Trojaner-Board - Polizei-Trojaner

Hallo,

Code:

ESETSmartInstaller@High as downloader log:

Can not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=a22c4a6380cc0b4fa4b2574fd58725cd

# engine=17682

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-03-30 04:48:59

# local_time=2014-03-30 06:48:59 (+0100, Westeuropäische Normalzeit)

# country="Austria"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# compatibility_mode=774 16777213 100 72 5454486 172911611 0 0

# scanned=45541

# found=9

# cleaned=0

# scan_time=2551

sh=33CEC14B03CCE2970567A688745FA7AD5B43FE4E ft=1 fh=cbc6c7974079fe85 vn="Win32/Adware.PCFixCleaner application" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Eigene Dateien\Downloads\pcfix-v206-de(2).exe"

sh=33CEC14B03CCE2970567A688745FA7AD5B43FE4E ft=1 fh=cbc6c7974079fe85 vn="Win32/Adware.PCFixCleaner application" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Eigene Dateien\Downloads\pcfix-v206-de.exe"

sh=6941CB627027CAB5A35750ED4D678B73AF41DBD5 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\2\206f7642-26271883"

sh=6941CB627027CAB5A35750ED4D678B73AF41DBD5 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\2\206f7642-648f44dc"

sh=553199640E1C229130E84D57DAB24E913A04C68E ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\37\6f89e5-19ff9816"

sh=D540934F4129BF0469D99DB9A6BA42B17400BAFD ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\45\7813af6d-2edd5267"

sh=98B1A6FACCFDAB73FF40D27340180B92E6E08C33 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\54\4f9a2376-78b967ec"

sh=E21C9744A4158E6B9C17F7A793DE4151EDAF2E3C ft=1 fh=d53ecd6357ae10dc vn="a variant of Win32/Kryptik.BWZU trojan" ac=I fn="C:\FRST\Quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\1bdogbq.cpp.xBAD"

sh=063FA724212C55BDFAD709822310C0E4B4D36AB4 ft=1 fh=961671bdd75aa484 vn="a variant of Win32/Kryptik.BWXS trojan" ac=I fn="C:\FRST\Quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\edodjrj9.cpp.xBAD"

Security Check

Code:

 Results of screen317's Security Check version 0.99.80  

 Windows XP Service Pack 2 x86   

 Out of date service pack!! 

 Internet Explorer 6 Out of date! 
 ``````````````Antivirus/Firewall Check:`````````````` 

avast! Antivirus   

 Antivirus up to date! (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 CCleaner     

 Eusing Free Registry Cleaner  

 Wise Disk Cleaner 3.1  

 Wise Registry Cleaner 7.94  

 WinUtilities Free Disk Cleaner 4.3 

 Java 7 Update 51  

 Adobe Reader 10.1.9 Adobe Reader out of Date!  

 Mozilla Firefox 11.0 Firefox out of Date!  
 ````````Process Check: objlist.exe by Laurent````````  

