Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 17.09.2013, 20:07   #1
schrauber
/// the machine
/// TB-Ausbilder
 

Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet - Standard

Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet



Normal nicht, aber wenn dann kannste zwischenzeitlich in Urlaub fahren
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.09.2013, 08:09   #2
alrescha
 
Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet - Standard

Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet



Zitat:
Zitat von schrauber Beitrag anzeigen
Normal nicht, aber wenn dann kannste zwischenzeitlich in Urlaub fahren


Sorry, dass es so lange gedauert hat. Lag nicht an NAS, sondern daran, dass ich erst gestern wieder dazu gekommen bin, mich um den Rechner zu kümmern.

ESET-Log:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=68607236545d3e41bbc6ab1adf67f261
# engine=15177
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-18 05:03:23
# local_time=2013-09-18 07:03:23 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=5892 16776574 100 100 46925 217056505 0 0
# scanned=92571
# found=0
# cleaned=0
# scan_time=2865
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=68607236545d3e41bbc6ab1adf67f261
# engine=15204
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-21 06:38:33
# local_time=2013-09-21 08:38:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=5892 16776574 100 100 268635 217278215 0 0
# scanned=195756
# found=0
# cleaned=0
# scan_time=6213
         
checkup.txt

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.73  
 Windows Vista Service Pack 2 x86 (UAC is enabled)  
 Internet Explorer 9  
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Internet Security   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 	11.8.800.168  
 Mozilla Firefox 18.0.2 Firefox out of Date!  
 Mozilla Thunderbird (17.0.6) 
 Google Chrome 29.0.1547.62  
 Google Chrome 29.0.1547.66  
````````Process Check: objlist.exe by Laurent````````  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         
FRST-Log:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-09-2013 01
Ran by Suse (administrator) on SUSE-PC on 21-09-2013 08:51:44
Running from C:\Users\Suse\Desktop
Microsoft® Windows Vista™ Business  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(OpenOffice.org) C:\Programme\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Programme\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [nwiz] - nwiz.exe /install
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NVHotkey] - rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Policies\Explorer: [NoDrives] 0
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Tinchen\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\Users\Suse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Programme\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll No File
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Suse\AppData\Roaming\Mozilla\Firefox\Profiles\umtfam07.default
FF DefaultSearchEngine: Sichere Suche
FF SearchEngineOrder.1: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Programme\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Suse\AppData\Roaming\Mozilla\Firefox\Profiles\umtfam07.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Programme\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1
CHR Extension: (YouTube) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Chrome YouTube Downloader) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbdjiinahkdjdcdlgfimlcolkjpbooja\2.6.19_0
CHR Extension: (Adblock Plus) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.5_0
CHR Extension: (Google Search) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\14.0.0.4651_0
CHR Extension: (AdBlock) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0
CHR Extension: (FVD Video Downloader) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.4.1_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1
CHR Extension: (Gmail) - C:\Users\Suse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-06-17] (Kaspersky Lab ZAO)

==================== Drivers (Whitelisted) ====================

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-05-06] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [573536 2013-08-14] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-06-10] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-05-05] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-05-05] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145120 2013-06-06] (Kaspersky Lab ZAO)
