| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Mailbot? - jemand scheint SPAM in meinem Namen zu sendenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
26.06.2013, 10:32
| #1 |
| /// the machine /// TB-Ausbilder    |  Mailbot? - jemand scheint SPAM in meinem Namen zu sendenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST Log. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.06.2013, 15:40
| #2 | |
 | Mailbot? - jemand scheint SPAM in meinem Namen zu senden Eset
__________________Zitat:
|
|
28.06.2013, 10:55
| #3 |
| | Mailbot? - jemand scheint SPAM in meinem Namen zu senden ....
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-06-2013
Ran by <username> (administrator) on 28-06-2013 11:49:12
Running from C:\Users\<username>\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Web Jetadmin 10\bin\HPWJAService.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\Web Jetadmin 10\HPWSProAdapter\FileSystems\Core\bin\XP-x86\release\HP.Dss.App.WinService.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\FrameworkService.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL$BSI\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Panasonic) C:\Program Files\Panasonic\TrapMonitor\Trapmnnt.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(VMware, Inc.) C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe
(VMware, Inc.) C:\Program Files\VMware\VMware View\Client\bin\wsnm_usbctrl.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\tv_w32.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\UdaterUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\McTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey [136512 2009-09-25] (McAfee, Inc.)
HKLM\...\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE [124224 2010-08-25] (McAfee, Inc.)
HKLM\...\Run: [IntelliType Pro] "c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe" [1093232 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [IntelliPoint] "c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe" [1668720 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [] [x]
HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1174016 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {4228cb88-796c-11e1-b6e5-6c626d05270b} - G:\AutoRun.exe
MountPoints2: {4228cb9e-796c-11e1-b6e5-6c626d05270b} - G:\AutoRun.exe
MountPoints2: {a126895e-9653-11e0-8126-6c626d05270b} - F:\AutoRun.exe
MountPoints2: {a126897b-9653-11e0-8126-6c626d05270b} - F:\AutoRun.exe
HKU\ahenning\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
HKU\AStrehl\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
HKU\Default\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
HKU\Default User\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
HKU\HVR-GMBH\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
HKU\SRC-Info\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
HKU\SRC-Schaden\...\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [ 2009-09-30] (Hewlett-Packard)
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKCU SearchScopes: DefaultScope {8AA0E7F2-8443-4971-B384-2ADD82AE12D9} URL = hxxp://www.google.de/#hl=de&source=hp&q={searchTerms}&aq=f&aqi=g10&aql=&oq=&gs_rfai=&fp=32b6716f2c77352d
SearchScopes: HKCU - {8AA0E7F2-8443-4971-B384-2ADD82AE12D9} URL = hxxp://www.google.de/#hl=de&source=hp&q={searchTerms}&aq=f&aqi=g10&aql=&oq=&gs_rfai=&fp=32b6716f2c77352d
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {DBDC1CDA-B64B-49F7-9535-6317AA416E51} https://cgn-view/downloads/VMware-viewclient.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{AD1767C5-D647-4E3B-A43C-83204E16C1F9}: [NameServer]
FireFox:
========
FF ProfilePath: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\3qiqkkq6.default-1362729458433
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\<username>\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\3qiqkkq6.default-1362729458433\Extensions\ich@maltegoetz.de
FF Extension: info - C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\3qiqkkq6.default-1362729458433\Extensions\info@convert2mp3.net.xpi
FF Extension: socialfixer - C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\3qiqkkq6.default-1362729458433\Extensions\socialfixer@mattkruse.com.xpi
FF Extension: No Name - C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\3qiqkkq6.default-1362729458433\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Mozilla Firefox 22.0\Extensions: [Components] C:\Program Files\Mozilla Firefox\components
FF Extension: No Name - C:\Program Files\Mozilla Firefox\components
FF HKLM\...\Mozilla Firefox 22.0\Extensions: [Plugins] C:\Program Files\Mozilla Firefox\plugins
FF Extension: No Name - C:\Program Files\Mozilla Firefox\plugins
========================== Services (Whitelisted) =================
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [125440 2009-09-24] (Hewlett-Packard)
R2 HPWJAService; C:\Program Files\Hewlett-Packard\Web Jetadmin 10\bin\HPWJAService.exe [45056 2012-12-20] (Hewlett-Packard Development Company, L.P.)