 AVAST Software Avast AvastSvc.exe  

 AVAST Software Avast avastUI.exe  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C::  
 ````````````````````End of Log``````````````````````

FRST

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01

Ran by Kurt (administrator) on K-100B487BD2B84 on 30-03-2014 19:17:05

Running from C:\Dokumente und Einstellungen\Kurt\Desktop

Microsoft Windows XP Professional Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 6

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AVAST Software) C:\Programme\AVAST Software\Avast\AvastSvc.exe

(Apache Software Foundation) C:\Programme\Apache Software Foundation\Apache2.2\bin\httpd.exe

(Microsoft Corporation) C:\WINDOWS\system32\inetsrv\inetinfo.exe

(Thomas Hauck, Privat) C:\Programme\Jana2\Janad.exe

(Apache Software Foundation) C:\Programme\Apache Software Foundation\Apache2.2\bin\httpd.exe

(Ontrack Data International) C:\Programme\Ontrack\Fix-It\mxserver.exe

(NVIDIA Corporation) C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

(Microsoft Corporation) C:\WINDOWS\system32\tcpsvcs.exe

(Microsoft Corporation) C:\WINDOWS\System32\snmp.exe

(NVIDIA Corporation) C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

() C:\Programme\Unlocker\UnlockerAssistant.exe

(AVAST Software) C:\Programme\AVAST Software\Avast\avastUI.exe

(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe

(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE

(Microsoft Corporation) C:\Programme\Messenger\msmsgs.exe

(Google Inc.) C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe

(The Eraser Project) C:\Programme\Eraser\eraser.exe

(ASRock Inc.) C:\Programme\ASRock\WiFi-802.11n\WiFi-80211n.exe

(Apache Software Foundation) C:\Programme\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe

(Google Inc.) C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe

(Google Inc.) C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Fix-It AV] - C:\Programme\Ontrack\Fix-It\MemCheck.exe [69632 2010-03-21] (Ontrack Data International)

HKLM\...\Run: [UnlockerAssistant] - C:\Programme\Unlocker\UnlockerAssistant.exe [15872 2008-05-02] ()

HKLM\...\Run: [avast] - C:\Programme\AVAST Software\Avast\avastUI.exe [4241512 2012-03-07] (AVAST Software)

HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [421888 2011-07-05] (Apple Inc.)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM\...\Run: [Ashampoo FireWall] - C:\Programme\Ashampoo\Ashampoo FireWall\FireWall.exe [3251800 2007-04-05] ()

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16858112 2007-11-22] (Realtek Semiconductor Corp.)

HKLM\...\Run: [Alcmtr] - C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Run: [Google Update] - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe [116648 2013-03-16] (Google Inc.)

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Run: [Eraser] - C:\Programme\Eraser\eraser.exe [916240 2007-12-23] (The Eraser Project)

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Policies\Explorer: [NoSaveSettings] 0x00000000

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Policies\Explorer: [NoDrives] 0x00000000

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-1757981266-1417001333-725345543-1003\...\Policies\Explorer: [NoUserNameInStartMenu] 1

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\ASRock WiFi-802.11n Utility.lnk

ShortcutTarget: ASRock WiFi-802.11n Utility.lnk -> C:\Programme\ASRock\WiFi-802.11n\WiFi-80211n.exe (ASRock Inc.)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft-Indexerstellung.lnk

ShortcutTarget: Microsoft-Indexerstellung.lnk -> C:\Programme\Microsoft Office\Office\FINDFAST.EXE (Microsoft Corporation)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Monitor Apache Servers.lnk

ShortcutTarget: Monitor Apache Servers.lnk -> C:\Programme\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe (Apache Software Foundation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5276A1FE28BCCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

SearchScopes: HKLM - DefaultScope value is missing.

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1298886602125

DPF: {BADA82CB-BF48-4D76-9611-78E2C6F49F03} hxxp://orgdnsfree.in//Bol.CAB

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Winsock: Catalog5 01 C:\WINDOWS\system32\pnrpnsp.dll [48640] (Microsoft Corporation)

Winsock: Catalog5 02 C:\WINDOWS\system32\pnrpnsp.dll [48640] (Microsoft Corporation)

Winsock: Catalog9 01 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 02 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 03 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 04 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 05 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 06 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 07 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Winsock: Catalog9 26 C:\Programme\Ashampoo\Ashampoo FireWall\spi.dll [393728] ()

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Dokumente und Einstellungen\Kurt\Anwendungsdaten\Mozilla\Firefox\Profiles\7dvfukh2.default

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Programme\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Extension: I Want This - C:\Dokumente und Einstellungen\Kurt\Anwendungsdaten\Mozilla\Firefox\Profiles\7dvfukh2.default\Extensions\crossriderapp2258@crossrider(2).com [2013-11-21]

FF Extension: Lavasoft Search Plugin - C:\Dokumente und Einstellungen\Kurt\Anwendungsdaten\Mozilla\Firefox\Profiles\7dvfukh2.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack [2012-05-16]

FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-03]

FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-05]

FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-10-24]

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\AVAST Software\Avast\WebRep\FF

FF Extension: avast! WebRep - C:\Programme\AVAST Software\Avast\WebRep\FF [2012-07-15]
 

Chrome: 

=======

CHR HomePage: hxxp://search.babylon.com/?affID=119370&babsrc=HP_ss&mntrId=E8980019667AAF98

