix für Windows XP (KB961118) (Version: 1)
ICQ6 (Version: 6.00.0000)
IrfanView (remove only)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
KhalInstallWrapper (Version: 4.70.213)
kobdfu x64x86 driver installation (Version: 1.00.0000)
Logitech SetPoint (Version: 4.70)
Lotus NotesSQL 3.01 driver
Lotus SmartSuite - Deutsch (Version: 9.8.0)
Macromedia Flash Player (Version: 7.0.14.0)
Macromedia Shockwave Player (Version: 10.1.0.11)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft SQL Server Native Client (Version: 9.00.4226.00)
Microsoft SQL Server VSS Writer (Version: 9.00.4226.00)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft XML Parser (Version: 8.70.1104.04)
Mozilla Firefox (3.5.11) (Version: 3.5.11 (de))
Mozilla Maintenance Service (Version: 24.2.0)
Mozilla Thunderbird 24.2.0 (x86 de) (Version: 24.2.0)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
MSXML 6.0 Parser (Version: 6.10.1129.0)
Music Transfer (Version: 1.3.00.11130)
Nuance PaperPort 12 (Version: 12.1.0000)
Nuance PDF Viewer Plus (Version: 5.30.3290)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA nView 135.95 (Version: 135.95)
NVIDIA nView Desktop Manager (Version: 6.14.10.13594)
NVIDIA Systemsteuerung 285.58 (Version: 285.58)
NVIDIA Update 1.5.20 (Version: 1.5.20)
NVIDIA Update Components (Version: 1.5.20)
Office Auftragsprofi 5.09.03 (Version: 5.09.03)
OpenOffice.org 3.1 (Version: 3.1.9420)
PaperPort Image Printer (Version: 1.00.0001)
PC-HausVerwalter plus 2008 (Version: 8.35.107)
PDF24 Creator 3.5.2
PDFTiger
PDFTiger Kernel
PDFTigerDriver
PDF-Viewer (Version: 2.0.51.0)
Picasa 3 (Version: 3.1)
Picture Package (Version: 1.00.000)
Platform (Version: 1.22)
Primo (Version: 1.00.0000)
Profi cash
QuickTime
Runtime (Version: 1.00.0000)
Samsung PC Studio (Version: 3.0.0.60510)
Scansoft PDF Professional
Sicherheitsupdate für Microsoft Windows (KB2564958)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2898785) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (Version: 1)
Sicherheitsupdate für Windows Media Player (KB2803821-v2)
Sicherheitsupdate für Windows XP (KB2115168) (Version: 1)
Sicherheitsupdate für Windows XP (KB2229593) (Version: 1)
Sicherheitsupdate für Windows XP (KB2296011) (Version: 1)
Sicherheitsupdate für Windows XP (KB2347290) (Version: 1)
Sicherheitsupdate für Windows XP (KB2387149) (Version: 1)
Sicherheitsupdate für Windows XP (KB2393802) (Version: 1)
Sicherheitsupdate für Windows XP (KB2419632) (Version: 1)
Sicherheitsupdate für Windows XP (KB2423089) (Version: 1)
Sicherheitsupdate für Windows XP (KB2440591) (Version: 1)
Sicherheitsupdate für Windows XP (KB2443105) (Version: 1)
Sicherheitsupdate für Windows XP (KB2478960) (Version: 1)
Sicherheitsupdate für Windows XP (KB2478971) (Version: 1)
Sicherheitsupdate für Windows XP (KB2479943) (Version: 1)
Sicherheitsupdate für Windows XP (KB2481109) (Version: 1)
Sicherheitsupdate für Windows XP (KB2483185) (Version: 1)
Sicherheitsupdate für Windows XP (KB2485663) (Version: 1)
Sicherheitsupdate für Windows XP (KB2506212) (Version: 1)
Sicherheitsupdate für Windows XP (KB2507938) (Version: 1)
Sicherheitsupdate für Windows XP (KB2508429) (Version: 1)
Sicherheitsupdate für Windows XP (KB2509553) (Version: 1)
Sicherheitsupdate für Windows XP (KB2510581) (Version: 1)
Sicherheitsupdate für Windows XP (KB2535512) (Version: 1)
Sicherheitsupdate für Windows XP (KB2536276-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2544893-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2566454) (Version: 1)
Sicherheitsupdate für Windows XP (KB2570947) (Version: 1)
Sicherheitsupdate für Windows XP (KB2584146) (Version: 1)
Sicherheitsupdate für Windows XP (KB2585542) (Version: 1)
Sicherheitsupdate für Windows XP (KB2592799) (Version: 1)
Sicherheitsupdate für Windows XP (KB2598479) (Version: 1)
Sicherheitsupdate für Windows XP (KB2603381) (Version: 1)
Sicherheitsupdate für Windows XP (KB2619339) (Version: 1)
Sicherheitsupdate für Windows XP (KB2620712) (Version: 1)
Sicherheitsupdate für Windows XP (KB2631813) (Version: 1)
Sicherheitsupdate für Windows XP (KB2653956) (Version: 1)
Sicherheitsupdate für Windows XP (KB2655992) (Version: 1)
Sicherheitsupdate für Windows XP (KB2659262) (Version: 1)
Sicherheitsupdate für Windows XP (KB2676562) (Version: 1)
Sicherheitsupdate für Windows XP (KB2686509) (Version: 1)
Sicherheitsupdate für Windows XP (KB2691442) (Version: 1)
Sicherheitsupdate für Windows XP (KB2698365) (Version: 1)
Sicherheitsupdate für Windows XP (KB2705219-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2712808) (Version: 1)
Sicherheitsupdate für Windows XP (KB2719985) (Version: 1)
Sicherheitsupdate für Windows XP (KB2723135-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2727528) (Version: 1)
Sicherheitsupdate für Windows XP (KB2758857) (Version: 1)
Sicherheitsupdate für Windows XP (KB2770660) (Version: 1)
Sicherheitsupdate für Windows XP (KB2780091) (Version: 1)
Sicherheitsupdate für Windows XP (KB2802968) (Version: 1)
Sicherheitsupdate für Windows XP (KB2807986) (Version: 1)
Sicherheitsupdate für Windows XP (KB2813345) (Version: 1)
Sicherheitsupdate für Windows XP (KB2820917) (Version: 1)
Sicherheitsupdate für Windows XP (KB2834886) (Version: 1)
Sicherheitsupdate für Windows XP (KB2845187) (Version: 1)
Sicherheitsupdate für Windows XP (KB2847311) (Version: 1)
Sicherheitsupdate für Windows XP (KB2850869) (Version: 1)
Sicherheitsupdate für Windows XP (KB2859537) (Version: 1)
Sicherheitsupdate für Windows XP (KB2862152) (Version: 1)
Sicherheitsupdate für Windows XP (KB2862330) (Version: 1)
Sicherheitsupdate für Windows XP (KB2862335) (Version: 1)
Sicherheitsupdate für Windows XP (KB2864063) (Version: 1)
Sicherheitsupdate für Windows XP (KB2868038) (Version: 1)
Sicherheitsupdate für Windows XP (KB2868626) (Version: 1)
Sicherheitsupdate für Windows XP (KB2876217) (Version: 1)
Sicherheitsupdate für Windows XP (KB2876331) (Version: 1)
Sicherheitsupdate für Windows XP (KB2892075) (Version: 1)
Sicherheitsupdate für Windows XP (KB2893294) (Version: 1)
Sicherheitsupdate für Windows XP (KB2893984) (Version: 1)
Sicherheitsupdate für Windows XP (KB2898715) (Version: 1)
Sicherheitsupdate für Windows XP (KB2898785) (Version: 1)
Sicherheitsupdate für Windows XP (KB923561) (Version: 1)
Sicherheitsupdate für Windows XP (KB938464) (Version: 1)
Sicherheitsupdate für Windows XP (KB946648) (Version: 1)
Sicherheitsupdate für Windows XP (KB950762) (Version: 1)
Sicherheitsupdate für Windows XP (KB950974) (Version: 1)
Sicherheitsupdate für Windows XP (KB951376-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB952004) (Version: 1)
Sicherheitsupdate für Windows XP (KB952954) (Version: 1)
Sicherheitsupdate für Windows XP (KB956572) (Version: 1)
Sicherheitsupdate für Windows XP (KB956844) (Version: 1)
Sicherheitsupdate für Windows XP (KB959426) (Version: 1)
Sicherheitsupdate für Windows XP (KB960803) (Version: 1)
Sicherheitsupdate für Windows XP (KB960859) (Version: 1)
Sicherheitsupdate für Windows XP (KB969059) (Version: 1)
Sicherheitsupdate für Windows XP (KB971657) (Version: 1)
Sicherheitsupdate für Windows XP (KB972270) (Version: 1)
Sicherheitsupdate für Windows XP (KB973507) (Version: 1)
Sicherheitsupdate für Windows XP (KB973869) (Version: 1)
Sicherheitsupdate für Windows XP (KB973904) (Version: 1)
Sicherheitsupdate für Windows XP (KB974112) (Version: 1)
Sicherheitsupdate für Windows XP (KB974318) (Version: 1)
Sicherheitsupdate für Windows XP (KB974392) (Version: 1)
Sicherheitsupdate für Windows XP (KB974571) (Version: 1)
Sicherheitsupdate für Windows XP (KB975025) (Version: 1)
Sicherheitsupdate für Windows XP (KB975467) (Version: 1)
Sicherheitsupdate für Windows XP (KB975560) (Version: 1)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1)
Sicherheitsupdate für Windows XP (KB977816) (Version: 1)
Sicherheitsupdate für Windows XP (KB977914) (Version: 1)
Sicherheitsupdate für Windows XP (KB978338) (Version: 1)
Sicherheitsupdate für Windows XP (KB978542) (Version: 1)
Sicherheitsupdate für Windows XP (KB978706) (Version: 1)
Sicherheitsupdate für Windows XP (KB979309) (Version: 1)
Sicherheitsupdate für Windows XP (KB979482) (Version: 1)
Sicherheitsupdate für Windows XP (KB979687) (Version: 1)
Sicherheitsupdate für Windows XP (KB981997) (Version: 1)
Sicherheitsupdate für Windows XP (KB982132) (Version: 1)
Sicherheitsupdate für Windows XP (KB982665) (Version: 1)
SiSoftware Sandra Lite 2010.SP2 (Version: 16.52.2010.7)
Skype™ 6.2 (Version: 6.2.106)
Softwareprofi Database Engine 1.02 (Version: 1.02)
Sony Picture Utility (Version: 4.2.01.15030)
Sony USB Driver
TeamViewer 8 (Version: 8.0.22298)
TuneUp Utilities 2012 (Version: 12.0.2160.11)
TuneUp Utilities Language Pack (de-DE) (Version: 12.0.2160.11)
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.6010.8)
Tweak UI
UltraVNC 1.0.5.3 (Version: 1.0.5.3)
Unlocker 1.9.0 (Version: 1.9.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update für Windows Internet Explorer 8 (KB2598845) (Version: 1)
Update für Windows XP (KB2467659) (Version: 1)
Update für Windows XP (KB2749655) (Version: 1)
Update für Windows XP (KB951978) (Version: 1)
Update für Windows XP (KB955759) (Version: 1)
Update für Windows XP (KB968389) (Version: 1)
Update für Windows XP (KB971029) (Version: 1)
Update für Windows XP (KB973815) (Version: 1)
USB Video Driver (Version: 1.00)
VIA Plattform-Geräte-Manager (Version: 1.22)
VIA Vinyl Audio Codecs Driver Setup Program
WebFldrs XP (Version: 9.50.7523)
Winamp (Version: 5.56 )
Windows Genuine Advantage v1.3.0254.0 (Version: 1.3.0254.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3 (Version: 20080414.031514)
Windows-Treiberpaket - Advanced Micro Devices, Inc. (USB28xxBGA) Media (08/31/2007 5.7.0831.0) (Version: 08/31/2007 5.7.0831.0)
Windows-Treiberpaket - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0) (Version: 08/31/2007 5.7.0831.0)
X264
XVID
Yahoo! Messenger
==================== Restore Points =========================
25-12-2013 16:59:23 Systemprüfpunkt
25-12-2013 17:25:37 Windows XP Service Pack 3 wurde installiert.
25-12-2013 17:33:03 Windows XP KB938464 wurde installiert.
26-12-2013 08:26:19 Software Distribution Service 3.0
==================== Hosts content: ==========================
2003-04-02 12:00 - 2013-09-03 17:19 - 00000732 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Programme\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7f646db07aa4.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{89E5C452-EABC-4671-BB77-1CFA19812C38}.job => C:\WINDOWS\system32\msfeedssync.exe
Task: C:\WINDOWS\Tasks\wzed.job => Z:\proficash\wzed.exe
==================== Loaded Modules (whitelisted) =============
2005-12-05 18:54 - 2004-07-27 15:59 - 00070416 _____ () C:\WINDOWS\system32\AvmSnd.dll
2005-12-05 18:54 - 2004-07-27 15:59 - 00070416 _____ () C:\WINDOWS\System32\AvmSnd.dll
2013-12-25 22:10 - 2013-12-25 19:58 - 02153984 _____ () C:\Programme\AVAST Software\Avast\defs\13122501\algo.dll
2009-09-24 13:21 - 2002-01-11 13:59 - 00094274 _____ () C:\WINDOWS\system32\HPBHealr.dll
2006-08-02 18:18 - 2005-01-06 17:33 - 00116224 _____ () C:\WINDOWS\system32\redmonnt.dll
2010-03-26 14:06 - 2007-08-21 12:59 - 00014616 _____ () C:\WINDOWS\system32\skypdfmonpro.dll
2012-01-12 15:57 - 2009-02-27 16:38 - 00139264 ____R () C:\Programme\Brother\BrUtilities\BrLogAPI.dll
2013-12-22 14:09 - 2013-12-22 14:10 - 19336120 _____ () C:\Programme\AVAST Software\Avast\libcef.dll
2007-04-20 17:32 - 2007-04-20 17:32 - 00681984 _____ () C:\Programme\Buyertools Reminder\IEButtonBuyertoolsInterface.dll
2007-03-15 13:48 - 2007-01-10 17:53 - 00462848 _____ () C:\Programme\DasÖrtliche Toolbar\DasOertlicheToolbar1.dll
2012-11-21 09:04 - 2013-12-11 18:21 - 03017840 _____ () C:\Programme\Mozilla Thunderbird\mozjs.dll
2012-11-21 09:04 - 2013-12-11 18:21 - 00158832 _____ () C:\Programme\Mozilla Thunderbird\NSLDAP32V60.dll
2012-11-21 09:04 - 2013-12-11 18:21 - 00023152 _____ () C:\Programme\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UploadMgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WdfLoadGroup => ""=""
==================== Faulty Device Manager Devices =============
Name: AVM FRITZ!web PPP over ISDN
Description: AVM FRITZ!web PPP over ISDN
Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}
Manufacturer: AVM
Service: NETFRITZ
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/26/2013 10:26:39 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:26:39.812]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:26:05 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:26:05.312]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:25:30 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:25:30.796]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:24:56 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:24:56.171]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:24:21 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:24:21.671]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:23:46 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:23:46.062]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:23:10 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:23:10.859]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:22:35 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:22:35.000]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:21:57 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:21:57.921]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:21:22 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2013/12/26 10:21:22.937]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
System errors:
=============
Error: (12/26/2013 10:22:07 AM) (Source: Service Control Manager) (User: )
Description: Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst avast! Antivirus.