S3 catchme; \??\C:\Users\Suse\AppData\Local\Temp\catchme.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [94304 2013-06-08] (Kaspersky Lab ZAO)
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-21 08:51 - 2013-09-21 08:51 - 01083549 _____ (Farbar) C:\Users\Suse\Desktop\FRST.exe
2013-09-21 08:48 - 2013-09-21 08:48 - 00000873 _____ C:\Users\Suse\Desktop\checkup.txt
2013-09-19 05:58 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-09-19 05:58 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-09-19 05:58 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-09-19 05:58 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-09-19 05:58 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-09-19 05:58 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-09-19 05:58 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-09-19 05:58 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-09-19 05:58 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-09-19 05:58 - 2011-03-12 23:55 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-09-18 18:12 - 2013-09-18 18:12 - 00891144 _____ C:\Users\Suse\Desktop\SecurityCheck.exe
2013-09-18 18:11 - 2013-09-18 18:11 - 02347384 _____ (ESET) C:\Users\Suse\Desktop\esetsmartinstaller_enu.exe
2013-09-18 17:40 - 2013-09-18 17:40 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-09-18 17:23 - 2013-09-18 17:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2013-09-18 17:23 - 2013-09-18 17:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
2013-09-18 08:03 - 2009-09-10 04:01 - 03023360 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2013-09-18 08:03 - 2009-09-10 04:00 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2013-09-18 08:03 - 2009-09-10 04:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-09-18 08:00 - 2009-10-01 03:02 - 02537472 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2013-09-18 08:00 - 2009-10-01 03:02 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2013-09-18 08:00 - 2009-10-01 03:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2013-09-18 08:00 - 2009-10-01 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll
2013-09-18 08:00 - 2009-10-01 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe
2013-09-18 08:00 - 2009-10-01 03:01 - 00546816 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
2013-09-18 08:00 - 2009-10-01 03:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WpdUsb.sys
2013-09-18 08:00 - 2009-10-01 03:01 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\WpdConns.dll
2013-09-18 07:48 - 2012-02-29 17:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-09-18 07:48 - 2012-02-29 17:09 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-09-18 07:48 - 2012-02-29 15:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-09-18 07:25 - 2013-09-18 07:25 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-18 07:25 - 2013-09-18 07:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-18 07:25 - 2013-09-18 07:25 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-18 07:25 - 2013-09-18 07:25 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-18 07:25 - 2013-09-18 07:25 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-18 07:25 - 2013-09-18 07:25 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-18 07:24 - 2013-09-18 07:24 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2013-09-18 07:24 - 2013-09-18 07:24 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2013-09-18 07:24 - 2013-09-18 07:24 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2013-09-18 07:23 - 2013-09-18 07:23 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-09-18 07:22 - 2013-09-18 07:26 - 00004461 _____ C:\Windows\IE9_main.log
2013-09-18 06:42 - 2012-07-26 05:39 - 00526952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-09-18 06:42 - 2012-07-26 05:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-09-18 06:42 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-09-18 06:42 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-09-18 06:42 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-09-18 06:42 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-09-18 06:42 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-09-18 06:42 - 2012-07-26 04:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-09-18 06:42 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-09-18 06:42 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-09-18 06:42 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-09-18 06:42 - 2012-06-02 16:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-09-18 06:42 - 2009-07-14 14:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll
2013-09-18 06:28 - 2012-12-16 15:12 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-09-18 06:28 - 2012-12-16 12:50 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-09-18 06:13 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-09-18 06:13 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-18 06:13 - 2012-05-11 17:57 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-09-18 06:13 - 2011-10-14 18:03 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-09-18 06:13 - 2011-10-14 18:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll
2013-09-18 06:13 - 2011-07-29 18:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-09-18 06:13 - 2011-07-29 18:01 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-09-18 06:13 - 2011-07-29 18:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2013-09-18 06:13 - 2011-07-29 18:00 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2013-09-18 06:12 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-09-18 06:12 - 2013-07-05 06:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-18 06:12 - 2012-09-25 18:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-09-18 06:12 - 2012-06-08 19:47 - 11586048 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-18 06:12 - 2011-10-14 18:02 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-09-18 06:11 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-09-18 06:11 - 2013-04-15 16:20 - 00638328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-09-18 06:11 - 2013-04-13 12:56 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-09-18 06:11 - 2013-03-03 21:07 - 01082232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-09-18 06:11 - 2012-11-20 06:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-09-18 06:11 - 2012-11-02 12:18 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-09-18 06:11 - 2012-11-02 10:26 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2013-09-18 06:11 - 2012-08-21 13:47 - 00224640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-09-18 06:11 - 2012-06-29 18:01 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-09-18 06:11 - 2012-03-21 01:28 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-09-18 06:11 - 2011-11-18 19:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-09-18 06:11 - 2011-02-22 16:13 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-09-18 06:10 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-18 06:10 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-09-18 06:10 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-18 06:10 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-09-18 06:10 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-18 06:10 - 2013-05-02 06:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-09-18 06:10 - 2013-05-02 06:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll
2013-09-18 06:10 - 2013-04-24 06:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-09-18 06:10 - 2013-04-24 03:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-09-18 06:10 - 2013-03-09 05:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-18 06:10 - 2013-03-09 03:28 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-18 06:10 - 2012-11-22 05:54 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2013-09-18 06:10 - 2012-11-08 05:48 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-09-18 06:10 - 2012-11-02 12:19 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-09-18 06:10 - 2012-09-28 18:11 - 00892928 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-18 06:10 - 2011-12-14 18:17 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-09-18 06:10 - 2011-11-16 18:23 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-09-18 06:10 - 2011-10-25 17:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-09-18 06:10 - 2011-08-25 18:15 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2013-09-18 06:10 - 2011-08-25 18:14 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-09-18 06:10 - 2011-08-25 18:14 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-09-18 06:10 - 2011-08-25 15:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\oleaccrc.dll