CHR RestoreOnStartup: "hxxp://www.google.com/", "hxxp://search.conduit.com/?ctid=CT3306061&SearchSource=48&CUI=UN25971033142997973&UM=2", "hxxp://search.conduit.com/?ctid=CT3320133&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPBBB4897F-00E5-4211-9831-910F491A9D09&SSPV=", "hxxp://www.google.com"

CHR Plugin: (Shockwave Flash) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\31.0.1650.57\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7) - C:\Programme\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (Microsoft® DRM) - C:\Programme\Windows Media Player\npdrmv2.dll (Microsoft Corporation)

CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Programme\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))

CHR Plugin: (Microsoft® DRM) - C:\Programme\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - C:\Programme\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File

CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\WINDOWS\system32\npDeployJava1.dll No File

CHR Extension: (Google Docs) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-16]

CHR Extension: (Google Drive) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-16]

CHR Extension: (YouTube) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-16]

CHR Extension: (Google-Suche) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-16]

CHR Extension: (Google Wallet) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (Google Mail) - C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-16]
 

========================== Services (Whitelisted) =================
 

R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100352 2004-08-04] (Microsoft Corporation)

R2 Apache2.2; C:\Programme\Apache Software Foundation\Apache2.2\bin\httpd.exe [20549 2010-10-18] (Apache Software Foundation)

R2 avast! Antivirus; C:\Programme\AVAST Software\Avast\AvastSvc.exe [44768 2012-03-07] (AVAST Software)

S2 ForcewareWebInterface; C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [20543 2006-04-03] (Apache Software Foundation)

S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [182768 2012-08-22] (Google)

R2 IISADMIN; C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872 2004-08-04] (Microsoft Corporation)

R2 Janad; C:\Programme\Jana2\Janad.exe [1313280 2011-08-24] (Thomas Hauck, Privat)

U0 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)

S3 LPDSVC; C:\WINDOWS\system32\tcpsvcs.exe [19456 2004-08-04] (Microsoft Corporation)

S4 MBAMScheduler; C:\Programme\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation)

S2 MBAMService; C:\Programme\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation)

R2 mxserver; C:\Programme\Ontrack\Fix-It\mxserver.exe [36864 2010-03-21] (Ontrack Data International)

R2 nSvcIp; C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [131131 2006-07-13] (NVIDIA Corporation)

R2 nSvcLog; C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [65599 2006-07-13] (NVIDIA Corporation)

S3 p2pgasvc; C:\WINDOWS\system32\p2pgasvc.dll [86016 2004-08-04] (Microsoft Corporation)

R2 SMTPSVC; C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872 2004-08-04] (Microsoft Corporation)

R2 W3SVC; C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872 2004-08-04] (Microsoft Corporation)

S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)

S2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

R1 Aavmker4; C:\WINDOWS\system32\Drivers\Aavmker4.sys [24920 2012-03-07] (AVAST Software)

R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21035 2010-03-20] (Meetinghouse Data Communications)

R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-07-02] (Advanced Micro Devices)

R2 aswFsBlk; C:\WINDOWS\system32\Drivers\aswFsBlk.sys [20696 2012-03-07] (AVAST Software)

R2 aswMon2; C:\WINDOWS\system32\Drivers\aswMon2.sys [95704 2012-03-07] (AVAST Software)

R1 aswSnx; C:\WINDOWS\system32\Drivers\aswSnx.sys [612184 2012-03-07] (AVAST Software)

R1 aswSP; C:\WINDOWS\system32\Drivers\aswSP.sys [337880 2012-03-07] (AVAST Software)

S3 dsagent; C:\Programme\Ontrack\Fix-It\DSAGENT.SYS [10592 2010-03-21] (Sykes Enterprises, Inc.)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-03-05] (Malwarebytes Corporation)

S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2004-08-04] (Microsoft Corporation)

R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)

R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [102400 2007-08-09] (NVIDIA Corporation)

R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)

R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)

S3 rt2870; C:\WINDOWS\System32\DRIVERS\rt2870.sys [517632 2007-07-28] (Ralink Technology, Corp.)

S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [27440 2004-08-04] ()

S3 StMp3Rec; C:\WINDOWS\System32\Drivers\StMp3Rec.sys [19840 2007-02-15] (Generic)

R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [223616 2004-08-04] (Microsoft Corporation)

S3 ASFWHide; \??\C:\DOKUME~1\Kurt\LOKALE~1\Temp\ASFWHide [X]

U3 DfSdkS; 

S4 IntelIde; No ImagePath

S3 irsir; system32\DRIVERS\irsir.sys [X]

U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96256 2004-08-04] (Microsoft Corporation)

U5 UnlockerDriver5; C:\Programme\Unlocker\UnlockerDriver5.sys [4096 2008-05-02] () <===== ATTENTION Necurs Rootkit?
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-03-30 19:17 - 2014-03-30 19:17 - 00020926 _____ () C:\Dokumente und Einstellungen\Kurt\Desktop\FRST.txt

2014-03-30 19:16 - 2014-03-30 19:16 - 00001180 _____ () C:\Dokumente und Einstellungen\Kurt\Desktop\checkup.txt

2014-03-30 18:24 - 2014-03-30 18:24 - 00000000 ____D () C:\Programme\GUM77CE.tmp

2014-03-29 13:53 - 2014-03-29 13:53 - 00000000 ____D () C:\Programme\ESET

2014-03-29 13:53 - 2014-03-29 13:46 - 00987442 _____ () C:\Dokumente und Einstellungen\Kurt\Desktop\SecurityCheck.exe

2014-03-29 13:53 - 2014-03-29 13:45 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kurt\Desktop\esetsmartinstaller_enu.exe

2014-03-28 18:56 - 2014-03-28 18:56 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-03-28 18:48 - 2014-03-28 18:51 - 00000000 ____D () C:\AdwCleaner

