Trojaner-Board - Malwarebytes Anti-Malware 10 infizierte Datein

Attach:

Zitat:

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.DDS Logfile:

Code:

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Ultimate 

Boot Device: \Device\HarddiskVolume2

Install Date: 11.05.2010 23:09:40

System Uptime: 28.12.2012 18:44:53 (3 hours ago)

.

Motherboard: Acer |  | Aspire 8930

Processor: Intel(R) Core(TM)2 Duo CPU     T5800  @ 2.00GHz | CPU | 2000/800mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 287 GiB total, 112,197 GiB free.

D: is CDROM ()

E: is FIXED (NTFS) - 11 GiB total, 10,865 GiB free.

.

==== Disabled Device Manager Items =============

.

Class GUID: 

Description: 

Device ID: ACPI\ITE8708\5&15D725F4&0

Manufacturer: 

Name: 

PNP Device ID: ACPI\ITE8708\5&15D725F4&0

Service: 

.

Class GUID: 

Description: 

Device ID: USB\VID_138A&PID_0001\5&2C540981&0&1

Manufacturer: 

Name: 

PNP Device ID: USB\VID_138A&PID_0001\5&2C540981&0&1

Service: 

.

==== System Restore Points ===================

.

RP441: 18.12.2012 17:08:50 - Windows Update

RP442: 20.12.2012 22:57:47 - Windows Update

RP443: 25.12.2012 14:04:39 - Windows Update

RP444: 26.12.2012 02:03:23 - Removed iTunes

RP445: 26.12.2012 02:24:50 - Removed Java 7 Update 9

RP446: 26.12.2012 02:27:18 - Removed Java(TM) 6 Update 25

RP447: 27.12.2012 22:32:06 - Removed iTunes

RP448: 27.12.2012 22:38:13 - Installed Microsoft Fix it 50096

RP449: 27.12.2012 22:42:37 - avast! Free Antivirus Setup

.

==== Installed Programs ======================

.

4Story 1.5

4Story DE 3.9.164

ABBYY FineReader 6.0 Sprint

Acer Crystal Eye Webcam

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Reader X (10.1.4) - Deutsch

Akamai NetSession Interface Service

Apple Application Support

Apple Mobile Device Support

Apple Software Update

avast! Free Antivirus

Battlefield Heroes

Battlefield Vietnam(TM)

Call of Duty: Modern Warfare 2 - Multiplayer

Combat Arms EU

CoolYou Gadget

D3DX10

Facebook Video Calling 1.2.0.287

FilesFrog Update Checker

Fraps (remove only)

Gameforge Live 1.0 "Legend"

Google Chrome

Google Update Helper

Gothic II

Grand Theft Auto IV

IMinent Toolbar

Junk Mail filter update

Malwarebytes Anti-Malware Version 1.70.0.1100

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Client Profile DEU Language Pack

Microsoft Application Error Reporting

Microsoft Silverlight

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319

MotioninJoy ds3 driver version 0.6.0005

MSVCRT

Nexon Game Manager

NVIDIA Display Control Panel

NVIDIA Drivers

NVIDIA PhysX

Oblivion

Opera 12.12

Panda USB Vaccine 1.0.1.4

PartitionMagic

Picasa 3

PowerQuest PartitionMagic 8.0

PunkBuster Services

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)

Skype Click to Call

Skype™ 5.10

Steam

TeamSpeak 3 Client

Uninstall 1.0.0.1

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

uTorrentBar_DE Toolbar

VLC media player 2.0.2

WarRock

WIDCOMM Bluetooth Software

Windows iLivid Toolbar

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mail

Windows Live MIME IFilter

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live Sync

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR 4.00 (32-Bit)

World of Warcraft

.

==== End Of File ===========================

Code:



DDS:

[QUOTE]DDS (Ver_2012-11-20.01) - NTFS_x86 

Internet Explorer: 9.0.8112.16457

Run by Installationskonto at 21:26:42 on 2012-12-28

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3069.1885 [GMT 1:00]

.

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ================

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\nvvsvc.exe

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Windows\System32\spoolsv.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

C:\Windows\system32\PnkBstrA.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Users\OSCAR\AppData\Local\Akamai\netsession_win.exe

C:\Users\OSCAR\AppData\Local\Akamai\netsession_win.exe

C:\Program Files\FilesFrog Update Checker\update_checker.exe

C:\Windows\system32\SearchIndexer.exe

C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files\Panda USB Vaccine\USBVaccine.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files\Opera\opera.exe

C:\Windows\notepad.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\System32\svchost.exe -k Akamai

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k secsvcs

.