2013-09-18 06:09 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-18 06:09 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-09-18 06:09 - 2013-04-17 14:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-09-18 06:09 - 2013-03-08 05:53 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-18 06:09 - 2013-03-08 05:52 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-09-18 06:09 - 2012-06-05 18:47 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-09-18 06:09 - 2012-05-01 16:03 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-09-18 06:09 - 2011-06-15 18:12 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-09-18 06:08 - 2013-02-12 03:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-09-18 06:08 - 2012-06-04 17:26 - 00440704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-09-18 06:08 - 2012-06-02 02:04 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-09-18 06:08 - 2011-11-16 18:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-09-18 06:08 - 2011-11-16 18:21 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-09-18 06:08 - 2011-11-16 16:12 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-09-18 06:08 - 2010-05-04 21:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll
2013-09-18 05:47 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-09-18 05:47 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-09-18 05:47 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-09-18 05:47 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-09-18 05:42 - 2013-09-21 08:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-18 05:38 - 2012-01-09 17:54 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2013-09-18 05:27 - 2012-06-03 00:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-18 05:27 - 2012-06-03 00:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-18 05:27 - 2012-06-03 00:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-18 05:27 - 2012-06-03 00:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-18 05:26 - 2012-06-03 00:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-18 05:26 - 2012-06-03 00:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-18 05:26 - 2012-06-03 00:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-18 05:26 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-18 05:26 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-17 20:48 - 2013-09-17 20:48 - 00000000 ____D C:\Windows\system32\vi-VN
2013-09-17 20:48 - 2013-09-17 20:48 - 00000000 ____D C:\Windows\system32\eu-ES
2013-09-17 20:48 - 2013-09-17 20:48 - 00000000 ____D C:\Windows\system32\ca-ES
2013-09-17 20:16 - 2013-09-17 20:16 - 00096848 _____ C:\Users\Suse\Desktop\chrome-youtube-downloader-2.6.18.zip
2013-09-17 17:46 - 2013-09-17 17:46 - 00000000 ____D C:\Windows\system32\EventProviders
2013-09-17 05:29 - 2013-09-17 05:29 - 00007554 _____ C:\Users\Suse\Desktop\combofix.txt
2013-09-17 05:27 - 2013-09-17 05:27 - 00007554 _____ C:\ComboFix.txt
2013-09-17 05:19 - 2013-09-17 05:28 - 00000000 ____D C:\ComboFix
2013-09-17 05:19 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-17 05:19 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-17 05:19 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-17 05:19 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-17 05:19 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-17 05:19 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-17 05:19 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-17 05:19 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-17 05:18 - 2013-09-17 05:27 - 00000000 ____D C:\Windows\erdnt
2013-09-17 05:18 - 2013-09-17 05:27 - 00000000 ____D C:\Qoobox
2013-09-17 05:17 - 2013-09-17 05:17 - 05126417 ____R (Swearware) C:\Users\Suse\Desktop\ComboFix.exe
2013-09-16 20:11 - 2013-09-16 20:11 - 00002111 _____ C:\Users\Suse\Desktop\Sicherer Zahlungsverkehr.lnk
2013-09-16 20:08 - 2013-09-16 20:07 - 00001001 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2013-09-16 20:03 - 2013-09-21 07:08 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-16 20:03 - 2013-09-16 20:03 - 00000000 ____D C:\Program Files\Kaspersky Lab
2013-09-16 20:02 - 2013-08-14 12:40 - 00573536 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 20:02 - 2013-06-08 20:18 - 00094304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 19:37 - 2013-09-16 19:37 - 00136120 _____ C:\Windows\Minidump\Mini091613-05.dmp
2013-09-16 19:08 - 2013-09-16 19:49 - 00000386 _____ C:\Users\Suse\Desktop\gmer.log
2013-09-16 18:52 - 2013-09-16 18:52 - 00147552 _____ C:\Windows\Minidump\Mini091613-04.dmp
2013-09-16 18:43 - 2013-09-16 18:43 - 00136120 _____ C:\Windows\Minidump\Mini091613-03.dmp
2013-09-16 18:25 - 2013-09-16 18:25 - 00147552 _____ C:\Windows\Minidump\Mini091613-02.dmp
2013-09-16 18:09 - 2013-09-16 18:09 - 00147552 _____ C:\Windows\Minidump\Mini091613-01.dmp
2013-09-16 18:08 - 2013-09-16 19:36 - 261043122 _____ C:\Windows\MEMORY.DMP