2014-03-28 18:20 - 2014-03-29 13:49 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-03-28 18:20 - 2014-03-28 18:20 - 00000000 ____D () C:\Programme\Malwarebytes Anti-Malware

2014-03-28 18:20 - 2014-03-28 18:20 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes Anti-Malware

2014-03-28 18:20 - 2014-03-28 18:20 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2014-03-28 18:20 - 2014-03-05 10:26 - 00050648 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-03-28 18:20 - 2014-03-05 10:26 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-03-27 19:28 - 2014-03-30 18:00 - 00005932 _____ () C:\WINDOWS\system32\nvdb02.adghz

2014-03-25 21:24 - 2014-03-30 19:17 - 00000000 ____D () C:\FRST

2014-03-25 21:24 - 2014-03-28 18:11 - 01145856 _____ (Farbar) C:\Dokumente und Einstellungen\Kurt\Desktop\FRST.exe

2014-03-25 20:27 - 2014-03-30 17:46 - 00000349 _____ () C:\WINDOWS\nsw.log

2014-03-15 14:47 - 2004-08-04 14:00 - 00811064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81k.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00716856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcus.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00571392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlgnt.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00482304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlgnt.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00455168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintsetp.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00426041 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicepad.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00368696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcic.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00340023 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00315452 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskf.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00307257 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00274489 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputyc.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00262200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputy.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00259072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpcl.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00233527 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjprw.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00208952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpmig.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00196665 ____C () C:\WINDOWS\system32\dllcache\imjpinst.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00175104 ____C () C:\WINDOWS\system32\dllcache\pintlcsa.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winzm.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winsp.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winpy.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00155705 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdsvr.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00134339 ____C () C:\WINDOWS\system32\dllcache\imekr.lex

2014-03-15 14:47 - 2004-08-04 14:00 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtstocom.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00106496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrcic.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00102456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imlang.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekr61.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys

2014-03-15 14:47 - 2004-08-04 14:00 - 00092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00086073 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicesub.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmbx.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00083748 ____C () C:\WINDOWS\system32\dllcache\prcp.nls

2014-03-15 14:47 - 2004-08-04 14:00 - 00083748 ____C () C:\WINDOWS\system32\dllcache\prc.nls

2014-03-15 14:47 - 2004-08-04 14:00 - 00081976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00081408 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00081408 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winar30.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phon.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quick.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniime.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlphr.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00069120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wingb.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmigrate.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winime.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00065024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unicdime.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00059392 ____C () C:\WINDOWS\system32\dllcache\imscinst.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlcsd.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00047066 ____C () C:\WINDOWS\system32\dllcache\ksc.nls

2014-03-15 14:47 - 2004-08-04 14:00 - 00045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlphr.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00040448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpthrd.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00031360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys

2014-03-15 14:47 - 2004-08-04 14:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026624 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw330ext.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\romanime.ime

2014-03-15 14:47 - 2004-08-04 14:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rw001ext.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys

2014-03-15 14:47 - 2004-08-04 14:00 - 00020736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ramdisk.sys