Error: (12/26/2013 10:14:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Seriennummer der tragbaren Medien" wurde mit folgendem Fehler beendet:
%%126
Error: (12/26/2013 10:14:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DATEV Druckservice" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (12/26/2013 10:14:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "ATI Smart" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (12/26/2013 10:14:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TuneUp Designerweiterung" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1083
Error: (12/26/2013 10:14:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Ati HotKey Poller" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (12/26/2013 10:13:01 AM) (Source: Windows Update Agent) (User: )
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Office 2003 (KB2726929)
Error: (12/26/2013 10:12:27 AM) (Source: Windows Update Agent) (User: )
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Outlook 2003 Junk E-mail Filter (KB2760754)
Error: (12/26/2013 10:12:16 AM) (Source: Windows Update Agent) (User: )
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Publisher 2003 (KB2810047)
Error: (12/26/2013 09:54:20 AM) (Source: Windows Update Agent) (User: )
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Update für Outlook 2003 Junk E-mail Filter (KB2863822)
Microsoft Office Sessions:
=========================
Error: (12/26/2013 10:26:39 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:26:39.812]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:26:05 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:26:05.312]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:25:30 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:25:30.796]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:24:56 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:24:56.171]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:24:21 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:24:21.671]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:23:46 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:23:46.062]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:23:10 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:23:10.859]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:22:35 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:22:35.000]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:21:57 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:21:57.921]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
Error: (12/26/2013 10:21:22 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2013/12/26 10:21:22.937]: [00000608]: GetDeviceIpAddress: GetAddressByName [BUERO-5490] Error
==================== Memory info ===========================
Percentage of memory in use: 46%
Total physical RAM: 2047.48 MB
Available physical RAM: 1095.92 MB
Total Pagefile: 3938.78 MB
Available Pagefile: 3102.19 MB
Total Virtual: 2047.88 MB
Available Virtual: 1935.05 MB
==================== Drives ================================
Drive c: (Programme) (Fixed) (Total:109.91 GB) (Free:53.69 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (Daten) (Fixed) (Total:80.01 GB) (Free:70.27 GB) NTFS
Drive f: (KINGSTON) (Removable) (Total:7.45 GB) (Free:2.36 GB) FAT32
Drive m: (Musik) (Network) (Total:189.92 GB) (Free:73.21 GB) NTFS
Drive z: (Netzwerk) (Network) (Total:931.51 GB) (Free:120.1 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 190 GB) (Disk ID: 0A650A64)
Partition 1: (Active) - (Size=110 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=80 GB) - (Type=05)
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 38CD79D0)
Partition 1: (Active) - (Size=7 GB) - (Type=0B)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-26 12:43:20
Windows 5.1.2600 Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Maxtor_6L200S0 rev.BANC1G10 189,92GB
Running: gmer_2.1.19163.exe; Driver: C:\DOKUME~1\salva\LOKALE~1\Temp\fgldypow.sys
---- System - GMER 2.1 ----
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwAddBootEntry [0xB4891AD0]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwAssignProcessToJobObject [0xB48925AE]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwClose [0xB48D67D0]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateEvent [0xB489E5E0]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateEventPair [0xB489E62C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateIoCompletion [0xB489E7C6]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateKey [0xB48D6184]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateMutant [0xB489E54E]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateSection [0xB489E670]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateSemaphore [0xB489E596]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateThread [0xB4892AE4]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwCreateTimer [0xB489E780]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwDebugActiveProcess [0xB489339C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwDeleteBootEntry [0xB4891B36]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwDeleteKey [0xB48D6E96]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwDeleteValueKey [0xB48D714C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwDuplicateObject [0xB4896B32]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwEnumerateKey [0xB48D6D01]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwEnumerateValueKey [0xB48D6B6C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwLoadDriver [0xB489171E]
SSDT \??\C:\WINDOWS\system32\drivers\aswSP.sys ZwMapViewOfSection [0xB4BA7466]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwModifyBootEntry [0xB4891B9C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwNotifyChangeKey [0xB4896F28]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwNotifyChangeMultipleKeys [0xB4893E2C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenEvent [0xB489E60A]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenEventPair [0xB489E64E]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenIoCompletion [0xB489E7EA]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenKey [0xB48D64E0]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenMutant [0xB489E574]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenProcess [0xB489642C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenSection [0xB489E6FE]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenSemaphore [0xB489E5BE]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenThread [0xB4896814]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwOpenTimer [0xB489E7A4]
SSDT \??\C:\WINDOWS\system32\drivers\aswSP.sys ZwProtectVirtualMemory [0xB4BA720A]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwQueryKey [0xB48D69E7]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwQueryObject [0xB4893CF8]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwQueryValueKey [0xB48D6839]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwQueueApcThread [0xB489384E]
SSDT \??\C:\WINDOWS\system32\drivers\aswSP.sys ZwRenameKey [0xB4BB51EA]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwRestoreKey [0xB48D57CA]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSetBootEntryOrder [0xB4891C02]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSetBootOptions [0xB4891C68]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSetContextThread [0xB4893216]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSetSystemInformation [0xB48917B8]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSetSystemPowerState [0xB489198E]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSetValueKey [0xB48D6F9D]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwShutdownSystem [0xB489191C]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSuspendProcess [0xB4893566]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSuspendThread [0xB48936C8]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwSystemDebugControl [0xB4891A16]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwTerminateProcess [0xB4893054]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwTerminateThread [0xB48931F6]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwVdmControl [0xB4891CCE]
SSDT \??\C:\WINDOWS\system32\drivers\aswSnx.sys ZwWriteVirtualMemory [0xB489260A]
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwCallbackReturn + 25F8 80501E54 4 Bytes JMP FCB489E7
.text ntkrnlpa.exe!ZwCallbackReturn + 2600 80501E5C 5 Bytes [E0, 64, 8D, B4, 74]
.text ntkrnlpa.exe!ZwCallbackReturn + 2606 80501E62 2 Bytes [89, B4]
.text ntkrnlpa.exe!ZwCallbackReturn + 2724 80501F80 4 Bytes [EA, 51, BB, B4]
.text ntkrnlpa.exe!ZwCallbackReturn + 2770 80501FCC 12 Bytes [02, 1C, 89, B4, 68, 1C, 89, ...]
.text ...
PAGE ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 5EC 8059BA02 4 Bytes CALL B48944FD \??\C:\WINDOWS\system32\drivers\aswSnx.sys
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB6F9F3C0, 0x84E2FA, 0xE8000020]
---- User code sections - GMER 2.1 ----
.text C:\WINDOWS\System32\svchost.exe[156] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[156] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE[260] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE[260] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Google\Update\GoogleUpdate.exe[284] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Google\Update\GoogleUpdate.exe[284] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\AVAST Software\Avast\AvastSvc.exe[292] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\AVAST Software\Avast\AvastSvc.exe[292] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Brother\Brmfcmon\BrMfimon.exe[332] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Brother\Brmfcmon\BrMfimon.exe[332] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\brsvc01a.exe[532] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\brsvc01a.exe[532] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\brss01a.exe[564] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\brss01a.exe[564] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\spoolsv.exe[572] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\spoolsv.exe[572] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\wscntfy.exe[592] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\wscntfy.exe[592] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[608] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[608] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe[648] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe[648] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\smss.exe[708] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[740] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe[740] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Nuance\PaperPort\PDFProFiltSrvPP.exe[756] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Nuance\PaperPort\PDFProFiltSrvPP.exe[756] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\SCardSvr.exe[792] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\SCardSvr.exe[792] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\CAPRPCSK.EXE[888] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\CAPRPCSK.EXE[888] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\csrss.exe[972] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\csrss.exe[972] KERNEL32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe[1020] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe[1020] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\wuauclt.exe[1060] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\wuauclt.exe[1060] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\winlogon.exe[1092] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\winlogon.exe[1092] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\services.exe[1232] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\services.exe[1232] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\lsass.exe[1244] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\lsass.exe[1244] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[1472] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[1472] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe[1556] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe[1556] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[1604] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[1604] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\alg.exe[1652] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\alg.exe[1652] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Logitech\SetPoint\SetPoint.exe[1656] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Logitech\SetPoint\SetPoint.exe[1656] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\FreePDF_XP\fpassist.exe[1680] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\FreePDF_XP\fpassist.exe[1680] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[1712] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[1712] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[1752] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[1752] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe[1808] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe[1808] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\ControlCenter4\BrCtrlCntr.exe[1852] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\ControlCenter4\BrCtrlCntr.exe[1852] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[1880] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[1880] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe[1888] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe[1888] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[1964] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\svchost.exe[1964] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Java\jre7\bin\jqs.exe[2028] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Java\jre7\bin\jqs.exe[2028] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Browny02\Brother\BrStMonW.exe[2056] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Browny02\Brother\BrStMonW.exe[2056] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\AVAST Software\Avast\AvastUI.exe[2064] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\AVAST Software\Avast\AvastUI.exe[2064] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\ctfmon.exe[2108] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\ctfmon.exe[2108] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[2120] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[2120] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FLEXnet\Connect\11\ISUSPM.exe[2416] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FLEXnet\Connect\11\ISUSPM.exe[2416] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\Explorer.EXE[2676] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\Explorer.EXE[2676] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.EXE[2708] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.EXE[2708] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\ControlCenter4\BrCcUxSys.exe[2772] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\ControlCenter4\BrCcUxSys.exe[2772] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Dokumente und Einstellungen\salva\Desktop\gmer_2.1.19163.exe[2816] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Dokumente und Einstellungen\salva\Desktop\gmer_2.1.19163.exe[2816] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Browny02\BrYNSvc.exe[2912] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Browny02\BrYNSvc.exe[2912] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[3092] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\svchost.exe[3092] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Brother\ControlCenter3\brccMCtl.exe[3132] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Brother\ControlCenter3\brccMCtl.exe[3132] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\System32\wbem\wmiapsrv.exe[3284] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\System32\wbem\wmiapsrv.exe[3284] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Nuance\PaperPort\pptd40nt.exe[3348] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Nuance\PaperPort\pptd40nt.exe[3348] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe[3372] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe[3372] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE[3504] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE[3504] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\Programme\Brother\Brmfcmon\BRMFCWND.EXE[3528] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\Programme\Brother\Brmfcmon\BRMFCWND.EXE[3528] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE[3564] ntdll.dll!RtlDosSearchPath_U + 186 7C926865 1 Byte [62]
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE[3564] kernel32.dll!GetBinaryTypeW + 80 7C868E04 1 Byte [62]
---- Devices - GMER 2.1 ----
AttachedDevice \FileSystem\Ntfs \Ntfs tdrpm258.sys
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.sys
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 tdrpm258.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 fltmgr.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 tdrpm258.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 fltmgr.sys
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.sys
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.sys
AttachedDevice \FileSystem\Fastfat \Fat tdrpm258.sys
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys
---- EOF - GMER 2.1 ----
Vielen Dank für Eure Mühen. |
|
26.12.2013, 14:19
| #2 |
| /// the machine /// TB-Ausbilder    | svchost prozess wird von avast geblockt Win-XP Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.
__________________ |
|
27.12.2013, 10:44
| #3 |
| | svchost prozess wird von avast geblockt Win-XP Hallo Schrauber, danke das du dich meiner annimmst.
__________________Habe Combofix gestartet, es hat die Wiederherstelungskonsole installiert. Vor dem Scan hab ich das Patchkabel rausgezogen. Scan hat gestartet um 14:53, mit der Meldung: ... Scan dauert normalerweise nicht länger als 10 min .... das ist nun 3h her, der Bildschirm ist wie eingefroren (die Uhrzeit ist noch bei 14:53, es passiert scheinbar nichts auch keine Aktivität der Festplatte zu hören. Ich hatte wohl noch einen bildschirmschoner aktiv, ob der da irgendwie reingefunkt hat weiss ich allerdings nicht. Was soll ich tun? Soll ich den Rechner resetten? Guten Morgen, gestern hat sich noch der Monitor abgeschaltet und ich musste dann neu booten. Habe den Bildschirmschoner und Monitorabschaltung deaktiviert und Combofix noachmals gestartet; dieses mal ist er nicht eingefroren, hat aber den scan nicht beendet. Die Uhrzeit lief normal weiter, hab Stunden später versucht das Fenster von Combofix zu schließen ging aber nicht, normales runterfahren ging auch nicht mehr, erneuter hard-reset. soweit mal zur Info |
|
27.12.2013, 17:07
| #4 |
| /// the machine /// TB-Ausbilder | svchost prozess wird von avast geblockt Win-XP Lass CF weg. Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.12.2013, 19:49
| #5 |
| | svchost prozess wird von avast geblockt Win-XP Hallo Schrauber Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.27.06 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 salva :: SF [Administrator] Schutz: Aktiviert 27.12.2013 18:05:55 mbam-log-2013-12-27 (18-05-55).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 276732 Laufzeit: 1 Stunde(n), 59 Minute(n), Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 5 C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\{00005749-FDFF-325D} (Trojan.Ransom.ED) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\services.exe (Worm.Brontok) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Dokumente und Einstellungen\salva\Desktop\.url (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Dokumente und Einstellungen\salva\services.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\WINDOWS\Casino-Smiley.ico (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 28/12/2013 um 17:02:44
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits)
# Benutzername : salva - SF
# Gestartet von : C:\Dokumente und Einstellungen\salva\Desktop\adwcleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\searchplugins\bingp.xml
Datei Gefunden : C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\searchplugins\winamp-search.xml
Datei Gefunden : C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\user.js
Datei Gefunden : C:\Programme\Mozilla Firefox\.autoreg
Datei Gefunden : C:\Programme\Mozilla Firefox\searchplugins\avg-secure-search.xml
Ordner Gefunden C:\Programme\icqtoolbar
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\Ask.com
Schlüssel Gefunden : HKCU\Software\AskToolbar
Schlüssel Gefunden : HKCU\Software\FLEXnet
Schlüssel Gefunden : HKCU\Software\ICQToolbar
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{055FD26D-3A88-4E15-963D-DC8493744B1D}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gefunden : HKCU\Software\YahooPartnerToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
***** [ Browser ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Mozilla Firefox v3.5.11 (de)
[ Datei : C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\prefs.js ]
Zeile gefunden : user_pref("browser.search.defaulturl", "hxxp://slirsredirect.search.aol.com/slirs_hxxp/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=");
Zeile gefunden : user_pref("winamp_toolbar.strbundle.msg", "Winamp Toolbar");
*************************
AdwCleaner[R0].txt - [4918 octets] - [28/12/2013 17:02:44]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4978 octets] ##########
ADWCleaner: nach dem scan hab ich auf löschen gedrückt, er hat angezeigt "Löschen Ordner" dann ist er eingefroren, hat nur hard-reset geholfen. Ein erneuter scan zeigt den glciehen Bericht und das gleiche Verhalten. Denke ein Teil hat später JRT geläscht, den Rest könnte ich bei Bedarf händisch löschen. Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by salva on 28.12.2013 at 19:12:15,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Successfully deleted: [Registry Key] "hkey_current_user\software\ask.com"
Successfully deleted: [Registry Key] "hkey_current_user\software\asktoolbar"
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Programme\icqtoolbar"
~~~ FireFox
Successfully deleted: [File] C:\Dokumente und Einstellungen\salva\Anwendungsdaten\mozilla\firefox\profiles\r3pbcy4c.default\user.js
Successfully deleted the following from C:\Dokumente und Einstellungen\salva\Anwendungsdaten\mozilla\firefox\profiles\r3pbcy4c.default\prefs.js
user_pref("browser.search.defaulturl", "hxxp://slirsredirect.search.aol.com/slirs_hxxp/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=");
user_pref("google.toolbar.button_option.cached.gtbSearchBooks", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchBooks\" t
user_pref("google.toolbar.button_option.cached.gtbSearchCalendar", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchCalend
user_pref("google.toolbar.button_option.cached.gtbSearchDocs", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchDocs\" too
user_pref("google.toolbar.button_option.cached.gtbSearchPhotos", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchPhotos\"
user_pref("google.toolbar.button_option.cached.gtbSearchScholar", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchScholar
user_pref("google.toolbar.button_option.cached.gtbSearchVideo", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchVideo\" t
user_pref("google.toolbar.button_option.cached.gtbstoolbar-google-com_CTK0Y7F4MTG6NKYH03WT-xml", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.o
user_pref("google.toolbar.button_option.cached.gtbstoolbar-google-com_J66T77NJDBMW4FEUU7FA-xml", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.o
user_pref("google.toolbar.search-icon", "data:image/x-icon;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.12.2013 at 19:17:02,40
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Zur Info: nach der Prozedur heute ist seither keine Meldung über den Prozess svchost von Avast mehr gekommen. |
|
29.12.2013, 12:34
| #6 |
| /// the machine /// TB-Ausbilder | svchost prozess wird von avast geblockt Win-XP Schalt mal dein AV ab wenn Adw löschen will, ansonsten lösch händisch was geht. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> svchost prozess wird von avast geblockt Win-XP |
|
30.12.2013, 09:53
| #7 |
| | svchost prozess wird von avast geblockt Win-XP Hallo Schrauber, anbei die log-files Eset Code:
ATTFilter ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1d414c0acb752649aaefd07ddb4b8ac7
# engine=16439
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-29 08:30:36
# local_time=2013-12-29 09:30:36 (+0100, Westeuropäische Normalzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=772 16777213 66 80 272973 634852 0 0
# scanned=99066
# found=0
# cleaned=0
# scan_time=15278
Code:
ATTFilter Results of screen317's Security Check version 0.99.77
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
avast! Internet Security
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities 2012
TuneUp Utilities Language Pack (de-DE)
Java 7 Update 45
Adobe Flash Player 11.6.602.180
Mozilla Firefox (3.5.11) Firefox out of Date!
Mozilla Thunderbird (24.2.0)
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast afwServ.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C::
````````````````````End of Log``````````````````````
Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 29/12/2013 um 16:52:19
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits)
# Benutzername : salva - SF
# Gestartet von : C:\Dokumente und Einstellungen\salva\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Mozilla Firefox v3.5.11 (de)
[ Datei : C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [5058 octets] - [28/12/2013 17:02:44]
AdwCleaner[R1].txt - [5177 octets] - [28/12/2013 19:01:15]
AdwCleaner[R2].txt - [5296 octets] - [28/12/2013 19:10:31]
AdwCleaner[R3].txt - [1139 octets] - [29/12/2013 16:51:09]
AdwCleaner[S0].txt - [365 octets] - [28/12/2013 18:46:25]
AdwCleaner[S1].txt - [365 octets] - [28/12/2013 19:03:08]
AdwCleaner[S2].txt - [1061 octets] - [29/12/2013 16:52:19]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1121 octets] ##########
FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-12-2013
Ran by salva (administrator) on SF on 30-12-2013 09:11:24
Running from C:\Dokumente und Einstellungen\salva\Desktop
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVAST Software) C:\Programme\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\afwServ.exe
(brother Industries Ltd) C:\WINDOWS\system32\BRSVC01A.EXE
(brother Industries Ltd) C:\WINDOWS\system32\BRSS01A.EXE
() C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(Google Inc.) C:\Programme\Google\Update\GoogleUpdate.exe
(NVIDIA Corporation) C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Nuance Communications, Inc.) C:\Programme\Nuance\PaperPort\PDFProFiltSrvPP.exe
(CANON INC.) C:\WINDOWS\system32\CAPRPCSK.EXE
(Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe
(TuneUp Software) C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
(TuneUp Software) C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
(shbox.de) C:\Programme\FreePDF_XP\fpassist.exe
(Brother Industries, Ltd.) C:\Programme\Brother\ControlCenter3\BrccMCtl.exe
(Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe
() C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
(Nuance Communications, Inc.) C:\Programme\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Programme\Browny02\Brother\BrStMonW.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\AvastUI.exe
(Brother Industries, Ltd.) C:\Programme\ControlCenter4\BrCtrlCntr.exe
(Logitech, Inc.) C:\Programme\Logitech\SetPointP\SetPoint.exe
(Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfimon.exe
(Google Inc.) C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Brother Industries, Ltd.) C:\Programme\Browny02\BrYNSvc.exe
(Acresso Corporation) C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FLEXnet\Connect\11\ISUSPM.exe
(CANON INC.) C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
(CANON INC.) C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
(Brother Industries, Ltd.) C:\Programme\ControlCenter4\BrCcUxSys.exe
(Logitech, Inc.) C:\Programme\Gemeinsame Dateien\Logishrd\KHAL3\KHALMNPR.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Farbar) C:\Dokumente und Einstellungen\salva\Desktop\FRST32.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [FreePDF Assistant] - C:\Programme\FreePDF_XP\fpassist.exe [310272 2005-05-27] (shbox.de)
HKLM\...\Run: [ControlCenter3] - C:\Programme\Brother\ControlCenter3\BrCtrCen.exe [86016 2007-12-21] (Brother Industries, Ltd.)