============== Pseudo HJT Report ===============

.

mURLSearchHooks: uTorrentBar_DE Toolbar: {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - 

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: TBSB01620 Class: {58124A0B-DC32-4180-9BFF-E0E21AE34026} - 

BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Searchqu Toolbar: {99079a25-328f-4bd4-be04-00955acaa0a7} - c:\program files\windows ilivid toolbar\datamngr\toolbar\searchqudtx.dll

BHO: Loader Class: {9D717F81-9148-4f12-8568-69135F087DB0} - c:\program files\windows ilivid toolbar\datamngr\BrowserConnection.dll

BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: uTorrentBar_DE Toolbar: {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - 

BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - 

TB: Searchqu Toolbar: {99079a25-328f-4bd4-be04-00955acaa0a7} - c:\program files\windows ilivid toolbar\datamngr\toolbar\searchqudtx.dll

TB: IMinent Toolbar: {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - 

TB: uTorrentBar_DE Toolbar: {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - 

TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

mRun: [DATAMNGR] c:\progra~1\wi3c8a~1\datamngr\DATAMN~1.EXE

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [4StoryPrePatch] c:\program files\gameforgelive\games\deu_deu\4story\PrePatch.exe

mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui

mRunOnce: [Malwarebytes Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent

mRunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "c:\programdata\malwarebytes\malwarebytes' anti-malware\cleanup.dll",ProcessCleanupScript

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm

DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} - hxxps://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.31.0.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

TCP: NameServer = 192.168.2.1

TCP: Interfaces\{16A47435-C4BB-4F64-9F19-9682043CEE91} : DHCPNameServer = 10.74.83.22 193.254.160.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B} : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\142736F627D2737363032383 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\449656475627353686F656E6865627275373 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\64259445A51224F6870264F6E60275C414E40273237303 : DHCPNameServer = 192.168.178.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\7556C64756E647F6E6 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\75C414E40313 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\75C414E4D2132333 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{4B3C6940-B561-41A8-9A44-928670802F9B}\75C414E4D2544324230333 : DHCPNameServer = 192.168.2.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll

AppInit_DLLs= c:\progra~1\wi3c8a~1\datamngr\datamngr.dll c:\progra~1\wi3c8a~1\datamngr\iebho.dll

SSODL: WebCheck - <orphaned>

.

============= SERVICES / DRIVERS ===============

.

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-12-27 738504]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-12-27 361032]

R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2009-7-14 20992]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-12-27 21256]

R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-12-27 58680]

R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-12-27 44808]

R3 NETw5s32;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 32-Bit;c:\windows\system32\drivers\NETw5s32.sys [2009-9-15 6114816]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 lxdu_device;lxdu_device;c:\windows\system32\lxducoms.exe -service --> c:\windows\system32\lxducoms.exe -service [?]

S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2010-5-11 29472]

S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\drivers\MijXfilt.sys [2012-11-3 95304]

S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [2010-4-19 18432]

S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-3-16 15872]

S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-6-25 52224]

.

=============== Created Last 30 ================

.

2012-12-28 20:22:57        54016        ----a-w-        c:\windows\system32\drivers\crdbprms.sys

2012-12-28 20:09:28        --------        d-----w-        c:\users\installationskonto\appdata\roaming\Malwarebytes

2012-12-28 20:09:23        21104        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-12-28 20:09:23        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware

2012-12-28 20:09:15        --------        d-----w-        c:\users\installationskonto\appdata\local\Programs

2012-12-28 11:36:58        6812136        ----a-w-        c:\programdata\microsoft\windows defender\definition updates\{75dcfcdd-4a56-45b3-861c-b9ed92952129}\mpengine.dll

2012-12-27 21:46:23        --------        d-----w-        c:\programdata\Panda Security

2012-12-27 21:46:19        --------        d-----w-        c:\program files\Panda USB Vaccine

2012-12-27 21:43:35        --------        d-----w-        c:\users\installationskonto\appdata\local\Google

2012-12-27 21:43:28        44784        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys

2012-12-27 21:43:23        738504        ----a-w-        c:\windows\system32\drivers\aswSnx.sys

2012-12-27 21:43:17        58680        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys

2012-12-27 21:43:00        41224        ----a-w-        c:\windows\avastSS.scr

2012-12-27 21:42:47        --------        d-----w-        c:\programdata\AVAST Software

2012-12-27 21:42:47        --------        d-----w-        c:\program files\AVAST Software