2014-03-15 14:47 - 2004-08-04 14:00 - 00019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys

2014-03-15 14:47 - 2004-08-04 14:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs404.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs804.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys

2014-03-15 14:47 - 2004-08-04 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmigrate.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migregdb.exe

2014-03-15 14:47 - 2004-08-04 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdibm02.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41a.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41j.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdax2.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106n.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll

2014-03-15 14:47 - 2004-08-04 14:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 13463552 ____C () C:\WINDOWS\system32\dllcache\hwxjpn.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 10129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 10096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 01677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00563200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsst.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00480256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintsetp.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00452096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsapi.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00400896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsxp32.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00397312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxstiff.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscomex.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00268800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssvc.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00246272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxst30.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00235520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscover.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00218112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_g18030.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00198656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintime.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00195618 ____C () C:\WINDOWS\system32\dllcache\c_10002.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00195584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxswzrd.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00189986 ____C () C:\WINDOWS\system32\dllcache\c_1361.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00187938 ____C () C:\WINDOWS\system32\dllcache\c_20005.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00186402 ____C () C:\WINDOWS\system32\dllcache\c_20001.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00185378 ____C () C:\WINDOWS\system32\dllcache\c_20003.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00180770 ____C () C:\WINDOWS\system32\dllcache\c_20932.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00180258 ____C () C:\WINDOWS\system32\dllcache\c_20004.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00180258 ____C () C:\WINDOWS\system32\dllcache\c_20000.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00177698 ____C () C:\WINDOWS\system32\dllcache\c_20949.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00177698 ____C () C:\WINDOWS\system32\dllcache\c_10003.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00173602 ____C () C:\WINDOWS\system32\dllcache\c_20936.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00173602 ____C () C:\WINDOWS\system32\dllcache\c_20002.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00173602 ____C () C:\WINDOWS\system32\dllcache\c_10008.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00173568 ____C () C:\WINDOWS\system32\dllcache\chtskf.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00162850 ____C () C:\WINDOWS\system32\dllcache\c_10001.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsui.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00143360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclnt.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00139264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00125952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsv251.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00108827 ____C () C:\WINDOWS\system32\dllcache\hanja.lex

2014-03-15 14:46 - 2004-08-04 14:00 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtmbx.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00082172 ____C () C:\WINDOWS\system32\dllcache\bopomofo.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dayi.ime

2014-03-15 14:46 - 2004-08-04 14:00 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chajei.ime

2014-03-15 14:46 - 2004-08-04 14:00 - 00072192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscom.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00066728 ____C () C:\WINDOWS\system32\dllcache\big5.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066594 ____C () C:\WINDOWS\system32\dllcache\c_864.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066594 ____C () C:\WINDOWS\system32\dllcache\c_862.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066594 ____C () C:\WINDOWS\system32\dllcache\c_858.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066594 ____C () C:\WINDOWS\system32\dllcache\c_720.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_870.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_708.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_28596.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_21027.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_21025.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20924.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20880.