HKLM\...\Run: [CAPON] - C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPONN.EXE [22528 2001-02-14] (CANON INC.)
HKLM\...\Run: [BrMfcWnd] - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe [1085440 2008-04-11] (Brother Industries, Ltd.)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [362952 2010-03-27] ()
HKLM\...\Run: [IndexSearch] - C:\Programme\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] - C:\Programme\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] - C:\Programme\ControlCenter4\BrCcBoot.exe [139264 2010-10-28] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] - C:\Programme\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [AvastUI.exe] - C:\Programme\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-22] (AVAST Software)
HKLM\...\Run: [EvtMgr6] - C:\Programme\Logitech\SetPointP\SetPoint.exe [2296600 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
Winlogon\Notify\LBTWlgn: C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKCU\...\Run: [swg] - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-08-18] (Google Inc.)
HKCU\...\Run: [ISUSPM] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKCU\...\Policies\Explorer: [NoStrCmpLogical] 1
MountPoints2: {631516c2-3ce7-11db-acfe-806d6172696f} - D:\AUTORUN\AUTORUN.EXE
MountPoints2: {6ba63ddf-b97c-11de-92cc-0013d3a4cb7e} - G:\Menu.exe
HKU\Administrator\...\RunOnce: [nlsf] - cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll"
HKU\Administrator\...\RunOnce: [tscuninstall] - C:\WINDOWS\system32\tscupgrd.exe [ 2003-04-02] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [nlsf] - cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll"
HKU\Default User\...\RunOnce: [tscuninstall] - C:\WINDOWS\system32\tscupgrd.exe [ 2003-04-02] (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Canon LBP-810-Statusfenster.LNK
ShortcutTarget: Canon LBP-810-Statusfenster.LNK -> C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE (CANON INC.)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Zahlungserinnerung.lnk
ShortcutTarget: Zahlungserinnerung.lnk -> Z:\Proficash\wzed.exe (No File)
Startup: C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Autostart\FRITZ!fax.lnk
ShortcutTarget: FRITZ!fax.lnk -> C:\Programme\FRITZ!\FriFax32.exe (AVM Berlin)
Startup: C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Autostart\FRITZ!fon.lnk
ShortcutTarget: FRITZ!fon.lnk -> C:\Programme\FRITZ!\FriFon32.exe (AVM Berlin)
Startup: C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Autostart\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
BootExecute: autocheck autochk * sprestrt
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
HKCU\Software\Microsoft\Internet Explorer\Main,Prev Search Bar = hxxp://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
BHO: T3ToolbarHelper Class - {164E93C4-09BF-4647-9E0B-D5FBB1D35E63} - C:\Programme\DasÖrtliche Toolbar\DasOertlicheToolbar1.dll ()
BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Programme\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Buyertools - {7C7A8947-5935-4430-AC0E-E7D04697414E} - C:\Programme\Buyertools Reminder\IEButtonBuyertoolsInterface.dll ()
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - DasÖrtliche Toolbar - {6E5B18CB-0EB6-4461-88B8-33B4683613D5} - C:\Programme\DasÖrtliche Toolbar\DasOertlicheToolbar1.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
DPF: {1DB93715-3B60-43EE-93E6-279BB3E1DF76} hxxp://cadillac-pforzheim.homeip.net/cab/OCXChecker_6110.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\yinsthelper.dll
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} hxxp://office.microsoft.com/officeupdate/content/opuc3.cab
DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} hxxp://liveupdate.msi.com.tw/autobios/LOnline/install.cab
DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} hxxp://h30155.www3.hp.com/ediags/dd/install/guidedsolutions.cab
DPF: {ADACAA8F-3595-47FE-9C31-9C7471B9BEC7} hxxp://hexenstadl.homeip.net/cab/OCXChecker_8310.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DBAFE6AD-DC14-45DF-A3F7-F8832289A1CD} hxxp://arena-kaempfelbach.homeip.net/cab/DownloadFile_8000.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {FDC847F8-DA70-4442-8072-FF883F34D14A} hxxp://toolbar.dasoertliche-marketing.de/toolbar/normal/download/DasOertlicheToolbar.cab
DPF: {FEC048AB-277A-460C-BF50-1A4193AEF148} hxxp://hexenstadl.homeip.net/cab/DownloadCenter_8300.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{56FD40C0-5D0D-44C0-9A2A-4DCF8F0F3A00}: [NameServer]192.168.120.252,192.168.120.253
Tcpip\..\Interfaces\{D62918F6-5A1D-4031-97DF-6F24DD57874E}: [NameServer]192.168.0.1
FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.1 - C:\Programme\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.3 - C:\Programme\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\PROGRA~1\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\Tracker Software\npPDFXCviewNPPlugin.dll No File
FF SearchPlugin: C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Wortliste von hxxp://tkltrans.sf.net (alte und neue deutsche Rechtschreibung) - C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\Extensions\de-DE-comb@dictionaries.addons.mozilla.org
FF Extension: Google Toolbar for Firefox - C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Buyertools - C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\Extensions\{411F2F11-830F-4AB5-B7F0-FBC77B870B5A}
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\Extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}
FF Extension: Adblock Plus - C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Mozilla\Firefox\Profiles\r3pbcy4c.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF Extension: Google Toolbar for Firefox - C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Buyertools - C:\Programme\Mozilla Firefox\extensions\{411F2F11-830F-4AB5-B7F0-FBC77B870B5A}
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Programme\AVAST Software\Avast\WebRep\FF
FF HKLM\...\Sunbird\Extensions: [{A69F5EC7-88F0-4902-A15C-E569DFA33C3A}] - C:\Programme\BirdieSync\Sunbird Service
FF Extension: BirdieSync - C:\Programme\BirdieSync\Sunbird Service
FF HKLM\...\Thunderbird\Extensions: [{A69F5EC7-88F0-4902-A15C-E569DFA33C3A}] - C:\Programme\BirdieSync\Thunderbird Service
FF Extension: BirdieSync - C:\Programme\BirdieSync\Thunderbird Service
========================== Services (Whitelisted) =================
R2 AcrSch2Svc; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [752184 2010-03-27] ()
R2 afcdpsrv; C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe [2480048 2010-10-15] (Acronis)
R2 avast! Antivirus; C:\Programme\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-22] (AVAST Software)
R2 avast! Firewall; C:\Programme\AVAST Software\Avast\afwServ.exe [113704 2013-12-26] (AVAST Software)
R2 Brother XP spl Service; C:\WINDOWS\system32\brsvc01a.exe [57344 2002-04-11] (brother Industries Ltd)
R3 BrYNSvc; C:\Programme\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
S3 de_serv; C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe [315392 2005-03-04] (AVM Berlin)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2011-08-18] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2011-08-18] (Google Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2012-08-14] (Google)
S3 LBTServ; C:\Programme\Gemeinsame Dateien\LogiShrd\Bluetooth\lbtserv.exe [293144 2013-06-13] (Logitech, Inc.)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2013-12-11] (Mozilla Foundation)
R2 nvUpdatusService; C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-08] (NVIDIA Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
R2 PDFProFiltSrvPP; C:\Programme\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
S3 SandraAgentSrv; C:\Programme\SiSoftware\SiSoftware Sandra Lite 2010.SP2\RpcAgentSrv.exe [93848 2009-08-10] (SiSoftware)
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [161384 2013-02-07] (Skype Technologies)
S4 SQLWriter; C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe [86872 2009-05-27] (Microsoft Corporation)
R2 TeamViewer8; C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe [5087584 2013-10-01] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [1514304 2011-12-14] (TuneUp Software)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S2 Ati HotKey Poller; %SystemRoot%\system32\Ati2evxx.exe [x]
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [x]
S3 DATEV Update-Service; "C:\DATEV\PROGRAMM\INSTALL\DvInesASDSvc.Exe" [x]
S2 DatevPrintService; C:\DATEV\PROGRAMM\B0001442\PSNTSERV.EXE [x]
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf"
S2 WmdmPmSp; C:\WINDOWS\System32\mspmspsv.dll [x]
==================== Drivers (Whitelisted) ====================
R1 AmdK8; C:\Windows\System32\DRIVERS\AmdK8.sys [36352 2005-03-09] (Advanced Micro Devices)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [26136 2013-12-26] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2013-12-22] (AVAST Software)
R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12112 2013-12-26] (ALWIL Software)
R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [252336 2013-12-26] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2013-12-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-22] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [775952 2013-12-22] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [410528 2013-12-22] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2013-12-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2013-12-22] ()
R2 AVMPORT; C:\Windows\System32\drivers\avmport.sys [59520 2004-05-24] (AVM Berlin)
R3 AVMWAN; C:\Windows\System32\DRIVERS\avmwan.sys [37568 2005-08-28] (AVM GmbH)
R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [32256 2005-05-11] (B.H.A Corporation)
R3 FETNDISB; C:\Windows\System32\DRIVERS\fetnd5b.sys [42496 2004-04-15] (VIA Technologies, Inc. )
R3 fpcibase; C:\Windows\System32\DRIVERS\fpcibase.sys [444416 2005-08-28] (AVM GmbH)
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 KOBCCEX; C:\Windows\System32\drivers\KOBCCEX.sys [23168 2009-10-08] (KOBIL Systems GmbH)
S3 KOBCCID; C:\Windows\System32\drivers\KOBCCID.sys [83840 2009-10-08] (KOBIL Systems GmbH)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28312 2013-05-23] (Logitech, Inc.)
S3 MSI_DVD_010507; C:\Program Files\MSI\MSIWDev\DVDSYS32_100507.sys [22328 2010-05-10] (Your Corporation)
S3 MSI_MSIBIOS_010507; C:\Program Files\MSI\MSIWDev\msibios32_100507.sys [25912 2010-05-10] (Your Corporation)
S3 MSI_VGASYS_010507; C:\Program Files\MSI\MSIWDev\VGASYS32_100507.sys [16696 2010-05-10] ()
S3 NETFRITZ; C:\Windows\System32\DRIVERS\NETFRITZ.SYS [311808 2005-03-04] (AVM Berlin)
R2 PMEM; C:\WINDOWS\system32\drivers\pmemnt.sys [7168 1999-03-08] (Microsoft Corporation)
R2 RapidPort; C:\WINDOWS\system32\Drivers\CAPLPTN.SYS [22912 2001-02-14] (CANON INC.)
S3 SANDRA; C:\Programme\SiSoftware\SiSoftware Sandra Lite 2010.SP2\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 SONYPVU1; C:\Windows\System32\DRIVERS\SONYPVU1.SYS [7552 2005-08-28] (Sony Corporation)
R0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [911680 2010-10-15] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [10064 2011-10-31] (TuneUp Software)
R3 VIAudio; C:\Windows\System32\drivers\vinyl97.sys [179968 2005-04-08] (VIA Technologies, Inc.)
R0 videX32; C:\Windows\System32\DRIVERS\videX32.sys [9216 2006-10-17] (VIA Technologies, Inc.)
R0 xfilt; C:\Windows\System32\DRIVERS\xfilt.sys [17920 2006-10-18] (VIA Technologies,Inc)
S3 catchme; \??\C:\DOKUME~1\salva\LOKALE~1\Temp\catchme.sys [x]
S1 cdrbsvsd; No ImagePath
S3 FETNDIS; system32\DRIVERS\fetnd5.sys [x]
S3 GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS [x]
S4 IntelIde; No ImagePath
S3 NTIOLib_1_0_4; \??\C:\Programme\MSI\Live Update 5\NTIOLib.sys [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U3 TlntSvr;
U5 UnlockerDriver5; C:\Programme\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()
U3 Winsock - Google Desktop Search Backup Before First Install; No ImagePath
U3 Winsock - Google Desktop Search Backup Before Last Install; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-30 09:11 - 2013-12-30 09:11 - 00023405 _____ C:\Dokumente und Einstellungen\salva\Desktop\FRST.txt
2013-12-30 09:07 - 2013-12-30 09:07 - 00000882 _____ C:\Dokumente und Einstellungen\salva\Desktop\securitycheck.txt
2013-12-29 16:59 - 2013-12-29 16:59 - 00000000 ____D C:\Programme\ESET
2013-12-29 16:56 - 2013-12-29 16:56 - 00001201 _____ C:\Dokumente und Einstellungen\salva\Desktop\AdwCleaner[S2].txt
2013-12-29 16:26 - 2013-12-29 16:26 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\salva\Desktop\esetsmartinstaller_enu.exe
2013-12-29 16:26 - 2013-12-29 16:26 - 00891200 _____ C:\Dokumente und Einstellungen\salva\Desktop\SecurityCheck.exe
2013-12-28 19:12 - 2013-12-28 19:12 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-28 17:02 - 2013-12-29 16:52 - 00000000 ____D C:\AdwCleaner
2013-12-27 17:53 - 2013-12-27 17:53 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Malwarebytes
2013-12-27 17:53 - 2013-12-27 17:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-12-27 15:31 - 2013-12-27 15:42 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Dokumente\LogiShrd
2013-12-27 15:31 - 2013-12-27 15:31 - 00016400 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-12-27 15:31 - 2013-12-27 15:31 - 00000339 _____ C:\WINDOWS\LkmdfCoInst.log
2013-12-27 15:31 - 2013-12-27 15:31 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\Logishrd
2013-12-27 15:29 - 2013-12-27 15:31 - 00009891 _____ C:\WINDOWS\LDPINST.LOG
2013-12-27 15:29 - 2013-12-27 15:31 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Logitech
2013-12-27 15:28 - 2013-12-27 15:42 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Logishrd
2013-12-27 12:59 - 2013-12-27 12:59 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Logishrd
2013-12-27 12:34 - 2013-12-27 12:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2345886$
2013-12-27 12:33 - 2013-12-27 12:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB970430$
2013-12-27 12:26 - 2013-12-27 12:29 - 00012467 _____ C:\WINDOWS\KB2510531-IE8.log
2013-12-27 12:16 - 2013-12-29 21:30 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Desktop\trojaner-board
2013-12-27 11:26 - 2013-12-27 12:34 - 00021622 _____ C:\WINDOWS\KB2345886.log
2013-12-26 21:24 - 2013-12-26 21:26 - 00000000 ___SD C:\ComboFix
2013-12-26 14:50 - 2013-12-26 14:50 - 00000000 _RSHD C:\cmdcons
2013-12-26 14:50 - 2013-12-25 18:30 - 00000211 _____ C:\Boot.bak
2013-12-26 14:50 - 2004-08-03 23:00 - 00262448 __RSH C:\cmldr
2013-12-26 14:46 - 2013-12-26 14:46 - 00000000 ___RD C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Verwaltung
2013-12-26 14:46 - 2013-12-26 14:46 - 00000000 ____D C:\WINDOWS\erdnt
2013-12-26 14:46 - 2013-12-26 14:46 - 00000000 ____D C:\Qoobox
2013-12-26 14:46 - 2011-06-26 07:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-12-26 14:46 - 2010-11-07 18:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-12-26 14:46 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-12-26 14:46 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-12-26 14:46 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-12-26 14:46 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-12-26 14:46 - 2000-08-31 01:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-12-26 14:46 - 2000-08-31 01:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-12-26 14:46 - 2000-08-31 01:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-12-26 14:01 - 2013-12-26 14:01 - 00001712 _____ C:\Dokumente und Einstellungen\All Users\Desktop\avast! Internet Security.lnk
2013-12-26 14:00 - 2013-12-26 13:59 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2013-12-26 14:00 - 2013-12-26 13:58 - 00252336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys
2013-12-26 13:58 - 2013-12-26 13:58 - 00012112 _____ (ALWIL Software) C:\WINDOWS\system32\Drivers\aswNdis.sys
2013-12-26 10:26 - 2013-12-26 10:27 - 00024757 _____ C:\Dokumente und Einstellungen\salva\Desktop\Addition.txt
2013-12-26 10:25 - 2013-12-26 10:25 - 00000000 ____D C:\FRST
2013-12-26 10:23 - 2013-12-26 10:23 - 00000000 _____ C:\Dokumente und Einstellungen\salva\defogger_reenable
2013-12-26 10:22 - 2013-12-26 10:08 - 01061649 _____ (Farbar) C:\Dokumente und Einstellungen\salva\Desktop\FRST32.exe
2013-12-26 10:12 - 2013-12-26 10:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-12-26 10:11 - 2013-12-26 10:11 - 00071128 _____ C:\WINDOWS\KB951376-v2.log
2013-12-26 10:11 - 2013-12-26 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB959426$
2013-12-26 10:11 - 2013-12-26 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952954$
2013-12-26 10:11 - 2013-12-26 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951376-v2$
2013-12-26 10:09 - 2013-12-26 10:09 - 00077466 _____ C:\WINDOWS\KB2744842-IE8.log
2013-12-26 10:09 - 2013-10-29 08:57 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
2013-12-26 10:08 - 2013-12-26 10:09 - 00079952 _____ C:\WINDOWS\KB2618444-IE8.log
2013-12-26 10:08 - 2013-12-26 10:08 - 00074221 _____ C:\WINDOWS\KB2598845-IE8.log
2013-12-26 10:08 - 2013-12-26 10:08 - 00073578 _____ C:\WINDOWS\KB2467659.log
2013-12-26 10:08 - 2013-12-26 10:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2467659$
2013-12-26 10:08 - 2011-08-16 11:45 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iecompat.dll
2013-12-26 10:07 - 2013-12-26 10:08 - 00085938 _____ C:\WINDOWS\KB982381-IE8.log
2013-12-26 10:07 - 2013-10-29 08:57 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
2013-12-26 10:07 - 2013-10-29 08:57 - 02006016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2013-12-26 10:07 - 2013-10-29 08:57 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
