Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Polizei Virus

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 06.06.2013, 18:22   #16
schrauber
/// the machine
/// TB-Ausbilder
 

Polizei Virus - Standard

Polizei Virus



Es brennt kein Licht hinten am Netzwerkanschluss am Rechner????

WLAN an Board am Rechner?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.06.2013, 18:50   #17
Sharkyat
 
Polizei Virus - Standard

Polizei Virus



...musste Rasenmähen...sonnst gibts haue von meiner Frau

nein kein licht brennt!

kein W-Lan bei dem Rechner!

Motherboard; ASUS P8P67
__________________


Alt 06.06.2013, 18:54   #18
schrauber
/// the machine
/// TB-Ausbilder
 

Polizei Virus - Standard

Polizei Virus



Wlan-Stick besorgen, anschliessen, und probieren.

Und Rasenmähen stinkt, deswegen hab ich keinen Garten
__________________
__________________

Alt 06.06.2013, 19:02   #19
Sharkyat
 
Polizei Virus - Standard

Polizei Virus



nun klapst habe neue Motherboard Treiber (Realtek ) runtergeladen nun habe ich weider I -Net!

nun mache ich deine schritte durch!

Alt 06.06.2013, 19:07   #20
schrauber
/// the machine
/// TB-Ausbilder
 

Polizei Virus - Standard

Polizei Virus



supi

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 07.06.2013, 06:07   #21
Sharkyat
 
Polizei Virus - Standard

Polizei Virus



Morgen! anbei die log´s:

Eset:

ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=563091ac690e0a44969736a157a165e5
# engine=14015
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-06 06:49:22
# local_time=2013-06-06 08:49:22 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1797 16775165 100 94 194935 107081383 272884 0
# compatibility_mode=5893 16776573 100 94 12948 122174412 0 0
# scanned=10187
# found=1
# cleaned=0
# scan_time=2627
sh=34398AC599276CB4B2DEB33BD62E41E235A2BEDC ft=1 fh=ac1dfa3e59e7187c vn="a variant of Win32/Kryptik.BCWF trojan" ac=I fn="C:\FRST\Quarantine\skype.dat"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=563091ac690e0a44969736a157a165e5
# engine=14015
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-06 11:43:59
# local_time=2013-06-07 01:43:59 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1797 16775165 100 94 212612 107099060 290561 0
# compatibility_mode=5893 16776573 100 94 30625 122192089 0 0
# scanned=244853
# found=4
# cleaned=0
# scan_time=13487
sh=34398AC599276CB4B2DEB33BD62E41E235A2BEDC ft=1 fh=ac1dfa3e59e7187c vn="a variant of Win32/Kryptik.BCWF trojan" ac=I fn="C:\FRST\Quarantine\skype.dat"
sh=09B94953779B3A53481D97F15F3F46EFA5E6BB4B ft=0 fh=0000000000000000 vn="Win32/Spy.SpyEye.CFG.A trojan" ac=I fn="C:\Req.Clean\11D66D3D7F9DAE3"
sh=34398AC599276CB4B2DEB33BD62E41E235A2BEDC ft=1 fh=ac1dfa3e59e7187c vn="a variant of Win32/Kryptik.BCWF trojan" ac=I fn="C:\Users\Warter\AppData\Local\Temp\xkdowwq"
sh=A87CB16002F2D6374FEDB3302074C64FC2CA6454 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Warter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\3714b6a3-38c1bc50"


Security Chek:

UNSUPPORTED OPERATING SYSTEM! ABORTED!
FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-06-2013 01
Ran by Warter (administrator) on 07-06-2013 07:04:21
Running from C:\Users\Warter\Desktop
Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\G-series Software\LGDCore.exe
(Logitech Inc.) C:\Program Files\Logitech\G-series Software\LCDMon.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc.) C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at) C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\pmb.exe
(Microsoft Corporation) C:\Windows\System32\dinotify.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE [1777664 2006-03-06] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" [709120 2006-03-06] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming [1744152 2011-10-07] (Logitech, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-20] (Microsoft Corporation)
MountPoints2: J - J:\AutoRun.exe
MountPoints2: {153f7967-2c73-11e1-addc-f46d0499435e} - J:\haosheng.exe
MountPoints2: {712bd3d3-7a68-11e0-94be-806e6f6e6963} - G:\SETUP.EXE
MountPoints2: {712bd3d4-7a68-11e0-94be-806e6f6e6963} - H:\setup.exe
MountPoints2: {7389687e-ba03-11e0-9bc6-f46d0499435e} - I:\setup.exe
MountPoints2: {c52930cc-f0e3-11e0-9f77-001e101fb681} - J:\AutoRun.exe
MountPoints2: {e1931a80-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
MountPoints2: {e1931a9f-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
HKLM-x32\...\Run: []  [x]
HKLM-x32\...\Run: [A1Webassistent] C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe /auto [18577272 2011-08-04] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - F:\Spiele\Downlaoder\npdd.dll (Metaboli)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360 2011-03-28] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480 2011-06-30] (Avira GmbH)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-05-27] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-06-26] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88288 2011-06-30] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [123784 2011-06-30] (Avira GmbH)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-06-26] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-06 19:59 - 2010-01-06 00:39 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\SET55D2.tmp
2013-06-06 19:59 - 2010-01-06 00:39 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\RTNUninst64.dll
2013-06-06 19:59 - 2009-12-03 17:27 - 00074272 ____A C:\Windows\System32\RtNicProp64.dll
2013-06-06 19:55 - 2011-04-26 11:07 - 00557848 ____A (Intel Corporation) C:\Windows\System32\Drivers\iaStor.sys
2013-06-06 18:09 - 2013-06-06 19:59 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-06 18:09 - 2013-06-06 19:55 - 00000000 ____D C:\Windows\LastGood
2013-06-06 17:05 - 2013-06-06 17:05 - 00000000 ____D C:\Windows\ERUNT
2013-06-06 17:04 - 2013-06-06 17:05 - 00000000 ____D C:\JRT
2013-06-06 16:59 - 2013-06-06 17:00 - 00005064 ____A C:\AdwCleaner[S1].txt
2013-06-06 16:58 - 2013-06-06 16:58 - 00890839 ____A C:\Users\Warter\Desktop\SecurityCheck.exe
2013-06-06 16:58 - 2013-06-06 16:58 - 00760723 ____A (Farbar) C:\Users\Warter\Desktop\MiniToolBox.exe
2013-06-06 16:58 - 2013-06-06 16:57 - 02347384 ____A (ESET) C:\Users\Warter\Desktop\esetsmartinstaller_enu.exe
2013-06-06 16:58 - 2013-06-06 16:56 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Warter\Desktop\JRT.exe
2013-06-06 16:58 - 2013-06-06 16:55 - 00632031 ____A C:\Users\Warter\Desktop\adwcleaner.exe
2013-06-06 16:19 - 2013-06-06 14:29 - 01917710 ____A (Farbar) C:\Users\Warter\Desktop\FRST64.exe
2013-06-06 15:57 - 2013-06-07 02:32 - 00033861 ____A C:\Windows\WindowsUpdate.log
2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt
2013-06-06 14:56 - 2013-06-06 17:01 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-06 14:56 - 2013-06-06 17:01 - 00000392 ____A C:\Windows\setupact.log
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:45 - 2013-06-03 23:51 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:44 - 2013-06-06 21:41 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 22:33 - 2013-06-03 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-16 20:41 - 2013-05-20 19:16 - 00000381 ____A C:\Windows\check.txt
2013-05-16 10:13 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-16 10:13 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-16 10:13 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-16 10:13 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-16 10:13 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-16 10:13 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-16 10:13 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-16 10:13 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