2012-12-27 21:41:51        --------        d-----w-        c:\users\installationskonto\appdata\local\Opera

2012-12-27 21:32:50        --------        d-----w-        c:\users\installationskonto\appdata\local\Apple Computer

2012-12-27 18:15:51        --------        d-----w-        c:\programdata\Malwarebytes

2012-12-20 21:58:07        295424        ----a-w-        c:\windows\system32\atmfd.dll

2012-12-20 21:58:06        34304        ----a-w-        c:\windows\system32\atmlib.dll

2012-12-13 15:26:07        2345984        ----a-w-        c:\windows\system32\win32k.sys

2012-12-08 13:31:48        712048        ----a-w-        c:\windows\system32\drivers\ndis.sys

2012-12-08 13:31:48        33280        ----a-w-        c:\windows\system32\drivers\RNDISMP.sys

2012-12-08 13:31:00        245760        ----a-w-        c:\windows\system32\OxpsConverter.exe

2012-12-08 13:30:45        240496        ----a-w-        c:\windows\system32\drivers\netio.sys

2012-12-08 13:30:45        156672        ----a-w-        c:\windows\system32\ncsi.dll

2012-12-08 13:30:45        1293680        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2012-12-08 13:30:44        52224        ----a-w-        c:\windows\system32\nlaapi.dll

2012-12-08 13:30:44        499712        ----a-w-        c:\windows\system32\iphlpsvc.dll

2012-12-08 13:30:44        35328        ----a-w-        c:\windows\system32\drivers\tcpipreg.sys

2012-12-08 13:30:44        242176        ----a-w-        c:\windows\system32\nlasvc.dll

2012-12-08 13:30:44        18944        ----a-w-        c:\windows\system32\netevent.dll

2012-12-08 13:30:44        187760        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS

2012-12-08 13:30:44        175104        ----a-w-        c:\windows\system32\netcorehc.dll

2012-12-08 13:30:26        44032        ----a-w-        c:\windows\system32\dhcpcsvc6.dll

2012-12-08 13:30:26        193536        ----a-w-        c:\windows\system32\dhcpcore6.dll

2012-12-07 17:30:03        --------        d-----w-        c:\windows\system32\SPReview

2012-12-07 17:27:56        --------        d-----w-        c:\windows\system32\EventProviders

.

==================== Find3M  ====================

.

2012-12-24 16:39:15        139080        ----a-w-        c:\windows\system32\drivers\PnkBstrK.sys

2012-12-24 16:39:10        270240        ----a-w-        c:\windows\system32\PnkBstrB.xtr

2012-12-24 16:39:10        270240        ----a-w-        c:\windows\system32\PnkBstrB.exe

2012-12-23 22:45:19        270240        ----a-w-        c:\windows\system32\PnkBstrB.ex0

2012-12-07 17:41:44        152576        ----a-w-        c:\windows\system32\msclmd.dll

2012-11-14 02:09:22        1800704        ----a-w-        c:\windows\system32\jscript9.dll

2012-11-14 01:58:15        1427968        ----a-w-        c:\windows\system32\inetcpl.cpl

2012-11-14 01:57:37        1129472        ----a-w-        c:\windows\system32\wininet.dll

2012-11-14 01:49:25        142848        ----a-w-        c:\windows\system32\ieUnatt.exe

2012-11-14 01:48:27        420864        ----a-w-        c:\windows\system32\vbscript.dll

2012-11-14 01:44:42        2382848        ----a-w-        c:\windows\system32\mshtml.tlb

2012-11-09 04:42:49        2048        ----a-w-        c:\windows\system32\tzres.dll

2012-11-03 22:00:41        821736        ----a-w-        c:\windows\system32\npDeployJava1.dll

2012-11-03 22:00:40        746984        ----a-w-        c:\windows\system32\deployJava1.dll

2012-11-02 05:11:31        376832        ----a-w-        c:\windows\system32\dpnet.dll

2012-10-16 07:39:52        561664        ----a-w-        c:\windows\apppatch\AcLayers.dll

2012-10-04 16:47:18        169984        ----a-w-        c:\windows\system32\winsrv.dll

2012-10-04 16:43:05        293376        ----a-w-        c:\windows\system32\KernelBase.dll

2012-10-04 14:57:58        271360        ----a-w-        c:\windows\system32\conhost.exe

2012-10-04 14:41:50        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2012-10-04 14:41:50        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2012-10-04 14:41:50        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2012-10-04 14:41:50        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

.

============= FINISH: 21:27:46,52 ===============

--- --- ---