2013-12-26 10:07 - 2013-10-29 08:57 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
2013-12-26 10:07 - 2013-10-29 08:57 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
2013-12-26 10:07 - 2013-10-29 08:57 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2013-12-26 10:07 - 2013-10-29 08:57 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
2013-12-26 10:05 - 2013-12-26 10:07 - 00082171 _____ C:\WINDOWS\ie8.log
2013-12-26 09:57 - 2013-12-26 10:11 - 00211177 _____ C:\WINDOWS\ie8_main.log
2013-12-26 09:56 - 2013-12-26 09:56 - 00053497 _____ C:\WINDOWS\KB946648.log
2013-12-26 09:56 - 2013-12-26 09:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB946648$
2013-12-26 09:55 - 2013-12-28 11:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2712808$
2013-12-26 09:55 - 2013-12-26 09:55 - 00052088 _____ C:\WINDOWS\KB2387149.log
2013-12-26 09:55 - 2013-12-26 09:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2387149$
2013-12-26 09:54 - 2013-12-26 09:54 - 00049184 _____ C:\WINDOWS\KB2659262.log
2013-12-26 09:54 - 2013-12-26 09:54 - 00043799 _____ C:\WINDOWS\KB2564958.log
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960859$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2659262$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2564958$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2479943$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2478971$
2013-12-26 09:53 - 2013-12-26 09:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-12-26 09:53 - 2013-12-26 09:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2758857$
2013-12-26 09:53 - 2013-12-26 09:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-12-26 09:52 - 2013-12-26 09:53 - 00049469 _____ C:\WINDOWS\KB2536276-v2.log
2013-12-26 09:52 - 2013-12-26 09:52 - 00046485 _____ C:\WINDOWS\KB2296011.log
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2691442$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2631813$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2585542$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2296011$
2013-12-26 09:51 - 2013-12-26 09:51 - 00049302 _____ C:\WINDOWS\KB955759.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00043821 _____ C:\WINDOWS\KB975558.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00041758 _____ C:\WINDOWS\KB2378111.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974318$
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB955759$
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2115168$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB969059$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951978$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2655992$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2443105$
2013-12-26 09:49 - 2013-12-26 09:49 - 00045306 _____ C:\WINDOWS\KB2229593.log
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB950974$
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2481109$
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2229593$
2013-12-26 09:48 - 2013-12-26 09:48 - 00043776 _____ C:\WINDOWS\KB2485663.log
2013-12-26 09:48 - 2013-12-26 09:48 - 00043653 _____ C:\WINDOWS\KB2440591.log
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975713$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2598479$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2485663$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2440591$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982132$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898785$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2686509$
2013-12-26 09:46 - 2013-12-26 09:46 - 00037898 _____ C:\WINDOWS\KB961118.log
2013-12-26 09:46 - 2013-12-26 09:46 - 00033806 _____ C:\WINDOWS\KB954155.log
2013-12-26 09:46 - 2013-12-26 09:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978338$
2013-12-26 09:46 - 2013-12-26 09:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971657$
2013-12-26 09:46 - 2013-12-26 09:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB961118$
2013-12-26 09:45 - 2013-12-26 09:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB972270$
2013-12-26 09:45 - 2013-12-26 09:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2013-12-26 09:45 - 2013-12-26 09:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2507938$
2013-12-26 09:44 - 2013-12-26 09:44 - 00040214 _____ C:\WINDOWS\KB956572.log
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974112$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956572$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2845187$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2510581$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2347290$
2013-12-26 09:43 - 2013-12-26 09:43 - 00035138 _____ C:\WINDOWS\KB956844.log
2013-12-26 09:43 - 2013-12-26 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956844$
2013-12-26 09:43 - 2013-12-26 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-12-26 09:43 - 2013-12-26 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2483185$
2013-12-26 09:42 - 2013-12-26 09:42 - 00033908 _____ C:\WINDOWS\KB973869.log
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979687$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975025$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973869$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2719985$
2013-12-26 09:41 - 2013-12-26 09:41 - 00031606 _____ C:\WINDOWS\KB2592799.log
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974571$
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952004$
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2592799$
2013-12-26 09:40 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975560$
2013-12-26 09:40 - 2013-12-26 09:40 - 00031299 _____ C:\WINDOWS\KB2535512.log
2013-12-26 09:40 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973507$
2013-12-26 09:40 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$
2013-12-26 09:40 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2535512$
2013-12-26 09:39 - 2013-12-26 09:39 - 00030216 _____ C:\WINDOWS\KB950762.log
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB977816$
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB950762$
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-12-26 09:38 - 2013-12-26 09:38 - 00029927 _____ C:\WINDOWS\KB2807986.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00029354 _____ C:\WINDOWS\KB2570947.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00029228 _____ C:\WINDOWS\KB952287.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952287$
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2570947$
2013-12-26 09:37 - 2013-12-26 09:37 - 00029409 _____ C:\WINDOWS\KB973904.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00028709 _____ C:\WINDOWS\KB2603381.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00023623 _____ C:\WINDOWS\KB978695.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973904$
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2603381$
2013-12-26 09:36 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-26 09:36 - 2013-12-26 09:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2508429$
2013-12-26 09:36 - 2013-12-26 09:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2419632$
2013-12-26 09:35 - 2013-12-26 09:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974392$
2013-12-26 09:35 - 2013-12-26 09:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2749655$
2013-12-26 09:35 - 2013-12-26 09:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2653956$
2013-12-26 09:34 - 2013-12-26 09:34 - 00016081 _____ C:\WINDOWS\KB952069.log
2013-12-26 09:34 - 2013-12-26 09:34 - 00013276 _____ C:\WINDOWS\KB2803821-v2.log
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB977914$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971029$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2506212$
2013-12-26 09:33 - 2013-12-26 09:33 - 00020133 _____ C:\WINDOWS\KB2698365.log
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978542$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2698365$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2619339$
2013-12-26 09:32 - 2013-12-26 09:32 - 00018244 _____ C:\WINDOWS\KB981997.log
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB981997$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979482$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979309$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978706$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2727528$
2013-12-26 09:31 - 2013-12-26 09:31 - 00019003 _____ C:\WINDOWS\KB2723135-v2.log
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973815$
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960803$
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982665$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2676562$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2509553$
2013-12-26 09:29 - 2013-12-26 09:29 - 00017651 _____ C:\WINDOWS\KB2393802.log
2013-12-26 09:29 - 2013-12-26 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB923561$
2013-12-26 09:29 - 2013-12-26 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2478960$
2013-12-26 09:29 - 2013-12-26 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2393802$
2013-12-26 09:28 - 2013-12-26 09:29 - 00016138 _____ C:\WINDOWS\KB923561.log
2013-12-26 09:28 - 2013-12-26 09:28 - 00014516 _____ C:\WINDOWS\KB2566454.log
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975467$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB968389$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2620712$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2584146$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2566454$
2013-12-26 09:27 - 2013-12-26 09:27 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2423089$
2013-12-26 09:26 - 2013-12-26 09:28 - 00011354 _____ C:\WINDOWS\KB2423089.log
2013-12-26 04:09 - 2013-12-26 10:11 - 00080664 _____ C:\WINDOWS\KB952954.log
2013-12-26 04:09 - 2008-06-14 18:32 - 00273024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
2013-12-26 04:08 - 2013-12-26 10:11 - 00079356 _____ C:\WINDOWS\KB959426.log
2013-12-26 04:08 - 2013-12-26 09:55 - 00061327 _____ C:\WINDOWS\KB2712808.log
2013-12-26 04:08 - 2013-12-26 09:54 - 00060485 _____ C:\WINDOWS\KB2479943.log
2013-12-26 04:08 - 2013-12-26 09:54 - 00060368 _____ C:\WINDOWS\KB960859.log
2013-12-26 04:08 - 2013-12-26 09:54 - 00059562 _____ C:\WINDOWS\KB2478971.log
2013-12-26 04:08 - 2013-12-26 09:53 - 00058467 _____ C:\WINDOWS\KB2758857.log
2013-12-26 04:08 - 2013-12-26 09:53 - 00058315 _____ C:\WINDOWS\KB2544893-v2.log
2013-12-26 04:08 - 2013-12-26 09:52 - 00058981 _____ C:\WINDOWS\KB2585542.log
2013-12-26 04:08 - 2011-07-15 14:29 - 00456320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
2013-12-26 04:08 - 2010-09-18 07:52 - 00953856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mfc40u.dll
2013-12-26 04:07 - 2013-12-26 09:52 - 00058270 _____ C:\WINDOWS\KB2631813.log
2013-12-26 04:07 - 2013-12-26 09:51 - 00057526 _____ C:\WINDOWS\KB2115168.log
2013-12-26 04:07 - 2010-08-23 17:11 - 00617472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comctl32.dll
2013-12-26 04:07 - 2009-11-21 16:54 - 00471552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aclayers.dll
2013-12-26 04:06 - 2013-12-26 09:51 - 00056807 _____ C:\WINDOWS\KB974318.log
2013-12-26 04:06 - 2013-12-26 09:50 - 00056355 _____ C:\WINDOWS\KB951978.log
2013-12-26 04:06 - 2013-12-26 09:50 - 00056247 _____ C:\WINDOWS\KB2655992.log
2013-12-26 04:06 - 2013-12-26 09:50 - 00055739 _____ C:\WINDOWS\KB969059.log
2013-12-26 04:06 - 2013-12-26 09:50 - 00055474 _____ C:\WINDOWS\KB2802968.log
2013-12-26 04:06 - 2013-12-26 09:50 - 00055335 _____ C:\WINDOWS\KB2443105.log
2013-12-26 04:06 - 2013-12-26 09:49 - 00054853 _____ C:\WINDOWS\KB950974.log
2013-12-26 04:06 - 2010-06-14 15:31 - 00744448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpsvc.exe
2013-12-26 04:05 - 2013-12-26 09:48 - 00053931 _____ C:\WINDOWS\KB975713.log
2013-12-26 04:05 - 2013-12-26 09:48 - 00053645 _____ C:\WINDOWS\KB2598479.log
2013-12-26 04:05 - 2013-12-26 09:48 - 00052453 _____ C:\WINDOWS\KB2898785.log
2013-12-26 04:05 - 2013-12-26 09:47 - 00048966 _____ C:\WINDOWS\KB982132.log
2013-12-26 04:05 - 2013-12-26 09:46 - 00049099 _____ C:\WINDOWS\KB971657.log
2013-12-26 04:05 - 2013-12-26 09:46 - 00049061 _____ C:\WINDOWS\KB978338.log
2013-12-26 04:05 - 2013-07-03 02:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2013-12-26 04:05 - 2010-11-02 16:17 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndproxy.sys
2013-12-26 04:04 - 2013-12-26 09:45 - 00048852 _____ C:\WINDOWS\KB2780091.log
2013-12-26 04:04 - 2013-12-26 09:45 - 00048722 _____ C:\WINDOWS\KB2507938.log
2013-12-26 04:04 - 2013-12-26 09:44 - 00051049 _____ C:\WINDOWS\KB2510581.log
2013-12-26 04:04 - 2013-12-26 09:44 - 00048088 _____ C:\WINDOWS\KB974112.log
2013-12-26 04:04 - 2010-08-27 09:01 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\t2embed.dll
2013-12-26 04:04 - 2009-10-15 17:28 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fontsub.dll
2013-12-26 04:04 - 2009-03-06 15:19 - 00286720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pdh.dll
2013-12-26 04:04 - 2009-02-09 12:21 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\services.exe
2013-12-26 04:04 - 2009-02-09 11:51 - 00678400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\advapi32.dll
2013-12-26 04:04 - 2009-02-09 11:51 - 00473600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastprox.dll
2013-12-26 04:04 - 2009-02-09 11:51 - 00453120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvsd.dll
2013-12-26 04:04 - 2009-02-09 11:51 - 00401408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rpcss.dll
2013-12-26 04:04 - 2009-02-06 11:10 - 00227840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvse.exe
2013-12-26 04:04 - 2009-01-09 20:19 - 01089883 ____C C:\WINDOWS\system32\dllcache\ntprint.cat
2013-12-26 04:03 - 2013-12-26 09:43 - 00045404 _____ C:\WINDOWS\KB979687.log
2013-12-26 04:03 - 2013-12-26 09:42 - 00043824 _____ C:\WINDOWS\KB2719985.log
2013-12-26 04:03 - 2013-12-26 09:42 - 00043044 _____ C:\WINDOWS\KB975025.log
2013-12-26 04:03 - 2013-12-26 09:41 - 00043532 _____ C:\WINDOWS\KB952004.log
2013-12-26 04:03 - 2009-07-27 23:24 - 00128512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhtmled.ocx
2013-12-26 04:03 - 2009-06-21 22:45 - 00153088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\triedit.dll
2013-12-26 04:02 - 2013-12-26 09:41 - 00041273 _____ C:\WINDOWS\KB974571.log
2013-12-26 04:02 - 2013-12-26 09:40 - 00040942 _____ C:\WINDOWS\KB973507.log
2013-12-26 04:02 - 2013-12-26 09:40 - 00040469 _____ C:\WINDOWS\KB977816.log
2013-12-26 04:02 - 2011-04-21 14:37 - 00105472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mup.sys
2013-12-26 04:02 - 2008-05-08 15:02 - 00203136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rmcast.sys
2013-12-26 04:01 - 2013-07-17 01:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-12-26 04:01 - 2013-07-17 01:58 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-12-26 04:01 - 2013-02-12 01:32 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
2013-12-26 04:01 - 2013-02-12 01:32 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
2013-12-26 04:01 - 2008-05-01 15:34 - 00331776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadce.dll
2013-12-26 04:00 - 2013-12-26 09:36 - 00039029 _____ C:\WINDOWS\KB2419632.log
2013-12-26 03:59 - 2013-12-26 09:36 - 00032369 _____ C:\WINDOWS\KB2508429.log
2013-12-26 03:59 - 2013-12-26 09:35 - 00032417 _____ C:\WINDOWS\KB2653956.log
2013-12-26 03:59 - 2013-12-26 09:35 - 00032087 _____ C:\WINDOWS\KB2749655.log
2013-12-26 03:59 - 2013-12-26 09:35 - 00031667 _____ C:\WINDOWS\KB974392.log
2013-12-26 03:59 - 2013-12-26 09:34 - 00030583 _____ C:\WINDOWS\KB2506212.log
2013-12-26 03:58 - 2013-12-26 09:34 - 00030385 _____ C:\WINDOWS\KB977914.log
2013-12-26 03:58 - 2012-05-28 19:16 - 00536576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado15.dll
2013-12-26 03:57 - 2013-12-26 09:33 - 00029197 _____ C:\WINDOWS\KB2705219-v2.log
2013-12-26 03:57 - 2013-12-26 09:33 - 00028519 _____ C:\WINDOWS\KB2619339.log
2013-12-26 03:57 - 2013-12-26 09:33 - 00027506 _____ C:\WINDOWS\KB978542.log
2013-12-26 03:56 - 2013-12-26 09:32 - 00027367 _____ C:\WINDOWS\KB2727528.log
2013-12-26 03:56 - 2013-12-26 09:32 - 00027360 _____ C:\WINDOWS\KB978706.log
2013-12-26 03:56 - 2013-12-26 09:32 - 00027274 _____ C:\WINDOWS\KB979482.log
2013-12-26 03:56 - 2013-12-26 09:31 - 00027656 _____ C:\WINDOWS\KB960803.log
2013-12-26 03:56 - 2013-12-26 09:31 - 00026881 _____ C:\WINDOWS\KB973815.log
2013-12-26 03:56 - 2013-12-26 09:30 - 00028283 _____ C:\WINDOWS\KB2813345.log
2013-12-26 03:56 - 2013-12-26 09:30 - 00028007 _____ C:\WINDOWS\KB2509553.log
2013-12-26 03:56 - 2012-07-04 15:05 - 00139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
2013-12-26 03:56 - 2010-06-18 14:36 - 03558912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\moviemk.exe
2013-12-26 03:55 - 2013-12-26 09:30 - 00028915 _____ C:\WINDOWS\KB2676562.log
2013-12-26 03:55 - 2013-12-26 09:30 - 00024766 _____ C:\WINDOWS\KB982665.log
2013-12-26 03:55 - 2013-12-26 09:28 - 00023666 _____ C:\WINDOWS\KB2620712.log
2013-12-26 03:55 - 2013-12-26 09:28 - 00023148 _____ C:\WINDOWS\KB2584146.log
2013-12-26 03:55 - 2013-07-04 08:33 - 02195840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2013-12-26 03:55 - 2013-07-04 08:33 - 02152448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2013-12-26 03:55 - 2013-07-04 08:33 - 02072448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2013-12-26 03:55 - 2013-07-04 08:33 - 02031104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2013-12-26 03:55 - 2011-07-08 15:02 - 00010496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndistapi.sys