R2 HPWSProAdapter; C:\Program Files\Hewlett-Packard\Web Jetadmin 10\HPWSProAdapter\FileSystems\Core\bin\XP-x86\release\HP.Dss.App.WinService.exe [9728 2012-11-02] (Hewlett-Packard)
R2 McAfeeEngineService; C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe [22816 2010-08-25] (McAfee, Inc.)
R2 McAfeeFramework; C:\Program Files\McAfee\Common Framework\FrameworkService.exe [120128 2009-09-25] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [227232 2010-01-15] (McAfee, Inc.)
R2 McShield; C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe [147984 2010-08-25] (McAfee, Inc.)
R2 McTaskManager; C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe [66880 2010-08-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [69192 2010-08-25] (McAfee, Inc.)
R2 MSSQL$BSI; C:\Program Files\Microsoft SQL Server\MSSQL$BSI\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation)
R2 MSSQL$HPWJA; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [598312 2011-03-29] (Nero AG)
R2 Panasonic Trap Monitor Service; C:\Program Files\Panasonic\TrapMonitor\Trapmnnt.exe [69632 2004-02-25] (Panasonic)
S3 SQLAgent$BSI; C:\Program Files\Microsoft SQL Server\MSSQL$BSI\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation)
R2 wsnm; C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe [494192 2011-09-07] (VMware, Inc.)
R2 wsnm_usbctrl; C:\Program Files\VMware\VMware View\Client\bin\wsnm_usbctrl.exe [797296 2011-09-07] (VMware, Inc.)
==================== Drivers (Whitelisted) ====================
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [76024 2010-08-25] (McAfee, Inc.)
R3 MfeAVFK; C:\Windows\System32\drivers\mfeavfk.sys [91896 2010-08-25] (McAfee, Inc.)
R3 MfeBOPK; C:\Windows\System32\drivers\mfebopk.sys [43192 2010-08-25] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [344712 2010-08-25] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [66536 2010-08-25] (McAfee, Inc.)
S3 MfeRKDK; C:\Windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\Windows\System32\drivers\mfetdik.sys [64208 2010-08-25] (McAfee, Inc.)
R1 SSHDRV85; C:\Windows\system32\drivers\SSHDRV85.sys [78848 2012-04-25] ()
R3 vmwvusb; C:\Windows\System32\Drivers\vmwvusb.sys [40048 2011-09-07] (VMware, Inc.)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 lvpopflt; system32\DRIVERS\lvpopflt.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-28 11:47 - 2013-06-28 11:48 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-28 11:46 - 2013-06-28 11:47 - 01371463 ____A (Farbar) C:\Users\<username>\Desktop\FRST.exe
2013-06-27 10:33 - 2013-06-27 10:34 - 00000000 ____D C:\Users\<username>\Desktop\KIS 8.12.1
2013-06-26 10:17 - 2013-06-26 10:17 - 00000000 ____D C:\Windows\ERUNT
2013-06-26 09:34 - 2013-06-26 10:17 - 00000000 ____D C:\JRT
2013-06-25 08:58 - 2013-06-25 08:58 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-25 08:58 - 2013-06-25 08:58 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-25 08:58 - 2013-06-25 08:58 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-06-25 08:58 - 2013-06-25 08:57 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-21 14:56 - 2013-06-21 14:56 - 00000000 ____D C:\FRST
2013-06-21 10:58 - 2013-06-21 10:58 - 00017380 ____A C:\Users\<username>\Desktop\Übersicht Sachkonten.xlsx
2013-06-12 17:15 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 17:14 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 17:14 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 17:14 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 17:14 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 17:14 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 17:10 - 2013-05-17 03:26 - 00042496 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 17:10 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 17:10 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 17:10 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 17:10 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 17:10 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 17:10 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 17:10 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 17:10 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 17:09 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 16:01 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 16:01 