==================== One Month Modified Files and Folders =======

2013-06-07 07:04 - 2012-12-22 12:12 - 00000000 ____D C:\Users\Warter\AppData\Local\PMB Files
2013-06-07 07:01 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-07 07:01 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-07 03:00 - 2013-06-06 15:57 - 00033861 ____A C:\Windows\WindowsUpdate.log
2013-06-07 02:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-06-06 21:41 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-06 19:59 - 2013-06-06 18:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-06 19:59 - 2011-05-09 20:03 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-06 19:59 - 2011-05-09 19:57 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-06 19:55 - 2013-06-06 18:09 - 00000000 ____D C:\Windows\LastGood
2013-06-06 19:55 - 2011-05-09 19:58 - 00000000 ____D C:\Program Files (x86)\Intel
2013-06-06 19:53 - 2011-11-29 19:32 - 00000000 ____D C:\Users\Warter\Desktop\Renson
2013-06-06 18:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF
2013-06-06 17:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-06 17:05 - 2013-06-06 17:05 - 00000000 ____D C:\Windows\ERUNT
2013-06-06 17:05 - 2013-06-06 17:04 - 00000000 ____D C:\JRT
2013-06-06 17:05 - 2009-07-14 12:49 - 00707918 ____A C:\Windows\System32\perfh007.dat
2013-06-06 17:05 - 2009-07-14 12:49 - 00153404 ____A C:\Windows\System32\perfc007.dat
2013-06-06 17:05 - 2009-07-14 07:13 - 01644414 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-06 17:01 - 2013-06-06 14:56 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-06 17:01 - 2013-06-06 14:56 - 00000392 ____A C:\Windows\setupact.log
2013-06-06 17:01 - 2011-05-10 16:20 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-06 17:01 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-06 17:00 - 2013-06-06 16:59 - 00005064 ____A C:\AdwCleaner[S1].txt
2013-06-06 16:58 - 2013-06-06 16:58 - 00890839 ____A C:\Users\Warter\Desktop\SecurityCheck.exe
2013-06-06 16:58 - 2013-06-06 16:58 - 00760723 ____A (Farbar) C:\Users\Warter\Desktop\MiniToolBox.exe
2013-06-06 16:57 - 2013-06-06 16:58 - 02347384 ____A (ESET) C:\Users\Warter\Desktop\esetsmartinstaller_enu.exe
2013-06-06 16:56 - 2013-06-06 16:58 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Warter\Desktop\JRT.exe
2013-06-06 16:55 - 2013-06-06 16:58 - 00632031 ____A C:\Users\Warter\Desktop\adwcleaner.exe
2013-06-06 15:10 - 2011-05-09 18:43 - 00000000 ____D C:\users\Warter
2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt
2013-06-06 14:29 - 2013-06-06 16:19 - 01917710 ____A (Farbar) C:\Users\Warter\Desktop\FRST64.exe
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-06 07:10 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-04 14:40 - 2012-04-28 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-03 23:51 - 2013-06-03 23:45 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:44 - 2013-06-03 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:58 - 2011-10-25 18:53 - 00000000 ____D C:\Users\Warter\AppData\Roaming\TS3Client
2013-05-23 15:05 - 2012-01-16 20:24 - 00000000 ____D C:\Users\Warter\AppData\Roaming\Mumble
2013-05-21 16:05 - 2012-09-21 09:10 - 00000000 ____D C:\Users\Warter\Desktop\Fotos Handy
2013-05-20 19:16 - 2013-05-16 20:41 - 00000381 ____A C:\Windows\check.txt
2013-05-16 20:34 - 2009-07-14 06:45 - 00294344 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 16:39 - 2010-06-08 22:10 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-16 10:07 - 2012-04-09 19:34 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-05-16 10:07 - 2011-05-19 20:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-05-08 20:37 - 2012-09-27 11:06 - 00000000 ____D C:\Users\Warter\Documents\FIFA 13