2013-09-16 18:04 - 2013-09-16 18:04 - 00018731 _____ C:\Users\Suse\Desktop\FRST1.txt
2013-09-16 18:03 - 2013-09-16 18:04 - 00015864 _____ C:\Users\Suse\Desktop\Addition.txt
2013-09-16 18:03 - 2013-09-16 18:03 - 00377856 _____ C:\Users\Suse\Desktop\gmer_2.1.19163.exe
2013-09-16 18:02 - 2013-09-16 18:02 - 00000000 ____D C:\FRST
2013-09-16 17:57 - 2013-09-16 18:57 - 00000470 _____ C:\Users\Suse\Desktop\defogger_disable.log
2013-09-16 17:57 - 2013-09-16 17:57 - 00000000 _____ C:\Users\Suse\defogger_reenable
2013-09-16 17:56 - 2013-09-16 17:56 - 00050477 _____ C:\Users\Suse\Desktop\Defogger.exe
2013-09-16 07:03 - 2013-09-16 07:03 - 00007145 _____ C:\Users\Suse\AppData\Local\recently-used.xbel
2013-09-15 08:28 - 2013-09-15 08:28 - 00000976 _____ C:\Users\Suse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free FLV Converter.lnk
2013-09-15 08:28 - 2013-09-15 08:28 - 00000000 ____D C:\Users\Suse\AppData\Roaming\FreeFLVConverter
2013-09-15 08:28 - 2013-07-01 11:53 - 00397312 _____ (Koyote-Lab Inc) C:\Windows\system32\TubeFinder.exe
2013-09-15 08:28 - 2011-09-28 10:18 - 01081616 _____ (Microsoft Corporation) C:\Windows\system32\mscomctl.ocx
2013-09-15 08:28 - 2011-09-28 10:18 - 00364544 _____ C:\Windows\system32\PropertyGrid.ocx
2013-09-15 08:28 - 2011-09-28 10:18 - 00208500 _____ C:\Windows\system32\ReyXpBasics.tlb
2013-09-15 08:28 - 2011-09-28 10:18 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\COMDLG32.OCX
2013-09-15 08:28 - 2011-09-28 10:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\MSCMCFR.DLL
2013-09-15 08:28 - 2011-09-28 10:18 - 00119568 _____ (Microsoft Corporation) C:\Windows\system32\VB6FR.DLL
2013-09-15 08:28 - 2011-09-28 10:18 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2013-09-15 08:28 - 2011-09-28 10:18 - 00084512 _____ (Microsoft Corporation) C:\Windows\system32\PICCLP32.OCX
2013-09-15 08:28 - 2011-09-28 10:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\CMDLGFR.DLL
2013-09-15 08:28 - 2011-09-28 10:18 - 00024576 _____ C:\Windows\system32\ControlSubX.ocx
2013-09-15 08:28 - 2011-09-28 10:18 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\PCCLPFR.DLL
2013-09-15 08:27 - 2013-09-15 08:28 - 00000000 ____D C:\Program Files\Free FLV Converter
2013-09-13 05:26 - 2013-09-13 05:28 - 00000000 ____D C:\Windows\system32\MRT
2013-09-08 07:48 - 2013-09-08 07:48 - 00000000 ____D C:\ProgramData\APN
2013-09-08 07:47 - 2013-09-16 19:56 - 00000000 ____D C:\ProgramData\Avira
2013-09-01 09:29 - 2013-09-01 09:29 - 00000000 ____D C:\Users\Suse\AppData\Roaming\dvdcss

==================== One Month Modified Files and Folders =======

2013-09-21 08:51 - 2013-09-21 08:51 - 01083549 _____ (Farbar) C:\Users\Suse\Desktop\FRST.exe
2013-09-21 08:49 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-21 08:49 - 2006-11-02 14:47 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-21 08:48 - 2013-09-21 08:48 - 00000873 _____ C:\Users\Suse\Desktop\checkup.txt
2013-09-21 08:10 - 2012-12-09 12:43 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-21 08:10 - 2012-12-09 12:43 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-21 08:10 - 2008-01-21 03:39 - 01179782 _____ C:\Windows\WindowsUpdate.log
2013-09-21 08:04 - 2013-09-18 05:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-21 07:08 - 2013-09-16 20:03 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-21 06:50 - 2013-08-09 16:48 - 00060096 _____ C:\ProgramData\nvModes.dat
2013-09-21 06:50 - 2013-08-09 16:48 - 00060096 _____ C:\ProgramData\nvModes.001
2013-09-21 06:49 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-20 22:07 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-20 22:02 - 2013-02-17 12:05 - 00000000 ____D C:\Users\Suse\AppData\Roaming\vlc
2013-09-20 18:04 - 2013-02-07 11:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-20 18:04 - 2013-02-07 11:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-20 06:27 - 2006-11-02 12:33 - 01445310 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-18 18:12 - 2013-09-18 18:12 - 00891144 _____ C:\Users\Suse\Desktop\SecurityCheck.exe
2013-09-18 18:11 - 2013-09-18 18:11 - 02347384 _____ (ESET) C:\Users\Suse\Desktop\esetsmartinstaller_enu.exe
2013-09-18 18:10 - 2013-08-09 16:45 - 00019013 _____ C:\Windows\setupact.log
2013-09-18 18:09 - 2012-12-06 23:56 - 00000949 _____ C:\Users\Suse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-18 18:00 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-09-18 17:55 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-18 17:43 - 2006-11-02 14:47 - 00255168 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-18 17:40 - 2013-09-18 17:40 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-09-18 17:40 - 2012-12-07 08:44 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-09-18 17:40 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ___RD C:\Windows\Offline Web Pages