2013-12-26 03:55 - 2010-12-09 16:15 - 00743936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntdll.dll
2013-12-26 03:55 - 2010-07-16 13:01 - 00220160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wordpad.exe
2013-12-26 03:55 - 2009-11-21 16:54 - 01206508 ____C C:\WINDOWS\system32\dllcache\sysmain.sdb
2013-12-26 03:54 - 2013-12-26 09:28 - 00024137 _____ C:\WINDOWS\KB968389.log
2013-12-26 03:54 - 2013-12-26 09:28 - 00023993 _____ C:\WINDOWS\KB975467.log
2013-12-26 03:54 - 2010-10-11 15:59 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab.exe
2013-12-26 03:50 - 2013-12-26 09:32 - 00026948 _____ C:\WINDOWS\KB979309.log
2013-12-26 03:49 - 2013-08-09 01:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-12-26 03:49 - 2013-08-09 01:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-12-26 03:49 - 2013-08-09 01:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-12-26 03:49 - 2009-03-18 12:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-12-25 19:11 - 2013-12-25 19:11 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
2013-12-25 18:39 - 2013-12-25 18:39 - 00000781 _____ C:\Dokumente und Einstellungen\LocalService\Startmenü\Programme\Windows Media Player.lnk
2013-12-25 18:37 - 2013-12-25 18:37 - 00000187 _____ C:\WINDOWS\spupdsvc.log.1.log
2013-12-25 18:36 - 2013-12-26 10:16 - 00000792 _____ C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Internet Explorer.lnk
2013-12-25 18:36 - 2013-12-25 18:39 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Startmenü\Programme
2013-12-25 18:36 - 2013-12-25 18:36 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Startmenü
2013-12-25 18:32 - 2013-12-25 18:33 - 00208678 _____ C:\WINDOWS\KB938464.log
2013-12-25 18:32 - 2013-12-25 18:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB938464$
2013-12-25 18:30 - 2013-12-26 10:15 - 00039313 _____ C:\WINDOWS\spupdsvc.log
2013-12-25 18:29 - 2012-06-05 16:49 - 01372672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxml6.dll
2013-12-25 18:29 - 2012-06-02 15:19 - 00219160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaucpl.cpl
2013-12-25 18:29 - 2012-06-02 15:19 - 00219160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaucpl.cpl
2013-12-25 18:29 - 2008-04-14 07:53 - 00380928 ____N (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl
2013-12-25 18:29 - 2008-04-14 07:27 - 00093184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxml6r.dll
2013-12-25 18:25 - 2006-12-29 00:31 - 00019569 _____ C:\WINDOWS\003384_.tmp
2013-12-25 18:24 - 2013-12-25 18:25 - 00000000 __HDC C:\WINDOWS\$NtServicePackUninstall$
2013-12-25 18:24 - 2013-12-25 18:24 - 00000557 _____ C:\WINDOWS\medctroc.Log
2013-12-25 18:21 - 2013-12-25 18:33 - 00512799 _____ C:\WINDOWS\svcpack.log
2013-12-25 17:58 - 2013-12-25 19:05 - 00000781 _____ C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Windows Media Player.lnk
2013-12-25 17:57 - 2013-12-25 17:57 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Help
2013-12-25 17:57 - 2013-12-25 17:57 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Help
2013-12-25 17:51 - 2008-04-14 07:52 - 00065024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unicdime.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00571392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlgnt.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00426041 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicepad.dll
2013-12-25 17:51 - 2008-04-14 07:51 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winzm.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winsp.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winpy.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00086073 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicesub.dll
2013-12-25 17:51 - 2008-04-14 07:51 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winar30.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quick.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniime.dll
2013-12-25 17:51 - 2008-04-14 07:51 - 00072704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wingb.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winime.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\romanime.ime
2013-12-25 17:51 - 2008-04-14 07:51 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmigrate.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00455168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintsetp.exe
2013-12-25 17:51 - 2003-04-02 13:00 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00081408 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00081408 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlphr.exe
2013-12-25 17:51 - 2003-04-02 13:00 - 00041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00031360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
2013-12-25 17:51 - 2003-04-02 13:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
2013-12-25 17:51 - 2003-04-02 13:00 - 00019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
2013-12-25 17:51 - 2003-04-02 13:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
2013-12-25 17:51 - 2003-04-02 13:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
2013-12-25 17:51 - 2003-04-02 13:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
2013-12-25 17:51 - 2003-04-02 13:00 - 00013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
2013-12-25 17:51 - 2003-04-02 13:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
2013-12-25 17:51 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
2013-12-25 17:51 - 2001-08-18 04:55 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
2013-12-25 17:51 - 2001-08-18 04:54 - 00205824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seo.dll
2013-12-25 17:51 - 2001-08-18 04:54 - 00057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
2013-12-25 17:51 - 2001-08-18 04:54 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
2013-12-25 17:51 - 2001-08-18 04:54 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
2013-12-25 17:51 - 2001-08-18 04:54 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpapi.dll
2013-12-25 17:51 - 2001-08-18 04:54 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_rwnh.dll
2013-12-25 17:51 - 2001-08-18 04:54 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
2013-12-25 17:50 - 2008-04-14 07:51 - 00482304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlgnt.ime
2013-12-25 17:50 - 2008-04-14 07:51 - 00175104 ____C C:\WINDOWS\system32\dllcache\pintlcsa.dll
2013-12-25 17:50 - 2008-04-14 07:51 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phon.ime
2013-12-25 17:50 - 2008-04-14 07:51 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmigrate.dll
2013-12-25 17:50 - 2008-04-14 07:51 - 00053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlcsd.dll
2013-12-25 17:50 - 2008-04-14 07:51 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs404.dll
2013-12-25 17:50 - 2008-04-14 07:51 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs804.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 13463552 ____C C:\WINDOWS\system32\dllcache\hwxjpn.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00811064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81k.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00716856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcus.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00368696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcic.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00340023 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81.ime
2013-12-25 17:50 - 2008-04-14 07:50 - 00315455 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskf.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00274489 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputyc.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00106496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrcic.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00102456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imlang.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekr61.ime
2013-12-25 17:50 - 2008-04-14 07:50 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmbx.dll
2013-12-25 17:50 - 2008-04-14 07:50 - 00081976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.dll
2013-12-25 17:50 - 2008-04-13 22:14 - 00262200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputy.exe
2013-12-25 17:50 - 2008-04-13 22:14 - 00233527 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjprw.exe
2013-12-25 17:50 - 2008-04-13 22:13 - 00307257 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.exe
2013-12-25 17:50 - 2008-04-13 22:13 - 00208952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpmig.exe
2013-12-25 17:50 - 2008-04-13 22:13 - 00196665 ____C C:\WINDOWS\system32\dllcache\imjpinst.exe
2013-12-25 17:50 - 2008-04-13 22:13 - 00155705 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdsvr.exe
2013-12-25 17:50 - 2008-04-13 22:13 - 00070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlphr.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 10129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 10096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 01875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
2013-12-25 17:50 - 2003-04-02 13:00 - 01158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
2013-12-25 17:50 - 2003-04-02 13:00 - 00471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00139264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
2013-12-25 17:50 - 2003-04-02 13:00 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
2013-12-25 17:50 - 2003-04-02 13:00 - 00102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
2013-12-25 17:50 - 2003-04-02 13:00 - 00092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00059392 ____C C:\WINDOWS\system32\dllcache\imscinst.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
2013-12-25 17:50 - 2003-04-02 13:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
2013-12-25 17:50 - 2003-04-02 13:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) CODE]
Gruss, schmokso |
|
30.12.2013, 09:57
| #8 |
| | svchost prozess wird von avast geblockt Win-XPCode:
ATTFilter C:\WINDOWS\system32\dllcache\kbdfa.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
2013-12-25 17:50 - 2003-04-02 13:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
2013-12-25 17:50 - 2001-08-18 04:54 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
2013-12-25 17:50 - 2001-08-18 04:53 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
2013-12-25 17:50 - 2001-08-18 04:53 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
2013-12-25 17:49 - 2013-12-25 17:58 - 00025065 _____ C:\WINDOWS\system32\wmpscheme.xml
2013-12-25 17:49 - 2013-12-25 17:49 - 00299552 _____ C:\WINDOWS\WMSysPrx.prx
2013-12-25 17:49 - 2008-04-14 07:51 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dayi.ime
2013-12-25 17:49 - 2008-04-14 07:51 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chajei.ime
2013-12-25 17:49 - 2008-04-14 07:51 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintlgnt.ime
2013-12-25 17:49 - 2008-04-14 07:50 - 00198656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintime.dll
2013-12-25 17:49 - 2008-04-14 07:50 - 00173568 ____C C:\WINDOWS\system32\dllcache\chtskf.dll
2013-12-25 17:49 - 2008-04-14 07:50 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtmbx.dll
2013-12-25 17:49 - 2008-04-14 07:50 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtskdic.dll
2013-12-25 17:49 - 2008-04-13 22:13 - 00480256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintsetp.exe
2013-12-25 17:49 - 2008-04-13 22:13 - 00057399 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cplexe.exe
2013-12-25 17:49 - 2003-04-02 13:00 - 01677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
2013-12-25 17:49 - 2003-04-02 13:00 - 00838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
2013-12-25 17:49 - 2003-04-02 13:00 - 00057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
2013-12-25 17:49 - 2003-04-02 13:00 - 00054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
2013-12-25 17:49 - 2003-04-02 13:00 - 00031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
2013-12-25 17:49 - 2003-04-02 13:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
2013-12-25 17:49 - 2003-04-02 13:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
2013-12-25 17:49 - 2003-04-02 13:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
2013-12-25 17:49 - 2003-04-02 13:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
2013-12-25 17:49 - 2003-04-02 13:00 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
2013-12-25 17:49 - 2003-04-02 13:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
2013-12-25 17:49 - 2003-04-02 13:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll
2013-12-25 17:49 - 2001-08-18 04:54 - 02134528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpsnap.dll
2013-12-25 17:49 - 2001-08-18 04:54 - 00175616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpadm.dll
2013-12-25 17:49 - 2001-08-18 04:53 - 00316928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqueue.dll
2013-12-25 17:49 - 2001-08-18 04:53 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
2013-12-25 17:49 - 2001-08-18 04:52 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
2013-12-25 17:48 - 2013-12-25 18:13 - 00002230 _____ C:\WINDOWS\Windows Update.log
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\WindowsShell.Manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\system32\wuaucpl.cpl.manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\system32\sapi.cpl.manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\system32\ncpa.cpl.manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000488 ___RH C:\WINDOWS\system32\logonui.exe.manifest
2013-12-25 17:47 - 2011-10-10 15:22 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2013-12-25 17:47 - 2010-11-18 19:12 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\isign32.dll
2013-12-25 17:47 - 2008-04-14 07:53 - 00778240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup_wm.exe
2013-12-25 17:47 - 2008-04-14 07:53 - 00226816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npdrmv2.dll
2013-12-25 17:47 - 2008-04-14 07:53 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msh261.drv
2013-12-25 17:47 - 2008-04-14 07:53 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmplayer.exe
2013-12-25 17:47 - 2008-04-14 07:52 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00364544 ____C (Microsoft Corporation (written by Digital Renaissance Inc.)) C:\WINDOWS\system32\dllcache\npdsplay.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00294912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dlimport.exe
2013-12-25 17:47 - 2008-04-14 07:52 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcfg.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\srsvc.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ils.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwdial.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msconf.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwphbk.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrslv.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrcdlg.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00034560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmdd.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmsrvc.exe
2013-12-25 17:47 - 2008-04-14 07:52 - 00032768 _____ (Intel Corporation) C:\WINDOWS\system32\isrdbg32.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrdm.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmmkcert.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgrprxy.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstinit.exe
2013-12-25 17:47 - 2008-04-14 07:52 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npwmsdrm.dll
2013-12-25 17:47 - 2008-04-14 07:52 - 00004639 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplayer2.exe
2013-12-25 17:47 - 2008-04-14 07:32 - 00073472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sr.sys
2013-12-25 17:47 - 2008-04-14 07:26 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetres.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00520192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpvis.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00331839 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmmres.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00163897 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmmutil.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00110648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmmfilt.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwtutor.exe
2013-12-25 17:47 - 2003-04-02 13:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwres.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trialoc.dll
2013-12-25 17:47 - 2003-04-02 13:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isignup.exe
2013-12-25 17:46 - 2013-02-27 08:56 - 02067456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2013-12-25 17:46 - 2012-07-04 15:05 - 00139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
2013-12-25 17:46 - 2012-06-02 15:19 - 01933848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng.dll
2013-12-25 17:46 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-12-25 17:46 - 2012-06-02 15:19 - 00053784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt.exe
2013-12-25 17:46 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-12-25 17:46 - 2011-01-27 12:57 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2013-12-25 17:46 - 2009-12-17 08:40 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2013-12-25 17:46 - 2008-06-12 15:20 - 00956928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2013-12-25 17:46 - 2008-06-12 15:20 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2013-12-25 17:46 - 2008-06-12 15:20 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2013-12-25 17:46 - 2008-06-12 15:20 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2013-12-25 17:46 - 2008-06-12 15:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll
2013-12-25 17:46 - 2008-04-14 07:53 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spider.exe
2013-12-25 17:46 - 2008-04-14 07:53 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessmgr.exe
2013-12-25 17:46 - 2008-04-14 07:53 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndrec32.exe
2013-12-25 17:46 - 2008-04-14 07:53 - 00087176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpwsx.dll
2013-12-25 17:46 - 2008-04-14 07:53 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\access.cpl
2013-12-25 17:46 - 2008-04-14 07:53 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdshost.exe
2013-12-25 17:46 - 2008-04-14 07:53 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-12-25 17:46 - 2008-04-14 07:53 - 00021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
2013-12-25 17:46 - 2008-04-14 07:53 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsaddin.exe
2013-12-25 17:46 - 2008-04-14 07:53 - 00012040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdpipe.sys
2013-12-25 17:46 - 2008-04-14 07:52 - 01267200 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00356352 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hypertrm.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmprops.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\accwiz.exe
2013-12-25 17:46 - 2008-04-14 07:52 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdchost.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00124928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplay32.exe
2013-12-25 17:46 - 2008-04-14 07:52 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mplay32.exe
2013-12-25 17:46 - 2008-04-14 07:52 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatex.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\clipbrd.exe
2013-12-25 17:46 - 2008-04-14 07:52 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\licwmi.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\servdeps.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qprocess.exe
2013-12-25 17:46 - 2008-04-14 07:52 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsnd.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmfutil.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\icaapi.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauserv.dll
2013-12-25 17:46 - 2008-04-14 07:52 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
2013-12-25 17:46 - 2008-04-14 07:50 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
2013-12-25 17:46 - 2008-04-14 00:02 - 00196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2013-12-25 17:46 - 2003-04-02 13:00 - 00598016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstscax.dll
2013-12-25 17:46 - 2003-04-02 13:00 - 00394240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstsc.exe
2013-12-25 17:46 - 2003-04-02 13:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscupgrd.exe
2013-12-25 17:46 - 2003-04-02 13:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscupgrd.exe
2013-12-25 17:45 - 2008-04-14 00:15 - 00052864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dmusic.sys
2013-12-25 17:45 - 2008-04-14 00:15 - 00006272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\splitter.sys
2013-12-25 17:44 - 2008-04-14 07:22 - 00057728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\redbook.sys
2013-12-25 17:43 - 2008-04-14 07:53 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2013-12-25 17:43 - 2008-04-14 07:53 - 00040840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\termdd.sys
2013-12-25 17:43 - 2008-04-14 07:52 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll
2013-12-25 17:40 - 2008-04-14 07:53 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system\winspool.drv
2013-12-25 17:40 - 2008-04-14 07:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\storprop.dll
2013-12-25 17:40 - 2008-04-14 00:24 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irenum.sys
2013-12-25 17:40 - 2003-04-02 13:00 - 01086182 ____R C:\WINDOWS\SET81.tmp
2013-12-25 17:40 - 2003-04-02 13:00 - 00024661 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxcoins.dll
2013-12-25 17:40 - 2003-04-02 13:00 - 00024661 _____ (Perle Systems Ltd.) C:\WINDOWS\system32\spxcoins.dll
2013-12-25 17:40 - 2003-04-02 13:00 - 00013898 ____R C:\WINDOWS\SET8D.tmp
2013-12-25 17:40 - 2003-04-02 13:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irclass.dll
2013-12-25 17:40 - 2003-04-02 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll
2013-12-25 17:38 - 2013-12-29 17:00 - 00678994 _____ C:\WINDOWS\setupapi.log
2013-12-24 17:06 - 2013-12-27 13:05 - 00023832 _____ C:\WINDOWS\Wdf01005Inst.log
2013-12-24 16:56 - 2013-12-25 11:38 - 00253184 _____ C:\WINDOWS\setupapi.old
2013-12-24 16:56 - 2004-08-04 13:00 - 01086058 ____R C:\WINDOWS\SET85.tmp
2013-12-24 16:56 - 2004-08-04 13:00 - 01014663 ____R C:\WINDOWS\SET82.tmp
2013-12-24 16:56 - 2004-08-04 13:00 - 00014043 ____R C:\WINDOWS\SET91.tmp
2013-12-24 16:56 - 2003-04-02 13:00 - 00817199 ____C C:\WINDOWS\system32\dllcache\NT5IIS.CAT
2013-12-24 16:56 - 2003-04-02 13:00 - 00399645 ____C C:\WINDOWS\system32\dllcache\MAPIMIG.CAT
2013-12-24 16:56 - 2003-04-02 13:00 - 00041270 ____C C:\WINDOWS\system32\dllcache\MW770.CAT
2013-12-24 16:56 - 2003-04-02 13:00 - 00013472 ____C C:\WINDOWS\system32\dllcache\HPCRDP.CAT
2013-12-24 16:56 - 2003-04-02 13:00 - 00008574 ____C C:\WINDOWS\system32\dllcache\IASNT4.CAT
2013-12-24 16:56 - 2003-04-02 13:00 - 00007382 ____C C:\WINDOWS\system32\dllcache\OEMBIOS.CAT
2013-12-24 13:50 - 2013-12-24 13:50 - 00000000 ____H C:\WINDOWS\system32\config\system.tmp.LOG
2013-12-24 13:50 - 2013-12-24 13:50 - 00000000 ____H C:\WINDOWS\system32\config\software.tmp.LOG
2013-12-24 13:50 - 2013-12-24 13:50 - 00000000 ____H C:\WINDOWS\system32\config\default.tmp.LOG
2013-12-24 13:33 - 2013-12-24 13:33 - 00016384 _____ C:\WINDOWS\~DFE4E.tmp
2013-12-24 13:33 - 2013-12-24 13:33 - 00000512 ____T C:\WINDOWS\~DFE5C.tmp
2013-12-24 13:27 - 2013-12-25 17:49 - 00524288 _____ C:\WINDOWS\system32\config\userdifr
2013-12-24 13:27 - 2013-12-25 17:49 - 00001024 ____H C:\WINDOWS\system32\config\userdifr.LOG
2013-12-24 13:27 - 2013-12-24 13:27 - 00018209 _____ C:\WINDOWS\KB908531.log
2013-12-24 13:26 - 2013-12-25 18:30 - 00001572 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programmzugriff und -standards.lnk
2013-12-24 13:26 - 2013-12-25 17:49 - 00001516 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows Update.lnk
2013-12-24 13:26 - 2013-12-25 17:49 - 00000398 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows-Katalog.lnk
2013-12-24 13:26 - 2013-12-24 13:27 - 00022254 _____ C:\WINDOWS\KB912812.log
2013-12-24 13:25 - 2013-12-24 13:25 - 00000767 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Movie Maker.lnk
2013-12-24 13:23 - 2013-12-25 18:40 - 00000461 _____ C:\WINDOWS\DtcInstall.log
2013-12-24 13:23 - 2013-12-25 18:30 - 00002432 _____ C:\WINDOWS\sessmgr.setup.log
2013-12-24 13:23 - 2013-12-25 17:49 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung
2013-12-24 13:22 - 2013-12-26 09:51 - 00002790 _____ C:\WINDOWS\wmsetup.log
2013-12-24 13:21 - 2013-12-25 18:30 - 00000346 _____ C:\WINDOWS\cmsetacl.log
2013-12-24 13:13 - 2013-12-25 17:45 - 00006270 _____ C:\WINDOWS\avmcoins.log
2013-12-24 12:53 - 2013-12-27 12:34 - 00047698 _____ C:\WINDOWS\ocmsn.log
2013-12-24 12:53 - 2013-12-25 17:40 - 00003398 _____ C:\WINDOWS\regopt.log
2013-12-24 12:53 - 2004-08-04 13:00 - 01086058 ____R C:\WINDOWS\SET1EC.tmp
2013-12-24 12:53 - 2004-08-04 13:00 - 01014663 ____R C:\WINDOWS\SET1E9.tmp
2013-12-24 12:53 - 2004-08-04 13:00 - 00066082 _____ C:\WINDOWS\system32\C_28597.NLS
2013-12-24 12:53 - 2004-08-04 13:00 - 00066082 _____ C:\WINDOWS\system32\C_28595.NLS
2013-12-24 12:53 - 2004-08-04 13:00 - 00066082 _____ C:\WINDOWS\system32\C_28594.NLS
2013-12-24 12:53 - 2004-08-04 13:00 - 00014043 ____R C:\WINDOWS\SET1F8.tmp
2013-12-22 14:10 - 2013-12-30 02:00 - 00000356 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-12-22 14:10 - 2013-12-26 14:01 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avast
2013-12-22 14:10 - 2013-12-22 14:10 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00049944 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-12-22 14:10 - 2013-12-22 14:10 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\AVAST Software
2013-12-17 19:51 - 2013-06-12 15:15 - 00164899 _____ C:\Dokumente und Einstellungen\salva\libcurl-4.dll
2013-12-17 19:51 - 2013-06-12 15:15 - 00119888 _____ (Open Source Software community LGPL) C:\Dokumente und Einstellungen\salva\pthreadGC2.dll
2013-12-17 19:51 - 2013-06-12 15:15 - 00100864 _____ C:\Dokumente und Einstellungen\salva\zlib1.dll
2013-12-17 05:14 - 2013-06-12 15:15 - 00164899 _____ C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\libcurl-4.dll
2013-12-17 05:14 - 2013-06-12 15:15 - 00119888 _____ (Open Source Software community LGPL) C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\pthreadGC2.dll
2013-12-17 05:14 - 2013-06-12 15:15 - 00100864 _____ C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\zlib1.dll
2013-12-13 17:12 - 2013-12-22 18:31 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\OpenMin
2013-12-12 11:46 - 2013-12-12 11:46 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Earth
2013-12-12 03:07 - 2013-12-26 10:11 - 00092711 _____ C:\WINDOWS\KB2898785-IE8.log
2013-12-12 03:06 - 2013-12-12 03:07 - 00010444 _____ C:\WINDOWS\KB2904266.log
2013-12-12 00:41 - 2013-12-26 09:49 - 00073534 _____ C:\WINDOWS\KB2898715.log
2013-12-12 00:40 - 2013-12-26 09:37 - 00055531 _____ C:\WINDOWS\KB2893294.log
2013-12-12 00:40 - 2013-12-26 09:34 - 00047797 _____ C:\WINDOWS\KB2893984.log
2013-12-12 00:40 - 2013-12-26 09:33 - 00045442 _____ C:\WINDOWS\KB2892075.log
2013-12-10 03:26 - 2013-12-10 03:26 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\Sun
2013-12-09 08:47 - 2013-12-09 08:47 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Java
2013-12-09 08:47 - 2013-12-09 08:47 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2013-12-09 08:47 - 2013-12-09 08:47 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun
2013-12-09 08:47 - 2013-12-09 08:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-12-09 08:47 - 2013-12-09 08:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-12-09 08:47 - 2013-12-09 08:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-12-09 08:47 - 2013-12-09 08:46 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-12-09 08:47 - 2013-12-09 08:46 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-12-09 08:46 - 2013-12-09 08:46 - 00000000 ____D C:\Programme\Java
2013-12-08 18:46 - 2013-12-08 18:46 - 00000800 _____ C:\Dokumente und Einstellungen\salva\Desktop\Schilder_Klingel_Briefkasten.odt.lnk
2013-12-08 18:43 - 2013-12-08 18:43 - 00001030 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Canon CAPT-Tools.LNK
2013-12-08 18:43 - 2013-12-08 18:43 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Canon CAPT-Tools
2013-12-08 18:42 - 2013-12-08 18:42 - 00000000 ____D C:\LBP810
2013-12-03 10:26 - 2013-12-03 10:26 - 00000994 _____ C:\Dokumente und Einstellungen\salva\Desktop\2013_12 Kassenbuch Klause.xls.lnk
==================== One Month Modified Files and Folders =======
2013-12-30 09:12 - 2009-09-28 08:37 - 00000418 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{89E5C452-EABC-4671-BB77-1CFA19812C38}.job
2013-12-30 09:11 - 2013-12-30 09:11 - 00023405 _____ C:\Dokumente und Einstellungen\salva\Desktop\FRST.txt
2013-12-30 09:07 - 2013-12-30 09:07 - 00000882 _____ C:\Dokumente und Einstellungen\salva\Desktop\securitycheck.txt
2013-12-30 08:50 - 2012-08-06 06:10 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-12-30 08:40 - 2005-12-05 19:24 - 01617410 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-30 08:39 - 2011-08-18 21:12 - 00001088 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 07:39 - 2005-12-05 19:28 - 00032528 _____ C:\WINDOWS\SchedLgU.Txt
2013-12-30 07:00 - 2011-11-07 22:51 - 00000224 _____ C:\WINDOWS\Tasks\wzed.job
2013-12-30 03:39 - 2013-07-13 02:00 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce7f646db07aa4.job
2013-12-30 02:00 - 2013-12-22 14:10 - 00000356 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-12-29 21:30 - 2013-12-27 12:16 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Desktop\trojaner-board
2013-12-29 21:30 - 2005-12-05 12:36 - 00000000 ___RD C:\Dokumente und Einstellungen\salva\Startmenü
2013-12-29 17:00 - 2013-12-25 17:38 - 00678994 _____ C:\WINDOWS\setupapi.log
2013-12-29 16:59 - 2013-12-29 16:59 - 00000000 ____D C:\Programme\ESET
2013-12-29 16:59 - 2005-12-05 19:15 - 00000000 ____D C:\Programme
2013-12-29 16:56 - 2013-12-29 16:56 - 00001201 _____ C:\Dokumente und Einstellungen\salva\Desktop\AdwCleaner[S2].txt
2013-12-29 16:56 - 2005-12-05 19:17 - 00000259 _____ C:\WINDOWS\wiadebug.log
2013-12-29 16:56 - 2005-12-05 18:57 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\FRITZ!
2013-12-29 16:55 - 2008-04-29 13:01 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-12-29 16:55 - 2003-04-02 12:00 - 00013724 _____ C:\WINDOWS\system32\wpa.dbl
2013-12-29 16:54 - 2005-12-05 19:28 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-12-29 16:52 - 2013-12-28 17:02 - 00000000 ____D C:\AdwCleaner
2013-12-29 16:52 - 2012-01-28 16:56 - 00000190 ___SH C:\Dokumente und Einstellungen\UpdatusUser\ntuser.ini
2013-12-29 16:52 - 2008-12-07 12:37 - 00262144 _____ C:\WINDOWS\system32\config\TuneUp.evt
2013-12-29 16:52 - 2005-12-05 12:36 - 00000300 ___SH C:\Dokumente und Einstellungen\salva\ntuser.ini
2013-12-29 16:30 - 2006-08-25 12:51 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-12-29 16:26 - 2013-12-29 16:26 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\salva\Desktop\esetsmartinstaller_enu.exe
2013-12-29 16:26 - 2013-12-29 16:26 - 00891200 _____ C:\Dokumente und Einstellungen\salva\Desktop\SecurityCheck.exe
2013-12-28 19:32 - 2005-12-05 12:36 - 00000000 ___RD C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Autostart
2013-12-28 19:32 - 2005-12-05 12:36 - 00000000 ___RD C:\Dokumente und Einstellungen\salva\Startmenü\Programme
2013-12-28 19:28 - 2005-12-05 19:15 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2013-12-28 19:12 - 2013-12-28 19:12 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-28 13:17 - 2013-11-26 05:45 - 00000000 ___HD C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Vlybpryn
2013-12-28 11:15 - 2013-12-26 09:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2712808$
2013-12-28 11:15 - 2005-12-05 12:36 - 00000000 ____D C:\Dokumente und Einstellungen\salva
2013-12-27 17:53 - 2013-12-27 17:53 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Malwarebytes
2013-12-27 17:53 - 2013-12-27 17:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-12-27 17:24 - 2003-04-02 12:00 - 00000774 _____ C:\WINDOWS\win.ini
2013-12-27 15:42 - 2013-12-27 15:31 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Dokumente\LogiShrd
2013-12-27 15:42 - 2013-12-27 15:28 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Logishrd
2013-12-27 15:31 - 2013-12-27 15:31 - 00016400 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2013-12-27 15:31 - 2013-12-27 15:31 - 00000339 _____ C:\WINDOWS\LkmdfCoInst.log
2013-12-27 15:31 - 2013-12-27 15:31 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\Logishrd
2013-12-27 15:31 - 2013-12-27 15:29 - 00009891 _____ C:\WINDOWS\LDPINST.LOG
2013-12-27 15:31 - 2013-12-27 15:29 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Logitech
2013-12-27 15:31 - 2012-11-02 03:01 - 00325856 _____ C:\WINDOWS\setupact.log
2013-12-27 15:31 - 2008-12-07 12:05 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Logishrd
2013-12-27 15:31 - 2005-12-05 19:15 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Dokumente
2013-12-27 15:28 - 2008-12-07 12:05 - 00000000 ____D C:\Programme\Logitech
2013-12-27 13:07 - 2005-12-05 14:56 - 00000000 ___HD C:\Programme\InstallShield Installation Information
2013-12-27 13:05 - 2013-12-24 17:06 - 00023832 _____ C:\WINDOWS\Wdf01005Inst.log
2013-12-27 12:59 - 2013-12-27 12:59 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Logishrd
2013-12-27 12:59 - 2008-12-07 12:17 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Logitech
2013-12-27 12:34 - 2013-12-27 12:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2345886$
2013-12-27 12:34 - 2013-12-27 11:26 - 00021622 _____ C:\WINDOWS\KB2345886.log
2013-12-27 12:34 - 2013-12-24 12:53 - 00047698 _____ C:\WINDOWS\ocmsn.log
2013-12-27 12:34 - 2013-04-16 02:04 - 01025854 _____ C:\WINDOWS\FaxSetup.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00476429 _____ C:\WINDOWS\ocgen.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00407418 _____ C:\WINDOWS\tsoc.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00377827 _____ C:\WINDOWS\comsetup.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00229068 _____ C:\WINDOWS\ntdtcsetup.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00174376 _____ C:\WINDOWS\iis6.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00053587 _____ C:\WINDOWS\msgsocm.log
2013-12-27 12:34 - 2013-04-16 02:04 - 00001393 _____ C:\WINDOWS\imsins.log
2013-12-27 12:33 - 2013-12-27 12:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB970430$
2013-12-27 12:33 - 2013-04-16 02:04 - 00178010 _____ C:\WINDOWS\updspapi.log
2013-12-27 12:33 - 2013-04-16 02:04 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-12-27 12:29 - 2013-12-27 12:26 - 00012467 _____ C:\WINDOWS\KB2510531-IE8.log
2013-12-26 21:26 - 2013-12-26 21:24 - 00000000 ___SD C:\ComboFix