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


Last Boot: 2013-06-03 15:51

==================== End Of Log ============================
         
--- --- ---

Alt 07.06.2013, 06:32   #22
schrauber
/// the machine
/// TB-Ausbilder
 

Polizei Virus - Standard

Polizei Virus



Hi,

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Fix mit FRST
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument
Code:
ATTFilter
C:\Req.Clean\11D66D3D7F9DAE3
HKLM-x32\...\Run: []  [x]
         
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Fix Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 08.06.2013, 20:20   #23
Sharkyat
 
Polizei Virus - Standard

Polizei Virus



Sorry war unterwegs kind und kegel :-)



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-06-2013 01
Ran by Warter at 2013-06-08 21:14:48 Run:3
Running from C:\Users\Warter\Desktop
Boot Mode: Normal
==============================================

C:\Req.Clean\11D66D3D7F9DAE3 => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.

==== End of Fixlog ====

Alt 08.06.2013, 20:42   #24
schrauber
/// the machine
/// TB-Ausbilder
 

Polizei Virus - Standard

Polizei Virus



Wenn Du keine Probleme mehr hast sind wir fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Falls Du Lob/Kritik loswerden möchtest:
Lob, Kritik und Wünsche - Trojaner-Board


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Polizei Virus
.dll, administrator, antivir, browser, exp/java.ongleful.gen, exp/java.pershex.gen, exp/java.posmary.gen, explorer, farbar, farbar recovery scan tool, flash player, frst.txt, launch, msiinstaller, officejet, plug-in, polizeidirektion, programme, registry, richtlinie, safer networking, services.exe, svchost.exe, system, system error, winlogon.exe




Ähnliche Themen: Polizei Virus


  1. Polizei virus
    Plagegeister aller Art und deren Bekämpfung - 21.08.2013 (9)
  2. Polizei Virus
    Plagegeister aller Art und deren Bekämpfung - 24.03.2013 (34)
  3. Polizei-Virus Win XP
    Plagegeister aller Art und deren Bekämpfung - 13.03.2013 (20)
  4. Polizei Virus
    Plagegeister aller Art und deren Bekämpfung - 24.10.2012 (10)
  5. Polizei Virus
    Plagegeister aller Art und deren Bekämpfung - 20.10.2012 (28)
  6. Polizei Virus 5.2
    Plagegeister aller Art und deren Bekämpfung - 20.10.2012 (4)
  7. Polizei Virus
    Plagegeister aller Art und deren Bekämpfung - 18.10.2012 (4)
  8. Polizei Virus
    Plagegeister aller Art und deren Bekämpfung - 29.09.2012 (14)
  9. Polizei Virus
    Log-Analyse und Auswertung - 27.09.2012 (3)
  10. Polizei Virus
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (13)
  11. Polizei Virus Neu?
    Plagegeister aller Art und deren Bekämpfung - 05.09.2012 (1)
  12. Polizei Virus 5.2
    Plagegeister aller Art und deren Bekämpfung - 23.08.2012 (11)
  13. Polizei Einheit 5.2 Virus Österreich Virus
    Log-Analyse und Auswertung - 05.08.2012 (14)
  14. Polizei Virus 5.2
    Plagegeister aller Art und deren Bekämpfung - 10.07.2012 (1)
  15. ----- Polizei Virus -----
    Plagegeister aller Art und deren Bekämpfung - 08.06.2012 (11)
  16. Task-manager durch virus blockiert, Polizei-virus
    Log-Analyse und Auswertung - 02.04.2012 (1)
  17. Polizei virus
    Log-Analyse und Auswertung - 18.04.2011 (1)

Zum Thema Polizei Virus - Es brennt kein Licht hinten am Netzwerkanschluss am Rechner???? WLAN an Board am Rechner? - Polizei Virus...
Archiv
Du betrachtest: Polizei Virus auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.