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\zh-TW
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\zh-HK
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\zh-CN
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\uk-UA
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\tr-TR
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\th-TH
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\sv-SE
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\sl-SI
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\sk-SK
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\ru-RU
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\ro-RO
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\pt-PT
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\pt-BR
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\pl-PL
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\nl-NL
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\nb-NO
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\lv-LV
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\lt-LT
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\ko-KR
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\ja-JP
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\it-IT
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\hu-HU
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\hr-HR
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\he-IL
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\fr-FR
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\fi-FI
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\et-EE
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\el-GR
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\bg-BG
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\ar-SA
2013-09-18 17:40 - 2006-11-02 13:18 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-18 17:39 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-18 17:23 - 2013-09-18 17:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2013-09-18 17:23 - 2013-09-18 17:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
2013-09-18 17:22 - 2006-11-02 15:00 - 00030850 _____ C:\Windows\PFRO.log
2013-09-18 07:26 - 2013-09-18 07:22 - 00004461 _____ C:\Windows\IE9_main.log
2013-09-18 07:25 - 2013-09-18 07:25 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-18 07:25 - 2013-09-18 07:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-18 07:25 - 2013-09-18 07:25 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-18 07:25 - 2013-09-18 07:25 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-18 07:25 - 2013-09-18 07:25 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-18 07:25 - 2013-09-18 07:25 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-18 07:25 - 2013-09-18 07:25 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-18 07:25 - 2013-09-18 07:25 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-18 07:25 - 2006-11-02 08:32 - 00008798 _____ C:\Windows\system32\icrav03.rat
2013-09-18 07:25 - 2006-11-02 08:32 - 00001988 _____ C:\Windows\system32\ticrf.rat
2013-09-18 07:24 - 2013-09-18 07:24 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2013-09-18 07:24 - 2013-09-18 07:24 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2013-09-18 07:24 - 2013-09-18 07:24 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2013-09-18 07:24 - 2013-09-18 07:24 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2013-09-18 07:23 - 2013-09-18 07:23 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2013-09-18 07:23 - 2013-09-18 07:23 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-09-18 05:40 - 2012-12-06 23:56 - 00000915 _____ C:\Users\Suse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-09-17 20:48 - 2013-09-17 20:48 - 00000000 ____D C:\Windows\system32\vi-VN
2013-09-17 20:48 - 2013-09-17 20:48 - 00000000 ____D C:\Windows\system32\eu-ES
2013-09-17 20:48 - 2013-09-17 20:48 - 00000000 ____D C:\Windows\system32\ca-ES
2013-09-17 20:48 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-09-17 20:48 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Photo Gallery
2013-09-17 20:48 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-17 20:48 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Collaboration
2013-09-17 20:48 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Calendar