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 16:01 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 16:01 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 16:01 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 16:01 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 16:01 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 16:01 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 16:00 - 2013-05-08 07:38 - 01293672 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 16:00 - 2013-05-06 07:06 - 03968872 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-12 16:00 - 2013-05-06 07:06 - 03913576 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 16:00 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-10 09:50 - 2013-06-10 09:50 - 00001715 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 09:49 - 2013-06-10 09:50 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-10 09:49 - 2013-06-10 09:50 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 09:49 - 2013-06-10 09:49 - 00000000 ____D C:\Program Files\iPod
2013-06-05 16:53 - 2013-06-05 16:53 - 00001022 ____A C:\Users\<username>\Desktop\verinice.exe - Verknüpfung.lnk
2013-06-05 16:47 - 2013-06-05 16:47 - 00000000 ____D C:\Users\<username>\verinice
2013-06-05 12:33 - 2013-06-05 12:33 - 00001822 ____A C:\Users\<username>\Desktop\GSTOOL 4.5.lnk
2013-06-05 12:15 - 2013-06-05 12:34 - 06076508 ____A C:\gstool_install.log
2013-06-05 12:09 - 2013-06-05 12:09 - 00000000 ____D C:\Users\<username>\Documents\SQL Server Management Studio Express
2013-06-05 12:06 - 2013-06-05 12:09 - 00000000 ____D C:\Users\<username>\Documents\Visual Studio 2005
2013-06-05 11:52 - 2013-06-05 11:52 - 00000044 ____A C:\Windows\System32\sqlprov.log
2013-06-05 11:49 - 2013-06-05 12:33 - 00002542 ____A C:\logAttach.log
2013-06-05 11:48 - 2013-06-05 12:33 - 00019440 ____A C:\Windows\dasetup.log
2013-06-05 11:48 - 2013-06-05 12:33 - 00001853 ____A C:\Windows\dahotfix.log
2013-06-05 11:48 - 2002-12-17 16:23 - 00033340 ____A (Microsoft Corporation) C:\Windows\System32\dbmsqlgc.dll
2013-06-05 11:48 - 2002-10-20 14:00 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\dbmsgnet.dll
2013-06-05 11:47 - 2013-06-05 11:47 - 00000000 ____D C:\Program Files\BSI
2013-06-04 08:48 - 2013-06-04 08:48 - 00000000 ____A C:\cookies.sqlite
2013-06-03 14:01 - 2013-06-03 14:01 - 00014498 ____A C:\Users\<username>\Documents\Testpläne KIS - FinanzOffice.xlsx
2013-05-31 16:22 - 2013-05-31 16:22 - 01441280 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-31 16:22 - 2013-05-31 16:22 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-31 16:22 - 2013-05-31 16:22 - 00745472 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00719360 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00629248 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00361984 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-31 16:22 - 2013-05-31 16:22 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00242200 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00232960 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00185344 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00150528 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00138752 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00137216 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00125440 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00117248 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00110592 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00079872 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00073728 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00069120 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-31 16:22 - 2013-05-31 16:22 - 00057344 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00038400 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00023040 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-31 16:19 - 2013-05-31 16:24 - 00010223 ____A C:\Windows\IE10_main.log
2013-05-29 17:30 - 2013-05-29 17:30 - 00000000 ____D C:\Users\<username>\AppData\Local\Eraser 6
==================== One Month Modified Files and Folders ========
2013-06-28 11:50 - 2011-05-05 12:37 - 00000660 ____A C:\Windows\Tasks\Archivierung Journal Passwort (ID 5).job