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20871.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20838.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20833.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20424.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20423.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20420.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20297.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20290.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20285.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20284.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20280.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20278.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20277.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20273.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20269.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20108.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20107.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20106.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_20105.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1149.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1148.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1147.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1146.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1145.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1144.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1143.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1142.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1141.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1140.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_1047.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_10021.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_10005.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00066082 ____C () C:\WINDOWS\system32\dllcache\c_10004.nls

2014-03-15 14:46 - 2004-08-04 14:00 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsevent.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00057399 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cplexe.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtskdic.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys

2014-03-15 14:46 - 2004-08-04 14:00 - 00045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00027136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsdrv.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys

2014-03-15 14:46 - 2004-08-04 14:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsmon.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsext32.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintlgnt.ime

2014-03-15 14:46 - 2004-08-04 14:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0804.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0412.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0411.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040d.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0404.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0401.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe

2014-03-15 14:46 - 2004-08-04 14:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsperf.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsres.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\f3ahvoas.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpmib.dll

2014-03-15 14:46 - 2004-08-04 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll

2014-03-15 14:46 - 2004-05-13 01:39 - 00876653 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awel.dll

2014-03-15 14:46 - 2004-05-13 01:39 - 00598071 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmc.dll

2014-03-15 14:46 - 2004-05-13 01:39 - 00184435 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4amsft.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00217088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmcsat.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00188494 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpcount.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00188480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgwiz.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00147513 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4apws.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00109328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98swin.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00102509 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4atxt.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00082035 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4anscp.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00049212 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awebs.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00049210 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4areg.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00041020 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avnb.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00032827 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptest.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00032826 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avss.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00024632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmcgi.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpexedll.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmdll.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00020538 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpremadm.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00020536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00016437 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.exe

2014-03-15 14:46 - 2003-03-24 17:52 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptsat.dll

2014-03-15 14:46 - 2003-03-24 17:52 - 00014608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98sadm.exe