2013-09-17 20:48 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Movie Maker
2013-09-17 20:48 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\SLUI
2013-09-17 20:48 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2013-09-17 20:48 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\IME
2013-09-17 20:16 - 2013-09-17 20:16 - 00096848 _____ C:\Users\Suse\Desktop\chrome-youtube-downloader-2.6.18.zip
2013-09-17 17:46 - 2013-09-17 17:46 - 00000000 ____D C:\Windows\system32\EventProviders
2013-09-17 05:29 - 2013-09-17 05:29 - 00007554 _____ C:\Users\Suse\Desktop\combofix.txt
2013-09-17 05:28 - 2013-09-17 05:19 - 00000000 ____D C:\ComboFix
2013-09-17 05:27 - 2013-09-17 05:27 - 00007554 _____ C:\ComboFix.txt
2013-09-17 05:27 - 2013-09-17 05:18 - 00000000 ____D C:\Windows\erdnt
2013-09-17 05:27 - 2013-09-17 05:18 - 00000000 ____D C:\Qoobox
2013-09-17 05:27 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-09-17 05:27 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-09-17 05:26 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-09-17 05:17 - 2013-09-17 05:17 - 05126417 ____R (Swearware) C:\Users\Suse\Desktop\ComboFix.exe
2013-09-16 20:11 - 2013-09-16 20:11 - 00002111 _____ C:\Users\Suse\Desktop\Sicherer Zahlungsverkehr.lnk
2013-09-16 20:07 - 2013-09-16 20:08 - 00001001 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2013-09-16 20:07 - 2012-12-06 23:56 - 00000000 ____D C:\Users\Suse
2013-09-16 20:03 - 2013-09-16 20:03 - 00000000 ____D C:\Program Files\Kaspersky Lab
2013-09-16 19:56 - 2013-09-08 07:47 - 00000000 ____D C:\ProgramData\Avira
2013-09-16 19:49 - 2013-09-16 19:08 - 00000386 _____ C:\Users\Suse\Desktop\gmer.log
2013-09-16 19:37 - 2013-09-16 19:37 - 00136120 _____ C:\Windows\Minidump\Mini091613-05.dmp
2013-09-16 19:37 - 2013-02-07 10:35 - 00000000 ____D C:\Windows\Minidump
2013-09-16 19:36 - 2013-09-16 18:08 - 261043122 _____ C:\Windows\MEMORY.DMP
2013-09-16 18:57 - 2013-09-16 17:57 - 00000470 _____ C:\Users\Suse\Desktop\defogger_disable.log
2013-09-16 18:52 - 2013-09-16 18:52 - 00147552 _____ C:\Windows\Minidump\Mini091613-04.dmp
2013-09-16 18:43 - 2013-09-16 18:43 - 00136120 _____ C:\Windows\Minidump\Mini091613-03.dmp
2013-09-16 18:25 - 2013-09-16 18:25 - 00147552 _____ C:\Windows\Minidump\Mini091613-02.dmp
2013-09-16 18:09 - 2013-09-16 18:09 - 00147552 _____ C:\Windows\Minidump\Mini091613-01.dmp
2013-09-16 18:04 - 2013-09-16 18:04 - 00018731 _____ C:\Users\Suse\Desktop\FRST1.txt
2013-09-16 18:04 - 2013-09-16 18:03 - 00015864 _____ C:\Users\Suse\Desktop\Addition.txt
2013-09-16 18:03 - 2013-09-16 18:03 - 00377856 _____ C:\Users\Suse\Desktop\gmer_2.1.19163.exe
2013-09-16 18:02 - 2013-09-16 18:02 - 00000000 ____D C:\FRST
2013-09-16 17:57 - 2013-09-16 17:57 - 00000000 _____ C:\Users\Suse\defogger_reenable
2013-09-16 17:56 - 2013-09-16 17:56 - 00050477 _____ C:\Users\Suse\Desktop\Defogger.exe
2013-09-16 07:03 - 2013-09-16 07:03 - 00007145 _____ C:\Users\Suse\AppData\Local\recently-used.xbel
2013-09-16 07:03 - 2012-12-18 22:27 - 00000000 ____D C:\Users\Suse\.gimp-2.8
2013-09-15 11:35 - 2012-12-18 22:05 - 00023552 _____ C:\Users\Suse\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-15 08:28 - 2013-09-15 08:28 - 00000976 _____ C:\Users\Suse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free FLV Converter.lnk
2013-09-15 08:28 - 2013-09-15 08:28 - 00000000 ____D C:\Users\Suse\AppData\Roaming\FreeFLVConverter
2013-09-15 08:28 - 2013-09-15 08:27 - 00000000 ____D C:\Program Files\Free FLV Converter
2013-09-13 05:28 - 2013-09-13 05:26 - 00000000 ____D C:\Windows\system32\MRT
2013-09-08 07:48 - 2013-09-08 07:48 - 00000000 ____D C:\ProgramData\APN
2013-09-08 07:43 - 2013-08-08 14:23 - 00000000 ____D C:\Program Files\McAfee
2013-09-08 07:43 - 2013-08-08 14:10 - 00000000 ____D C:\Program Files\Common Files\McAfee
2013-09-08 07:43 - 2013-02-07 11:29 - 00000000 ____D C:\ProgramData\McAfee
2013-09-08 07:40 - 2013-02-17 12:04 - 00000000 ____D C:\Programme
2013-09-05 20:12 - 2013-05-05 08:10 - 00036089 _____ C:\Users\Suse\literaturschock_newsletter.nlgp
2013-09-05 18:47 - 2013-08-08 10:33 - 00000000 ____D C:\Program Files\Opera
2013-09-01 16:57 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-01 09:29 - 2013-09-01 09:29 - 00000000 ____D C:\Users\Suse\AppData\Roaming\dvdcss
2013-08-23 15:52 - 2013-08-08 14:31 - 00262144 _____ C:\Windows\system32\config\ELAM

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-21 06:58

==================== End Of Log ============================
         
--- --- ---


Sieht ganz ok aus, oder?