2013-12-26 18:45 - 2008-08-23 09:05 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Arbeit
2013-12-26 18:44 - 2009-11-04 21:08 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Dateien und Dateimanager
2013-12-26 14:50 - 2013-12-26 14:50 - 00000000 _RSHD C:\cmdcons
2013-12-26 14:50 - 2005-12-05 20:13 - 00000327 __RSH C:\boot.ini
2013-12-26 14:46 - 2013-12-26 14:46 - 00000000 ___RD C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Verwaltung
2013-12-26 14:46 - 2013-12-26 14:46 - 00000000 ____D C:\WINDOWS\erdnt
2013-12-26 14:46 - 2013-12-26 14:46 - 00000000 ____D C:\Qoobox
2013-12-26 14:01 - 2013-12-26 14:01 - 00001712 _____ C:\Dokumente und Einstellungen\All Users\Desktop\avast! Internet Security.lnk
2013-12-26 14:01 - 2013-12-22 14:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avast
2013-12-26 13:59 - 2013-12-26 14:00 - 00026136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2013-12-26 13:58 - 2013-12-26 14:00 - 00252336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdis2.sys
2013-12-26 13:58 - 2013-12-26 13:58 - 00012112 _____ (ALWIL Software) C:\WINDOWS\system32\Drivers\aswNdis.sys
2013-12-26 10:27 - 2013-12-26 10:26 - 00024757 _____ C:\Dokumente und Einstellungen\salva\Desktop\Addition.txt
2013-12-26 10:25 - 2013-12-26 10:25 - 00000000 ____D C:\FRST
2013-12-26 10:23 - 2013-12-26 10:23 - 00000000 _____ C:\Dokumente und Einstellungen\salva\defogger_reenable
2013-12-26 10:16 - 2013-12-25 18:36 - 00000792 _____ C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Internet Explorer.lnk
2013-12-26 10:15 - 2013-12-25 18:30 - 00039313 _____ C:\WINDOWS\spupdsvc.log
2013-12-26 10:14 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\Help
2013-12-26 10:14 - 2005-12-05 19:14 - 00352176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-26 10:12 - 2013-12-26 10:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-12-26 10:12 - 2013-11-13 22:00 - 00102439 _____ C:\WINDOWS\KB2868626.log
2013-12-26 10:11 - 2013-12-26 10:11 - 00071128 _____ C:\WINDOWS\KB951376-v2.log
2013-12-26 10:11 - 2013-12-26 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB959426$
2013-12-26 10:11 - 2013-12-26 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952954$
2013-12-26 10:11 - 2013-12-26 10:11 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951376-v2$
2013-12-26 10:11 - 2013-12-26 09:57 - 00211177 _____ C:\WINDOWS\ie8_main.log
2013-12-26 10:11 - 2013-12-26 04:09 - 00080664 _____ C:\WINDOWS\KB952954.log
2013-12-26 10:11 - 2013-12-26 04:08 - 00079356 _____ C:\WINDOWS\KB959426.log
2013-12-26 10:11 - 2013-12-12 03:07 - 00092711 _____ C:\WINDOWS\KB2898785-IE8.log
2013-12-26 10:10 - 2013-08-17 02:10 - 00095008 _____ C:\WINDOWS\KB2862772-IE8.log
2013-12-26 10:09 - 2013-12-26 10:09 - 00077466 _____ C:\WINDOWS\KB2744842-IE8.log
2013-12-26 10:09 - 2013-12-26 10:08 - 00079952 _____ C:\WINDOWS\KB2618444-IE8.log
2013-12-26 10:08 - 2013-12-26 10:22 - 01061649 _____ (Farbar) C:\Dokumente und Einstellungen\salva\Desktop\FRST32.exe
2013-12-26 10:08 - 2013-12-26 10:08 - 00074221 _____ C:\WINDOWS\KB2598845-IE8.log
2013-12-26 10:08 - 2013-12-26 10:08 - 00073578 _____ C:\WINDOWS\KB2467659.log
2013-12-26 10:08 - 2013-12-26 10:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2467659$
2013-12-26 10:08 - 2013-12-26 10:07 - 00085938 _____ C:\WINDOWS\KB982381-IE8.log
2013-12-26 10:08 - 2009-09-15 07:52 - 00000000 ____D C:\WINDOWS\ie8updates
2013-12-26 10:08 - 2005-12-05 12:48 - 00000000 ___HD C:\WINDOWS\$hf_mig$
2013-12-26 10:07 - 2013-12-26 10:05 - 00082171 _____ C:\WINDOWS\ie8.log
2013-12-26 10:07 - 2009-09-15 07:49 - 00000000 __HDC C:\WINDOWS\ie8
2013-12-26 10:05 - 2006-12-30 18:18 - 00000000 ____D C:\WINDOWS\system32\de-de
2013-12-26 09:56 - 2013-12-26 09:56 - 00053497 _____ C:\WINDOWS\KB946648.log
2013-12-26 09:56 - 2013-12-26 09:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB946648$
2013-12-26 09:56 - 2012-01-28 16:55 - 01072544 _____ C:\WINDOWS\system32\nvdrsdb1.bin
2013-12-26 09:56 - 2012-01-28 16:55 - 01072544 _____ C:\WINDOWS\system32\nvdrsdb0.bin
2013-12-26 09:56 - 2012-01-28 16:55 - 00000001 _____ C:\WINDOWS\system32\nvdrssel.bin
2013-12-26 09:56 - 2012-01-28 16:54 - 00000000 ____D C:\Programme\NVIDIA Corporation
2013-12-26 09:56 - 2005-12-05 19:22 - 00000000 ____D C:\Programme\Messenger
2013-12-26 09:55 - 2013-12-26 09:55 - 00052088 _____ C:\WINDOWS\KB2387149.log
2013-12-26 09:55 - 2013-12-26 09:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2387149$
2013-12-26 09:55 - 2013-12-26 04:08 - 00061327 _____ C:\WINDOWS\KB2712808.log
2013-12-26 09:55 - 2005-12-05 14:18 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
2013-12-26 09:54 - 2013-12-26 09:54 - 00049184 _____ C:\WINDOWS\KB2659262.log
2013-12-26 09:54 - 2013-12-26 09:54 - 00043799 _____ C:\WINDOWS\KB2564958.log
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960859$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2659262$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2564958$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2479943$
2013-12-26 09:54 - 2013-12-26 09:54 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2478971$
2013-12-26 09:54 - 2013-12-26 04:08 - 00060485 _____ C:\WINDOWS\KB2479943.log
2013-12-26 09:54 - 2013-12-26 04:08 - 00060368 _____ C:\WINDOWS\KB960859.log
2013-12-26 09:54 - 2013-12-26 04:08 - 00059562 _____ C:\WINDOWS\KB2478971.log
2013-12-26 09:53 - 2013-12-26 09:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2013-12-26 09:53 - 2013-12-26 09:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2758857$
2013-12-26 09:53 - 2013-12-26 09:53 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-12-26 09:53 - 2013-12-26 09:52 - 00049469 _____ C:\WINDOWS\KB2536276-v2.log
2013-12-26 09:53 - 2013-12-26 04:08 - 00058467 _____ C:\WINDOWS\KB2758857.log
2013-12-26 09:53 - 2013-12-26 04:08 - 00058315 _____ C:\WINDOWS\KB2544893-v2.log
2013-12-26 09:53 - 2013-07-12 02:02 - 00055207 _____ C:\WINDOWS\KB2834886.log
2013-12-26 09:52 - 2013-12-26 09:52 - 00046485 _____ C:\WINDOWS\KB2296011.log
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2691442$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2631813$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2585542$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-12-26 09:52 - 2013-12-26 09:52 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2296011$
2013-12-26 09:52 - 2013-12-26 04:08 - 00058981 _____ C:\WINDOWS\KB2585542.log
2013-12-26 09:52 - 2013-12-26 04:07 - 00058270 _____ C:\WINDOWS\KB2631813.log
2013-12-26 09:52 - 2013-04-28 02:19 - 00096649 _____ C:\WINDOWS\KB2691442.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00049302 _____ C:\WINDOWS\KB955759.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00043821 _____ C:\WINDOWS\KB975558.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00041758 _____ C:\WINDOWS\KB2378111.log
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974318$
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB955759$
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-12-26 09:51 - 2013-12-26 09:51 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2115168$
2013-12-26 09:51 - 2013-12-26 04:07 - 00057526 _____ C:\WINDOWS\KB2115168.log
2013-12-26 09:51 - 2013-12-26 04:06 - 00056807 _____ C:\WINDOWS\KB974318.log
2013-12-26 09:51 - 2013-12-24 13:22 - 00002790 _____ C:\WINDOWS\wmsetup.log
2013-12-26 09:51 - 2013-10-10 04:44 - 00080989 _____ C:\WINDOWS\KB2847311.log
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB969059$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951978$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2655992$
2013-12-26 09:50 - 2013-12-26 09:50 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2443105$
2013-12-26 09:50 - 2013-12-26 04:06 - 00056355 _____ C:\WINDOWS\KB951978.log
2013-12-26 09:50 - 2013-12-26 04:06 - 00056247 _____ C:\WINDOWS\KB2655992.log
2013-12-26 09:50 - 2013-12-26 04:06 - 00055739 _____ C:\WINDOWS\KB969059.log
2013-12-26 09:50 - 2013-12-26 04:06 - 00055474 _____ C:\WINDOWS\KB2802968.log
2013-12-26 09:50 - 2013-12-26 04:06 - 00055335 _____ C:\WINDOWS\KB2443105.log
2013-12-26 09:49 - 2013-12-26 09:49 - 00045306 _____ C:\WINDOWS\KB2229593.log
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB950974$
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2481109$
2013-12-26 09:49 - 2013-12-26 09:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2229593$
2013-12-26 09:49 - 2013-12-26 04:06 - 00054853 _____ C:\WINDOWS\KB950974.log
2013-12-26 09:49 - 2013-12-12 00:41 - 00073534 _____ C:\WINDOWS\KB2898715.log
2013-12-26 09:49 - 2013-04-14 19:15 - 00900752 _____ C:\WINDOWS\KB2481109.log
2013-12-26 09:48 - 2013-12-26 09:48 - 00043776 _____ C:\WINDOWS\KB2485663.log
2013-12-26 09:48 - 2013-12-26 09:48 - 00043653 _____ C:\WINDOWS\KB2440591.log
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975713$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2598479$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2485663$
2013-12-26 09:48 - 2013-12-26 09:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2440591$
2013-12-26 09:48 - 2013-12-26 04:05 - 00053931 _____ C:\WINDOWS\KB975713.log
2013-12-26 09:48 - 2013-12-26 04:05 - 00053645 _____ C:\WINDOWS\KB2598479.log
2013-12-26 09:48 - 2013-12-26 04:05 - 00052453 _____ C:\WINDOWS\KB2898785.log
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982132$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898785$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-12-26 09:47 - 2013-12-26 09:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2686509$
2013-12-26 09:47 - 2013-12-26 04:05 - 00048966 _____ C:\WINDOWS\KB982132.log
2013-12-26 09:47 - 2013-10-11 07:51 - 00056601 _____ C:\WINDOWS\KB2862335.log
2013-12-26 09:47 - 2013-04-17 02:02 - 00365285 _____ C:\WINDOWS\KB2686509.log
2013-12-26 09:46 - 2013-12-26 09:46 - 00037898 _____ C:\WINDOWS\KB961118.log
2013-12-26 09:46 - 2013-12-26 09:46 - 00033806 _____ C:\WINDOWS\KB954155.log
2013-12-26 09:46 - 2013-12-26 09:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978338$
2013-12-26 09:46 - 2013-12-26 09:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971657$
2013-12-26 09:46 - 2013-12-26 09:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB961118$
2013-12-26 09:46 - 2013-12-26 04:05 - 00049099 _____ C:\WINDOWS\KB971657.log
2013-12-26 09:46 - 2013-12-26 04:05 - 00049061 _____ C:\WINDOWS\KB978338.log
2013-12-26 09:45 - 2013-12-26 09:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB972270$
2013-12-26 09:45 - 2013-12-26 09:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2013-12-26 09:45 - 2013-12-26 09:45 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2507938$
2013-12-26 09:45 - 2013-12-26 04:04 - 00048852 _____ C:\WINDOWS\KB2780091.log
2013-12-26 09:45 - 2013-12-26 04:04 - 00048722 _____ C:\WINDOWS\KB2507938.log
2013-12-26 09:45 - 2013-07-10 03:58 - 00068704 _____ C:\WINDOWS\KB2845187.log
2013-12-26 09:44 - 2013-12-26 09:44 - 00040214 _____ C:\WINDOWS\KB956572.log
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974112$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956572$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2845187$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2510581$
2013-12-26 09:44 - 2013-12-26 09:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2347290$
2013-12-26 09:44 - 2013-12-26 04:04 - 00051049 _____ C:\WINDOWS\KB2510581.log
2013-12-26 09:44 - 2013-12-26 04:04 - 00048088 _____ C:\WINDOWS\KB974112.log
2013-12-26 09:44 - 2013-09-12 20:47 - 00063489 _____ C:\WINDOWS\KB2876217.log
2013-12-26 09:43 - 2013-12-26 09:43 - 00035138 _____ C:\WINDOWS\KB956844.log
2013-12-26 09:43 - 2013-12-26 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956844$
2013-12-26 09:43 - 2013-12-26 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-12-26 09:43 - 2013-12-26 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2483185$
2013-12-26 09:43 - 2013-12-26 04:03 - 00045404 _____ C:\WINDOWS\KB979687.log
2013-12-26 09:43 - 2013-04-28 02:06 - 00054585 _____ C:\WINDOWS\KB2483185.log
2013-12-26 09:42 - 2013-12-26 09:42 - 00033908 _____ C:\WINDOWS\KB973869.log
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979687$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975025$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973869$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-12-26 09:42 - 2013-12-26 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2719985$
2013-12-26 09:42 - 2013-12-26 04:03 - 00043824 _____ C:\WINDOWS\KB2719985.log
2013-12-26 09:42 - 2013-12-26 04:03 - 00043044 _____ C:\WINDOWS\KB975025.log
2013-12-26 09:42 - 2013-09-12 20:47 - 00062424 _____ C:\WINDOWS\KB2864063.log
2013-12-26 09:41 - 2013-12-26 09:41 - 00031606 _____ C:\WINDOWS\KB2592799.log
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974571$
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952004$
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-12-26 09:41 - 2013-12-26 09:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2592799$
2013-12-26 09:41 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975560$
2013-12-26 09:41 - 2013-12-26 04:03 - 00043532 _____ C:\WINDOWS\KB952004.log
2013-12-26 09:41 - 2013-12-26 04:02 - 00041273 _____ C:\WINDOWS\KB974571.log
2013-12-26 09:41 - 2013-11-13 21:59 - 00060848 _____ C:\WINDOWS\KB2862152.log
2013-12-26 09:40 - 2013-12-26 09:40 - 00031299 _____ C:\WINDOWS\KB2535512.log
2013-12-26 09:40 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973507$
2013-12-26 09:40 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$
2013-12-26 09:40 - 2013-12-26 09:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2535512$
2013-12-26 09:40 - 2013-12-26 04:02 - 00040942 _____ C:\WINDOWS\KB973507.log
2013-12-26 09:40 - 2013-12-26 04:02 - 00040469 _____ C:\WINDOWS\KB977816.log
2013-12-26 09:39 - 2013-12-26 09:39 - 00030216 _____ C:\WINDOWS\KB950762.log
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB977816$
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB950762$
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-12-26 09:39 - 2013-12-26 09:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-12-26 09:39 - 2013-11-13 21:58 - 00059977 _____ C:\WINDOWS\KB2876331.log
2013-12-26 09:39 - 2013-08-17 00:44 - 00057064 _____ C:\WINDOWS\KB2850869.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00029927 _____ C:\WINDOWS\KB2807986.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00029354 _____ C:\WINDOWS\KB2570947.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00029228 _____ C:\WINDOWS\KB952287.log
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952287$
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2013-12-26 09:38 - 2013-12-26 09:38 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2570947$
2013-12-26 09:38 - 2013-08-17 00:44 - 00058657 _____ C:\WINDOWS\KB2859537.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00029409 _____ C:\WINDOWS\KB973904.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00028709 _____ C:\WINDOWS\KB2603381.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00023623 _____ C:\WINDOWS\KB978695.log
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973904$
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2013-12-26 09:37 - 2013-12-26 09:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2603381$
2013-12-26 09:37 - 2013-12-26 09:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-26 09:37 - 2013-12-12 00:40 - 00055531 _____ C:\WINDOWS\KB2893294.log
2013-12-26 09:37 - 2013-10-11 07:47 - 00053354 _____ C:\WINDOWS\KB2868038.log
2013-12-26 09:37 - 2013-04-14 16:49 - 00076925 _____ C:\WINDOWS\KB2820917.log
2013-12-26 09:36 - 2013-12-26 09:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2508429$
2013-12-26 09:36 - 2013-12-26 09:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2419632$
2013-12-26 09:36 - 2013-12-26 04:00 - 00039029 _____ C:\WINDOWS\KB2419632.log
2013-12-26 09:36 - 2013-12-26 03:59 - 00032369 _____ C:\WINDOWS\KB2508429.log
2013-12-26 09:35 - 2013-12-26 09:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974392$
2013-12-26 09:35 - 2013-12-26 09:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2749655$
2013-12-26 09:35 - 2013-12-26 09:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2653956$
2013-12-26 09:35 - 2013-12-26 03:59 - 00032417 _____ C:\WINDOWS\KB2653956.log
2013-12-26 09:35 - 2013-12-26 03:59 - 00032087 _____ C:\WINDOWS\KB2749655.log
2013-12-26 09:35 - 2013-12-26 03:59 - 00031667 _____ C:\WINDOWS\KB974392.log
2013-12-26 09:34 - 2013-12-26 09:34 - 00016081 _____ C:\WINDOWS\KB952069.log
2013-12-26 09:34 - 2013-12-26 09:34 - 00013276 _____ C:\WINDOWS\KB2803821-v2.log
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB977914$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971029$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-12-26 09:34 - 2013-12-26 09:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2506212$
2013-12-26 09:34 - 2013-12-26 03:59 - 00030583 _____ C:\WINDOWS\KB2506212.log
2013-12-26 09:34 - 2013-12-26 03:58 - 00030385 _____ C:\WINDOWS\KB977914.log
2013-12-26 09:34 - 2013-12-12 00:40 - 00047797 _____ C:\WINDOWS\KB2893984.log
2013-12-26 09:34 - 2013-04-28 02:01 - 00040492 _____ C:\WINDOWS\KB971029.log
2013-12-26 09:33 - 2013-12-26 09:33 - 00020133 _____ C:\WINDOWS\KB2698365.log
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978542$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2698365$
2013-12-26 09:33 - 2013-12-26 09:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2619339$
2013-12-26 09:33 - 2013-12-26 03:57 - 00029197 _____ C:\WINDOWS\KB2705219-v2.log
2013-12-26 09:33 - 2013-12-26 03:57 - 00028519 _____ C:\WINDOWS\KB2619339.log
2013-12-26 09:33 - 2013-12-26 03:57 - 00027506 _____ C:\WINDOWS\KB978542.log
2013-12-26 09:33 - 2013-12-12 00:40 - 00045442 _____ C:\WINDOWS\KB2892075.log