2013-06-28 11:48 - 2013-06-28 11:47 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-28 11:48 - 2012-05-29 19:03 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-06-28 11:47 - 2013-06-28 11:46 - 01371463 ____A (Farbar) C:\Users\<username>\Desktop\FRST.exe
2013-06-28 11:43 - 2012-07-09 13:54 - 00000000 ____D C:\Users\<username>\AppData\Local\Deployment
2013-06-28 11:25 - 2010-09-14 11:09 - 00000000 ____D C:\Users\<username>\AppData\Roaming\Skype
2013-06-28 11:23 - 2012-06-27 08:50 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-28 10:43 - 2010-08-26 10:23 - 00000120 ____A C:\Windows\System32\config\netlogon.ftl
2013-06-27 17:29 - 2009-07-14 06:39 - 00048593 ____A C:\Windows\setupact.log
2013-06-27 17:00 - 2009-07-14 06:34 - 00016768 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-27 17:00 - 2009-07-14 06:34 - 00016768 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-27 12:51 - 2011-05-05 16:12 - 00000104 ____A C:\Windows\combit.ini
2013-06-27 10:34 - 2013-06-27 10:33 - 00000000 ____D C:\Users\<username>\Desktop\KIS 8.12.1
2013-06-27 10:02 - 2010-09-14 09:00 - 00000000 ____A C:\Windows\System32\Drivers\lvuvc.hs
2013-06-27 09:13 - 2009-07-25 14:54 - 01875406 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-27 09:06 - 2009-07-14 06:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-26 17:00 - 2010-08-05 15:04 - 01812826 ____A C:\Windows\WindowsUpdate.log
2013-06-26 11:49 - 2012-09-05 18:04 - 00002829 ____A C:\Users\<username>\Desktop\Diamant3 - Testsystem.lnk
2013-06-26 11:49 - 2011-01-06 17:18 - 00002339 ____A C:\Users\<username>\Desktop\Kundeninventarliste.mht - Verknüpfung.lnk
2013-06-26 11:49 - 2010-12-17 16:23 - 00002739 ____A C:\Users\<username>\Desktop\Schouten Sicherheit Intranet.lnk
2013-06-26 10:17 - 2013-06-26 10:17 - 00000000 ____D C:\Windows\ERUNT
2013-06-26 10:17 - 2013-06-26 09:34 - 00000000 ____D C:\JRT
2013-06-25 14:43 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\System32\FxsTmp
2013-06-25 08:58 - 2013-06-25 08:58 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-25 08:58 - 2013-06-25 08:58 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-25 08:58 - 2013-06-25 08:58 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-06-25 08:57 - 2013-06-25 08:58 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-25 08:57 - 2013-03-26 15:20 - 00867240 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-25 08:57 - 2011-03-10 15:04 - 00789416 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-25 08:57 - 2011-03-10 15:04 - 00000000 ____D C:\Program Files\Java
2013-06-21 14:56 - 2013-06-21 14:56 - 00000000 ____D C:\FRST
2013-06-21 13:43 - 2010-11-30 17:07 - 00000000 ____D C:\Users\<username>\AppData\Roaming\FileZilla
2013-06-21 10:58 - 2013-06-21 10:58 - 00017380 ____A C:\Users\<username>\Desktop\Übersicht Sachkonten.xlsx
2013-06-18 12:39 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-06-18 09:23 - 2012-03-30 08:50 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-18 09:23 - 2011-05-18 09:02 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-18 08:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-12 17:16 - 2010-08-05 15:12 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-12 17:11 - 2010-08-16 11:32 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-10 11:29 - 2010-08-26 11:55 - 00000000 ____D C:\Users\<username>\AppData\Local\Adobe
2013-06-10 09:50 - 2013-06-10 09:50 - 00001715 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-10 09:50 - 2013-06-10 09:49 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-10 09:50 - 2013-06-10 09:49 - 00000000 ____D C:\Program Files\iTunes
2013-06-10 09:49 - 2013-06-10 09:49 - 00000000 ____D C:\Program Files\iPod
2013-06-10 09:49 - 2010-12-01 14:58 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-08 13:42 - 2013-06-12 17:14 - 01141248 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 13:40 - 2013-06-12 17:14 - 14327808 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 13:40 - 2013-06-12 17:14 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 13:40 - 2013-06-12 17:14 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 13:40 - 2013-06-12 17:14 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:13 - 2013-06-12 17:15 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-07 08:50 - 2013-02-06 13:18 - 00000000 ___RD C:\Program Files\Skype