War da jetzt eigentlich etwas infiziert oder lag es nur an meinem Filezilla?

Vielen Dank nochmals für die tolle Unterstützung!

Grüße
Susanne
__________________


Antwort

Themen zu Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet
adblock, antivirus, auf werbung umgeleitet, converter, defender, downloader, epupdater, explorer, farbar, farbar recovery scan tool, firefox, flash player, google, helper, homepage, kaspersky, malware, registry, rootkit, rundll, scan, security, services.exe, software, svchost.exe, system, usb, vista, werbung, windows, youtube downloader




Ähnliche Themen: Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet


  1. Windows 7: Webseiten werden auf Werbung umgeleitet
    Log-Analyse und Auswertung - 19.08.2015 (11)
  2. Windows 7: Webseiten werden auf Werbung umgeleitet
    Log-Analyse und Auswertung - 15.07.2015 (19)
  3. Windows 7: Webseiten werden auf Werbung umgeleitet.
    Log-Analyse und Auswertung - 11.02.2015 (19)
  4. Windows 7: Webseiten werden auf Werbung umgeleitet.
    Plagegeister aller Art und deren Bekämpfung - 25.11.2014 (9)
  5. Windows 7: Webseiten werden auf Werbung umgeleitet.
    Log-Analyse und Auswertung - 12.11.2014 (8)
  6. Windows 8: Webseiten werden auf Werbung umgeleitet.
    Log-Analyse und Auswertung - 01.08.2014 (5)
  7. Windows 7: Internet Explorer startet automatisch Werbung/ Webseiten werden auf Werbung umgeleitet
    Log-Analyse und Auswertung - 27.07.2014 (7)
  8. Webseiten werden auf Werbung umgeleitet
    Plagegeister aller Art und deren Bekämpfung - 08.06.2014 (49)
  9. Webseiten werden auf Werbung umgeleitet
    Log-Analyse und Auswertung - 13.04.2014 (5)
  10. Windows Vista: Webseiten werden auf Werbung umgeleitet.
    Log-Analyse und Auswertung - 11.04.2014 (34)
  11. Windows 7: Webseiten werden auf Werbung umgeleitet
    Plagegeister aller Art und deren Bekämpfung - 16.02.2014 (9)
  12. Windows 7: Webseiten werden auf Werbung umgeleitet
    Log-Analyse und Auswertung - 07.01.2014 (6)
  13. Windows 7: Webseiten werden auf Werbung umgeleitet, veralteter Browser erkannt obwohl aktuell wie auch flashplayer, spybot search mit Virus
    Log-Analyse und Auswertung - 11.12.2013 (16)
  14. Windows 7: Webseiten werden auf Werbung umgeleitet.
    Log-Analyse und Auswertung - 30.11.2013 (12)
  15. Windows Vista Home Premium Service Pack 2 2007: Webseiten werden auf Werbung umgeleitet! Besonders bei Googlesuche! ihavenet Virus?
    Log-Analyse und Auswertung - 16.10.2013 (9)
  16. Windows 7: Webseiten werden auf Werbung umgeleitet.
    Plagegeister aller Art und deren Bekämpfung - 12.09.2013 (3)
  17. Windows 8: Webseiten werden auf Werbung umgeleitet
    Log-Analyse und Auswertung - 24.08.2013 (5)

Zum Thema Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet - Normal nicht, aber wenn dann kannste zwischenzeitlich in Urlaub fahren - Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet...
Archiv
Du betrachtest: Win Vista: Webseiten (auch Besucher) werden auf Werbung umgeleitet auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.