2013-12-26 09:33 - 2005-12-05 19:23 - 00000000 ____D C:\Programme\Outlook Express
2013-12-26 09:32 - 2013-12-26 09:32 - 00018244 _____ C:\WINDOWS\KB981997.log
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB981997$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979482$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979309$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978706$
2013-12-26 09:32 - 2013-12-26 09:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2727528$
2013-12-26 09:32 - 2013-12-26 03:56 - 00027367 _____ C:\WINDOWS\KB2727528.log
2013-12-26 09:32 - 2013-12-26 03:56 - 00027360 _____ C:\WINDOWS\KB978706.log
2013-12-26 09:32 - 2013-12-26 03:56 - 00027274 _____ C:\WINDOWS\KB979482.log
2013-12-26 09:32 - 2013-12-26 03:50 - 00026948 _____ C:\WINDOWS\KB979309.log
2013-12-26 09:32 - 2005-12-05 19:23 - 00000000 ____D C:\Programme\Movie Maker
2013-12-26 09:31 - 2013-12-26 09:31 - 00019003 _____ C:\WINDOWS\KB2723135-v2.log
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973815$
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960803$
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-12-26 09:31 - 2013-12-26 09:31 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-12-26 09:31 - 2013-12-26 03:56 - 00027656 _____ C:\WINDOWS\KB960803.log
2013-12-26 09:31 - 2013-12-26 03:56 - 00026881 _____ C:\WINDOWS\KB973815.log
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982665$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2676562$
2013-12-26 09:30 - 2013-12-26 09:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2509553$
2013-12-26 09:30 - 2013-12-26 03:56 - 00028283 _____ C:\WINDOWS\KB2813345.log
2013-12-26 09:30 - 2013-12-26 03:56 - 00028007 _____ C:\WINDOWS\KB2509553.log
2013-12-26 09:30 - 2013-12-26 03:55 - 00028915 _____ C:\WINDOWS\KB2676562.log
2013-12-26 09:30 - 2013-12-26 03:55 - 00024766 _____ C:\WINDOWS\KB982665.log
2013-12-26 09:29 - 2013-12-26 09:29 - 00017651 _____ C:\WINDOWS\KB2393802.log
2013-12-26 09:29 - 2013-12-26 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB923561$
2013-12-26 09:29 - 2013-12-26 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2478960$
2013-12-26 09:29 - 2013-12-26 09:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2393802$
2013-12-26 09:29 - 2013-12-26 09:28 - 00016138 _____ C:\WINDOWS\KB923561.log
2013-12-26 09:28 - 2013-12-26 09:28 - 00014516 _____ C:\WINDOWS\KB2566454.log
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975467$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB968389$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2620712$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2584146$
2013-12-26 09:28 - 2013-12-26 09:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2566454$
2013-12-26 09:28 - 2013-12-26 09:26 - 00011354 _____ C:\WINDOWS\KB2423089.log
2013-12-26 09:28 - 2013-12-26 03:55 - 00023666 _____ C:\WINDOWS\KB2620712.log
2013-12-26 09:28 - 2013-12-26 03:55 - 00023148 _____ C:\WINDOWS\KB2584146.log
2013-12-26 09:28 - 2013-12-26 03:54 - 00024137 _____ C:\WINDOWS\KB968389.log
2013-12-26 09:28 - 2013-12-26 03:54 - 00023993 _____ C:\WINDOWS\KB975467.log
2013-12-26 09:27 - 2013-12-26 09:27 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2423089$
2013-12-25 21:15 - 2005-12-05 12:41 - 00089088 _____ C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2013-12-25 19:18 - 2011-05-14 11:16 - 00001575 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Microsoft Update.lnk
2013-12-25 19:11 - 2013-12-25 19:11 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
2013-12-25 19:05 - 2013-12-25 17:58 - 00000781 _____ C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Windows Media Player.lnk
2013-12-25 19:05 - 2008-12-03 10:06 - 00000000 ___RD C:\Dokumente und Einstellungen\salva\Startmenü\Programme\Zubehör
2013-12-25 18:40 - 2013-12-24 13:23 - 00000461 _____ C:\WINDOWS\DtcInstall.log
2013-12-25 18:39 - 2013-12-25 18:39 - 00000781 _____ C:\Dokumente und Einstellungen\LocalService\Startmenü\Programme\Windows Media Player.lnk
2013-12-25 18:39 - 2013-12-25 18:36 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Startmenü\Programme
2013-12-25 18:38 - 2005-12-05 19:25 - 00316640 _____ C:\WINDOWS\WMSysPr9.prx
2013-12-25 18:38 - 2005-12-05 19:24 - 00000000 ___HD C:\Programme\WindowsUpdate
2013-12-25 18:37 - 2013-12-25 18:37 - 00000187 _____ C:\WINDOWS\spupdsvc.log.1.log
2013-12-25 18:37 - 2005-12-05 20:13 - 35913728 _____ C:\WINDOWS\system32\config\software.sav
2013-12-25 18:37 - 2005-12-05 20:13 - 06029312 _____ C:\WINDOWS\system32\config\system.sav
2013-12-25 18:37 - 2005-12-05 20:13 - 00385024 _____ C:\WINDOWS\system32\config\default.sav
2013-12-25 18:37 - 2005-12-05 12:36 - 00000000 __SHD C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Verlauf
2013-12-25 18:36 - 2013-12-25 18:36 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Startmenü
2013-12-25 18:36 - 2005-12-05 20:13 - 00001024 ____H C:\WINDOWS\system32\config\TempKey.LOG
2013-12-25 18:36 - 2005-12-05 19:28 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService
2013-12-25 18:36 - 2005-12-05 19:15 - 01138788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-25 18:35 - 2008-12-03 09:46 - 00000090 _____ C:\WINDOWS\system32\spupdwxp.log
2013-12-25 18:34 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\twain_32
2013-12-25 18:34 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system32\icsxml
2013-12-25 18:34 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\Media
2013-12-25 18:33 - 2013-12-25 18:32 - 00208678 _____ C:\WINDOWS\KB938464.log
2013-12-25 18:33 - 2013-12-25 18:21 - 00512799 _____ C:\WINDOWS\svcpack.log
2013-12-25 18:33 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system32\ias
2013-12-25 18:33 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system32\1033
2013-12-25 18:32 - 2013-12-25 18:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB938464$
2013-12-25 18:32 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\Driver Cache
2013-12-25 18:30 - 2013-12-26 14:50 - 00000211 _____ C:\Boot.bak
2013-12-25 18:30 - 2013-12-24 13:26 - 00001572 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programmzugriff und -standards.lnk
2013-12-25 18:30 - 2013-12-24 13:23 - 00002432 _____ C:\WINDOWS\sessmgr.setup.log
2013-12-25 18:30 - 2013-12-24 13:21 - 00000346 _____ C:\WINDOWS\cmsetacl.log
2013-12-25 18:30 - 2005-12-05 19:15 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü
2013-12-25 18:29 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\PeerNet
2013-12-25 18:29 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\ime
2013-12-25 18:29 - 2005-12-05 19:21 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
2013-12-25 18:27 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system32\usmt
2013-12-25 18:27 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system32\npp
2013-12-25 18:27 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system
2013-12-25 18:27 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\msagent
2013-12-25 18:27 - 2005-12-05 19:23 - 00000000 ____D C:\WINDOWS\system32\Restore
2013-12-25 18:27 - 2005-12-05 19:23 - 00000000 ____D C:\WINDOWS\srchasst
2013-12-25 18:27 - 2005-12-05 19:23 - 00000000 ____D C:\Programme\NetMeeting
2013-12-25 18:27 - 2005-12-05 19:23 - 00000000 ____D C:\Programme\Gemeinsame Dateien\System
2013-12-25 18:27 - 2005-12-05 19:22 - 00000000 ____D C:\Programme\Windows NT
2013-12-25 18:27 - 2005-12-05 19:21 - 00000000 ____D C:\WINDOWS\system32\Com
2013-12-25 18:26 - 2005-12-05 20:11 - 00000000 ___RD C:\WINDOWS\Web
2013-12-25 18:26 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\system32\1031
2013-12-25 18:26 - 2003-04-02 13:00 - 00251712 __RSH C:\ntldr
2013-12-25 18:26 - 2003-04-02 13:00 - 00047564 __RSH C:\NTDETECT.COM
2013-12-25 18:25 - 2013-12-25 18:24 - 00000000 __HDC C:\WINDOWS\$NtServicePackUninstall$
2013-12-25 18:25 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\security
2013-12-25 18:24 - 2013-12-25 18:24 - 00000557 _____ C:\WINDOWS\medctroc.Log
2013-12-25 18:13 - 2013-12-25 17:48 - 00002230 _____ C:\WINDOWS\Windows Update.log
2013-12-25 17:58 - 2013-12-25 17:49 - 00025065 _____ C:\WINDOWS\system32\wmpscheme.xml
2013-12-25 17:58 - 2005-12-05 19:22 - 00000000 ____D C:\WINDOWS\Registration
2013-12-25 17:57 - 2013-12-25 17:57 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Help
2013-12-25 17:57 - 2013-12-25 17:57 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Help
2013-12-25 17:49 - 2013-12-25 17:49 - 00299552 _____ C:\WINDOWS\WMSysPrx.prx
2013-12-25 17:49 - 2013-12-24 13:27 - 00524288 _____ C:\WINDOWS\system32\config\userdifr
2013-12-25 17:49 - 2013-12-24 13:27 - 00001024 ____H C:\WINDOWS\system32\config\userdifr.LOG
2013-12-25 17:49 - 2013-12-24 13:26 - 00001516 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows Update.lnk
2013-12-25 17:49 - 2013-12-24 13:26 - 00000398 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows-Katalog.lnk
2013-12-25 17:49 - 2013-12-24 13:23 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung
2013-12-25 17:49 - 2005-12-05 20:13 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-25 17:49 - 2005-12-05 20:13 - 00001024 ____H C:\WINDOWS\system32\config\userdiff.LOG
2013-12-25 17:49 - 2005-12-05 19:25 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
2013-12-25 17:49 - 2005-12-05 19:25 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
2013-12-25 17:49 - 2005-12-05 19:25 - 00001608 _____ C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Remoteunterstützung.lnk
2013-12-25 17:49 - 2005-12-05 19:25 - 00000781 _____ C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Windows Media Player.lnk
2013-12-25 17:49 - 2005-12-05 19:15 - 00004348 _____ C:\WINDOWS\ODBCINST.INI
2013-12-25 17:49 - 2005-12-05 19:15 - 00000000 ___RD C:\Dokumente und Einstellungen\Default User\Startmenü\Programme
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\WindowsShell.Manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\system32\wuaucpl.cpl.manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\system32\sapi.cpl.manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000749 ___RH C:\WINDOWS\system32\ncpa.cpl.manifest
2013-12-25 17:48 - 2013-12-25 17:48 - 00000488 ___RH C:\WINDOWS\system32\logonui.exe.manifest
2013-12-25 17:48 - 2005-12-05 19:24 - 00000749 ___RH C:\WINDOWS\system32\nwc.cpl.manifest
2013-12-25 17:48 - 2005-12-05 19:24 - 00000749 ___RH C:\WINDOWS\system32\cdplayer.exe.manifest
2013-12-25 17:48 - 2005-12-05 19:24 - 00000488 ___RH C:\WINDOWS\system32\WindowsLogon.manifest
2013-12-25 17:48 - 2005-12-05 19:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Zubehör
2013-12-25 17:48 - 2005-12-05 19:14 - 00033845 _____ C:\WINDOWS\setuperr.log
2013-12-25 17:47 - 2005-12-05 19:23 - 00023552 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-25 17:45 - 2013-12-24 13:13 - 00006270 _____ C:\WINDOWS\avmcoins.log
2013-12-25 17:40 - 2013-12-24 12:53 - 00003398 _____ C:\WINDOWS\regopt.log
2013-12-25 17:40 - 2003-04-02 12:00 - 00000264 _____ C:\WINDOWS\System.ini
2013-12-25 11:38 - 2013-12-24 16:56 - 00253184 _____ C:\WINDOWS\setupapi.old
2013-12-24 16:43 - 2005-12-05 19:14 - 00262144 _____ C:\WINDOWS\system32\config\security.sav
2013-12-24 13:50 - 2013-12-24 13:50 - 00000000 ____H C:\WINDOWS\system32\config\system.tmp.LOG
2013-12-24 13:50 - 2013-12-24 13:50 - 00000000 ____H C:\WINDOWS\system32\config\software.tmp.LOG
2013-12-24 13:50 - 2013-12-24 13:50 - 00000000 ____H C:\WINDOWS\system32\config\default.tmp.LOG
2013-12-24 13:33 - 2013-12-24 13:33 - 00016384 _____ C:\WINDOWS\~DFE4E.tmp
2013-12-24 13:33 - 2013-12-24 13:33 - 00000512 ____T C:\WINDOWS\~DFE5C.tmp
2013-12-24 13:31 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\repair
2013-12-24 13:27 - 2013-12-24 13:27 - 00018209 _____ C:\WINDOWS\KB908531.log
2013-12-24 13:27 - 2013-12-24 13:26 - 00022254 _____ C:\WINDOWS\KB912812.log
2013-12-24 13:25 - 2013-12-24 13:25 - 00000767 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Movie Maker.lnk
2013-12-24 13:22 - 2005-12-05 20:11 - 00000000 ____D C:\WINDOWS\Cursors
2013-12-24 12:36 - 2005-12-05 13:08 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\TuneUp Software
2013-12-24 11:13 - 2012-05-07 09:04 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-12-24 10:56 - 2013-04-17 02:03 - 00000374 _____ C:\WINDOWS\faultykeyboard.log
2013-12-22 18:31 - 2013-12-13 17:12 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\OpenMin
2013-12-22 14:11 - 2010-03-07 22:02 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Skype
2013-12-22 14:10 - 2013-12-22 14:10 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00049944 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-12-22 14:10 - 2013-12-22 14:10 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-12-22 14:10 - 2013-12-22 14:10 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Anwendungsdaten\AVAST Software
2013-12-22 14:10 - 2011-11-07 20:18 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-12-22 14:07 - 2011-11-07 20:18 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software
2013-12-19 12:38 - 2005-12-05 18:52 - 00000000 ____D C:\Programme\FRITZ!
2013-12-17 15:04 - 2006-02-23 10:43 - 00198606 _____ C:\FMAIL.LOG
2013-12-17 09:39 - 2005-12-05 15:36 - 00000195 _____ C:\WINDOWS\multiview.ini
2013-12-12 11:46 - 2013-12-12 11:46 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Earth
2013-12-12 09:59 - 2013-08-17 02:07 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-12 09:41 - 2013-11-15 05:44 - 00000000 ___HD C:\Dokumente und Einstellungen\salva\Anwendungsdaten\Qfvoetrjad
2013-12-12 03:07 - 2013-12-12 03:06 - 00010444 _____ C:\WINDOWS\KB2904266.log
2013-12-12 03:07 - 2007-02-19 03:01 - 00902214 _____ C:\WINDOWS\system32\TZLog.log
2013-12-12 03:03 - 2005-12-05 12:52 - 88123800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-11 18:21 - 2012-11-21 09:04 - 00000000 ____D C:\Programme\Mozilla Thunderbird
2013-12-11 18:21 - 2012-11-15 19:11 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-12-11 12:43 - 2005-12-14 10:05 - 00166105 _____ C:\voxFcoldrv.log
2013-12-10 03:26 - 2013-12-10 03:26 - 00000000 ____D C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Anwendungsdaten\Sun
2013-12-09 08:47 - 2013-12-09 08:47 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Java
2013-12-09 08:47 - 2013-12-09 08:47 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2013-12-09 08:47 - 2013-12-09 08:47 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun
2013-12-09 08:46 - 2013-12-09 08:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-12-09 08:46 - 2013-12-09 08:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-12-09 08:46 - 2013-12-09 08:47 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-12-09 08:46 - 2013-12-09 08:47 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-12-09 08:46 - 2013-12-09 08:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-12-09 08:46 - 2013-12-09 08:46 - 00000000 ____D C:\Programme\Java
2013-12-08 18:46 - 2013-12-08 18:46 - 00000800 _____ C:\Dokumente und Einstellungen\salva\Desktop\Schilder_Klingel_Briefkasten.odt.lnk
2013-12-08 18:43 - 2013-12-08 18:43 - 00001030 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Canon CAPT-Tools.LNK
2013-12-08 18:43 - 2013-12-08 18:43 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Canon CAPT-Tools
2013-12-08 18:43 - 2005-12-05 19:15 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
2013-12-08 18:42 - 2013-12-08 18:42 - 00000000 ____D C:\LBP810
2013-12-03 10:26 - 2013-12-03 10:26 - 00000994 _____ C:\Dokumente und Einstellungen\salva\Desktop\2013_12 Kassenbuch Klause.xls.lnk
2013-12-01 03:00 - 2013-11-03 03:00 - 01051797 _____ C:\WINDOWS\setupapi.log.1.old
Files to move or delete:
====================
C:\Dokumente und Einstellungen\salva\libcurl-4.dll
C:\Dokumente und Einstellungen\salva\pthreadGC2.dll
C:\Dokumente und Einstellungen\salva\zlib1.dll
Some content of TEMP:
====================
C:\Dokumente und Einstellungen\salva\Lokale Einstellungen\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2003-04-02 13:00] - [2008-04-14 07:52] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e
C:\Windows\System32\winlogon.exe
[2003-04-02 13:00] - [2008-04-14 07:53] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a
C:\Windows\System32\svchost.exe
[2003-04-02 13:00] - [2008-04-14 07:53] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366
C:\Windows\System32\services.exe
[2003-04-02 13:00] - [2009-02-09 12:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc
C:\Windows\System32\User32.dll
[2003-04-02 13:00] - [2008-04-14 07:52] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd
C:\Windows\System32\userinit.exe
[2003-04-02 13:00] - [2008-04-14 07:53] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106
C:\Windows\System32\Drivers\volsnap.sys
[2003-04-02 13:00] - [2008-04-14 07:22] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d
==================== End Of Log ============================
Gruss, schmokso |
|
30.12.2013, 18:10
| #9 | |
| /// the machine /// TB-Ausbilder | svchost prozess wird von avast geblockt Win-XPZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.12.2013, 18:25
| #10 |
| | svchost prozess wird von avast geblockt Win-XP Hy Schrauber, ist von meinem Banking-Programm die tägliche Erinnerung, die ist i.O. Gruß schmokso |
|
31.12.2013, 15:04
| #11 |
| /// the machine /// TB-Ausbilder | svchost prozess wird von avast geblockt Win-XP Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu svchost prozess wird von avast geblockt Win-XP |
| 4d36e972-e325-11ce-bfc1-08002be10318, antivirus, blockiert, e-mail, fehler, flash player, helper, installation, internet, internet explorer, konfigurator, logfile, malware.trace, netzwerk, ntdll.dll, plug-in, prozess, scan, seriennummer, svchost, svchost.exe, trojan.agent, trojan.ransom.ed, viren, windows, windows xp, worm.brontok, wuauclt.exe |