2013-06-07 08:50 - 2011-11-24 10:28 - 00000000 ____D C:\ProgramData\Skype
2013-06-06 14:53 - 2013-05-21 15:40 - 00000000 ____D C:\Users\<username>\Desktop\SEPA Konvertierung
2013-06-06 14:45 - 2013-04-29 13:19 - 00000000 ____D C:\Program Files\SEPA Account Converter
2013-06-05 16:53 - 2013-06-05 16:53 - 00001022 ____A C:\Users\<username>\Desktop\verinice.exe - Verknüpfung.lnk
2013-06-05 16:47 - 2013-06-05 16:47 - 00000000 ____D C:\Users\<username>\verinice
2013-06-05 16:47 - 2010-08-26 11:50 - 00000000 ____D C:\users\<username>
2013-06-05 12:34 - 2013-06-05 12:15 - 06076508 ____A C:\gstool_install.log
2013-06-05 12:33 - 2013-06-05 12:33 - 00001822 ____A C:\Users\<username>\Desktop\GSTOOL 4.5.lnk
2013-06-05 12:33 - 2013-06-05 11:49 - 00002542 ____A C:\logAttach.log
2013-06-05 12:33 - 2013-06-05 11:48 - 00019440 ____A C:\Windows\dasetup.log
2013-06-05 12:33 - 2013-06-05 11:48 - 00001853 ____A C:\Windows\dahotfix.log
2013-06-05 12:32 - 2011-05-12 10:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-06-05 12:09 - 2013-06-05 12:09 - 00000000 ____D C:\Users\<username>\Documents\SQL Server Management Studio Express
2013-06-05 12:09 - 2013-06-05 12:06 - 00000000 ____D C:\Users\<username>\Documents\Visual Studio 2005
2013-06-05 12:05 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-06-05 11:52 - 2013-06-05 11:52 - 00000044 ____A C:\Windows\System32\sqlprov.log
2013-06-05 11:47 - 2013-06-05 11:47 - 00000000 ____D C:\Program Files\BSI
2013-06-04 12:38 - 2010-09-01 13:46 - 00000000 ____D C:\Users\<username>\AppData\Roaming\TeamViewer
2013-06-04 08:48 - 2013-06-04 08:48 - 00000000 ____A C:\cookies.sqlite
2013-06-03 14:41 - 2010-10-14 11:33 - 00000000 ____D C:\Users\<username>\AppData\Roaming\GPGshell
2013-06-03 14:01 - 2013-06-03 14:01 - 00014498 ____A C:\Users\<username>\Documents\Testpläne KIS - FinanzOffice.xlsx
2013-06-03 09:00 - 2010-08-05 15:02 - 00381646 ____A C:\Windows\PFRO.log
2013-05-31 16:24 - 2013-05-31 16:19 - 00010223 ____A C:\Windows\IE10_main.log
2013-05-31 16:22 - 2013-05-31 16:22 - 01441280 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-31 16:22 - 2013-05-31 16:22 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-31 16:22 - 2013-05-31 16:22 - 00745472 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00719360 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00629248 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00361984 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-31 16:22 - 2013-05-31 16:22 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00242200 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00232960 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00185344 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00150528 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00138752 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00137216 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00125440 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00117248 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00110592 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00079872 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00073728 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00069120 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-31 16:22 - 2013-05-31 16:22 - 00057344 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00038400 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00023040 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-31 16:22 - 2013-05-31 16:22 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-31 16:22 - 2013-05-31 16:22 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-31 11:49 - 2010-11-30 17:07 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2013-05-29 17:30 - 2013-05-29 17:30 - 00000000 ____D C:\Users\<username>\AppData\Local\Eraser 6
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-27 18:39
==================== End Of Log ============================
|
|
| Themen zu Mailbot? - jemand scheint SPAM in meinem Namen zu senden |
| aktualisieren, charset, einiger, erhalte, fix, folge, folgende, geändert, kennwörter, mail delivery, mailadresse, mailbot, message, namen, nemesis, not, perfekte, remote, schei, schließe, senden, server, spam, spam-mail, this, transfer, ungewollte e-mails, woche, wochen, wörter |
Hybrid-Darstellung