2014-03-15 14:45 - 2014-03-15 14:45 - 00000488 ___RH () C:\WINDOWS\system32\logonui.exe.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\WindowsShell.Manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\wuaucpl.cpl.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\sapi.cpl.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\nwc.cpl.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\ncpa.cpl.manifest

2014-03-15 14:43 - 2014-03-15 14:43 - 00000120 _____ () C:\WINDOWS\DtcInstall.log

2014-03-15 14:41 - 2004-08-04 01:58 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\irftp.exe

2014-03-15 14:41 - 2004-08-04 01:57 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll

2014-03-15 14:41 - 2004-08-04 01:57 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshirda.dll

2014-03-15 14:41 - 2004-08-04 00:00 - 00087424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irda.sys

2014-03-15 12:00 - 2001-08-17 14:51 - 00019584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasirda.sys

2014-03-15 11:57 - 2014-03-15 11:57 - 00065536 _____ () C:\WINDOWS\system32\config\TuneUp.evt

2014-03-15 11:57 - 2014-03-15 11:57 - 00065536 _____ () C:\WINDOWS\system32\config\Internet.evt

2014-03-15 11:28 - 2014-03-30 17:57 - 00300522 _____ () C:\WINDOWS\setupapi.log

2014-03-15 11:28 - 2004-08-04 14:00 - 01899936 ____C () C:\WINDOWS\system32\dllcache\NT5.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 01086058 ____C () C:\WINDOWS\system32\dllcache\NTPRINT.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 01014663 ____C () C:\WINDOWS\system32\dllcache\SP2.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00817199 ____C () C:\WINDOWS\system32\dllcache\NT5IIS.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00618406 ____C () C:\WINDOWS\system32\dllcache\NT5INF.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00399645 ____C () C:\WINDOWS\system32\dllcache\MAPIMIG.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00141702 ____C () C:\WINDOWS\system32\dllcache\netfx.cat

2014-03-15 11:28 - 2004-08-04 14:00 - 00103124 ____C () C:\WINDOWS\system32\dllcache\tabletpc.cat

2014-03-15 11:28 - 2004-08-04 14:00 - 00041270 ____C () C:\WINDOWS\system32\dllcache\MW770.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00031965 ____C () C:\WINDOWS\system32\dllcache\mediactr.cat

2014-03-15 11:28 - 2004-08-04 14:00 - 00030983 ____C () C:\WINDOWS\system32\dllcache\FP4.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00024661 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxcoins.dll

2014-03-15 11:28 - 2004-08-04 14:00 - 00024661 _____ (Perle Systems Ltd.) C:\WINDOWS\system32\spxcoins.dll

2014-03-15 11:28 - 2004-08-04 14:00 - 00018989 ____C () C:\WINDOWS\system32\dllcache\msn7.cat

2014-03-15 11:28 - 2004-08-04 14:00 - 00014043 ____C () C:\WINDOWS\system32\dllcache\IMS.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irclass.dll

2014-03-15 11:28 - 2004-08-04 14:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll

2014-03-15 11:28 - 2004-08-04 14:00 - 00013472 ____C () C:\WINDOWS\system32\dllcache\HPCRDP.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00011651 ____C () C:\WINDOWS\system32\dllcache\msn9.cat

2014-03-15 11:28 - 2004-08-04 14:00 - 00009581 ____C () C:\WINDOWS\system32\dllcache\MSMSGS.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00008574 ____C () C:\WINDOWS\system32\dllcache\IASNT4.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00007382 ____C () C:\WINDOWS\system32\dllcache\OEMBIOS.CAT

2014-03-15 11:28 - 2004-08-04 14:00 - 00007245 ____C () C:\WINDOWS\system32\dllcache\MSTSWEB.CAT

2014-03-13 21:22 - 2014-03-15 14:46 - 00001024 ____H () C:\WINDOWS\system32\config\userdiff.LOG

2014-03-13 21:18 - 2014-03-15 14:53 - 00002908 _____ () C:\WINDOWS\COM+.log

2014-03-13 21:03 - 2014-03-15 14:46 - 00001024 ____H () C:\WINDOWS\system32\config\userdifr.LOG

2014-03-13 21:03 - 2014-03-13 21:03 - 00000000 _____ () C:\WINDOWS\control.ini

2014-03-13 21:03 - 2014-03-13 21:03 - 00000000 _____ () C:\AUTOEXEC.BAT

2014-03-13 21:01 - 2014-03-15 14:44 - 00002084 _____ () C:\WINDOWS\sessmgr.setup.log

2014-03-13 21:01 - 2004-08-04 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isignup.exe

2014-03-13 21:00 - 2014-03-15 14:43 - 00000621 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Messenger.lnk

2014-03-13 20:59 - 2014-03-15 14:46 - 00002636 _____ () C:\WINDOWS\wmsetup.log

2014-03-13 20:59 - 2004-08-04 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe

2014-03-13 20:58 - 2014-03-15 14:41 - 00000373 _____ () C:\WINDOWS\cmsetacl.log

2014-03-13 20:33 - 2014-03-15 14:53 - 00046034 _____ () C:\WINDOWS\comsetup.log

2014-03-13 20:33 - 2014-03-15 14:48 - 00485067 _____ () C:\WINDOWS\iis6.log

2014-03-13 20:33 - 2014-03-15 14:48 - 00026164 _____ () C:\WINDOWS\ntdtcsetup.log

2014-03-13 20:33 - 2014-03-15 14:48 - 00026020 _____ () C:\WINDOWS\tsoc.log

2014-03-13 20:33 - 2014-03-15 14:48 - 00004635 _____ () C:\WINDOWS\imsins.log

2014-03-13 20:33 - 2014-03-15 14:48 - 00003038 _____ () C:\WINDOWS\tabletoc.log

2014-03-13 20:33 - 2014-03-15 14:48 - 00001942 _____ () C:\WINDOWS\ocmsn.log

2014-03-13 20:33 - 2014-03-15 14:44 - 00032471 _____ () C:\WINDOWS\ocgen.log

2014-03-13 20:33 - 2014-03-15 14:44 - 00027761 _____ () C:\WINDOWS\FaxSetup.log

2014-03-13 20:33 - 2014-03-15 14:44 - 00006676 _____ () C:\WINDOWS\netfxocm.log

2014-03-13 20:33 - 2014-03-15 14:44 - 00003700 _____ () C:\WINDOWS\MedCtrOC.log

2014-03-13 20:33 - 2014-03-15 14:44 - 00002170 _____ () C:\WINDOWS\msgsocm.log

2014-03-13 20:33 - 2014-03-15 14:42 - 00022952 _____ () C:\WINDOWS\msmqinst.log

2014-03-13 20:33 - 2014-03-15 11:59 - 00003970 _____ () C:\WINDOWS\regopt.log

2014-03-13 20:33 - 2014-03-15 11:29 - 00001344 _____ () C:\WINDOWS\imsins.BAK

2014-03-13 20:31 - 2014-03-15 14:48 - 00401432 _____ () C:\WINDOWS\setupact.log

2014-03-13 20:31 - 2014-03-15 14:45 - 00001424 _____ () C:\WINDOWS\setuperr.log

2014-03-13 19:24 - 2014-03-13 19:24 - 00186454 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat

2014-03-13 19:24 - 2014-03-13 19:24 - 00186454 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1757981266-1417001333-725345543-1003-0.dat

2014-03-13 19:12 - 2014-03-13 19:12 - 00003074 _____ () C:\WINDOWS\KB2929961.log

2014-03-13 19:11 - 2014-03-13 19:12 - 00003385 _____ () C:\WINDOWS\KB2930275.log

2014-03-13 18:53 - 2014-03-13 21:06 - 00161936 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-03-13 18:43 - 2014-03-13 19:02 - 00000000 ____D () C:\Programme\StartEd

2014-03-13 18:43 - 2014-03-13 19:02 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Startmenü\Programme\StartEd Lite

2014-03-13 17:04 - 2014-03-13 21:18 - 00027528 _____ () C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT

2014-03-09 09:17 - 2014-03-30 18:00 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job

2014-03-09 09:17 - 2014-03-10 11:25 - 00000214 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

2014-03-07 20:16 - 2014-02-27 01:28 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe

2014-03-04 10:47 - 2014-03-04 10:47 - 95027928 ____T () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\9j7jlcb.fee

2014-03-03 11:56 - 2014-03-03 11:56 - 95027928 ____T () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\t0frbbnv.fee

2014-02-28 13:39 - 2014-02-28 19:35 - 95027928 ____T () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\vbh8azj.fee
 

==================== One Month Modified Files and Folders =======
 

2014-03-30 19:17 - 2014-03-30 19:17 - 00020926 _____ () C:\Dokumente und Einstellungen\Kurt\Desktop\FRST.txt

2014-03-30 19:17 - 2014-03-25 21:24 - 00000000 ____D () C:\FRST

2014-03-30 19:16 - 2014-03-30 19:16 - 00001180 _____ () C:\Dokumente und Einstellungen\Kurt\Desktop\checkup.txt

2014-03-30 18:52 - 2013-03-16 19:14 - 00001206 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-1417001333-725345543-1003UA.job

2014-03-30 18:45 - 2010-03-20 17:57 - 00559168 _____ () C:\WINDOWS\WindowsUpdate.log

2014-03-30 18:24 - 2014-03-30 18:24 - 00000000 ____D () C:\Programme\GUM77CE.tmp

2014-03-30 18:24 - 2010-03-20 17:46 - 00000000 ___RD () C:\Programme

2014-03-30 18:21 - 2012-12-16 09:30 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-03-30 18:07 - 2011-11-25 13:20 - 00001324 _____ () C:\WINDOWS\system32\d3d9caps.dat

2014-03-30 18:04 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\inetsrv

2014-03-30 18:00 - 2014-03-27 19:28 - 00005932 _____ () C:\WINDOWS\system32\nvdb02.adghz

2014-03-30 18:00 - 2014-03-09 09:17 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job

2014-03-30 18:00 - 2013-11-22 19:27 - 00000000 _____ () C:\WINDOWS\system32\nmp.log

2014-03-30 18:00 - 2013-04-18 17:44 - 00000159 _____ () C:\WINDOWS\wiadebug.log

2014-03-30 18:00 - 2013-04-18 17:44 - 00000050 _____ () C:\WINDOWS\wiaservc.log

2014-03-30 18:00 - 2010-03-20 18:00 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-03-30 18:00 - 2004-08-04 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl

2014-03-30 17:59 - 2012-07-15 11:53 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\Eraser

2014-03-30 17:59 - 2010-03-20 18:02 - 00000190 ___SH () C:\Dokumente und Einstellungen\Kurt\ntuser.ini

2014-03-30 17:59 - 2010-03-20 18:02 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt

2014-03-30 17:59 - 2010-03-20 18:00 - 00032162 _____ () C:\WINDOWS\SchedLgU.Txt

2014-03-30 17:57 - 2014-03-15 11:28 - 00300522 _____ () C:\WINDOWS\setupapi.log

2014-03-30 17:46 - 2014-03-25 20:27 - 00000349 _____ () C:\WINDOWS\nsw.log

2014-03-30 17:36 - 2010-04-11 15:28 - 00000000 __SHD () C:\WINDOWS\CSC

2014-03-30 17:27 - 2010-03-20 17:46 - 01462862 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-03-29 13:53 - 2014-03-29 13:53 - 00000000 ____D () C:\Programme\ESET

2014-03-29 13:51 - 2010-03-20 18:49 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Desktop\Reinigung & Sicherheit

2014-03-29 13:49 - 2014-03-28 18:20 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-03-29 13:46 - 2014-03-29 13:53 - 00987442 _____ () C:\Dokumente und Einstellungen\Kurt\Desktop\SecurityCheck.exe

2014-03-29 13:45 - 2014-03-29 13:53 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kurt\Desktop\esetsmartinstaller_enu.exe

2014-03-28 18:56 - 2014-03-28 18:56 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-03-28 18:51 - 2014-03-28 18:48 - 00000000 ____D () C:\AdwCleaner

2014-03-28 18:50 - 2012-02-13 09:59 - 00000000 ____D () C:\Programme\Mozilla Firefox

2014-03-28 18:43 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\addins

2014-03-28 18:41 - 2013-11-22 18:39 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\CRE

2014-03-28 18:20 - 2014-03-28 18:20 - 00000000 ____D () C:\Programme\Malwarebytes Anti-Malware

2014-03-28 18:20 - 2014-03-28 18:20 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes Anti-Malware

2014-03-28 18:20 - 2014-03-28 18:20 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2014-03-28 18:20 - 2010-03-20 17:46 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme

2014-03-28 18:11 - 2014-03-25 21:24 - 01145856 _____ (Farbar) C:\Dokumente und Einstellungen\Kurt\Desktop\FRST.exe

2014-03-27 19:33 - 2011-09-06 17:12 - 00000000 ____D () C:\WINDOWS\Microsoft.NET

2014-03-27 19:22 - 2010-03-20 18:02 - 00000000 ___RD () C:\Dokumente und Einstellungen\Kurt\Startmenü\Programme\Autostart

2014-03-27 19:22 - 2010-03-20 17:46 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart

2014-03-25 20:08 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\security

2014-03-15 14:53 - 2014-03-13 21:18 - 00002908 _____ () C:\WINDOWS\COM+.log

2014-03-15 14:53 - 2014-03-13 20:33 - 00046034 _____ () C:\WINDOWS\comsetup.log

2014-03-15 14:53 - 2010-03-20 17:55 - 00000000 ____D () C:\WINDOWS\Registration

2014-03-15 14:50 - 2010-03-20 17:56 - 00000000 ____D () C:\WINDOWS\system32\Restore

2014-03-15 14:48 - 2014-03-13 20:33 - 00485067 _____ () C:\WINDOWS\iis6.log

2014-03-15 14:48 - 2014-03-13 20:33 - 00026164 _____ () C:\WINDOWS\ntdtcsetup.log

2014-03-15 14:48 - 2014-03-13 20:33 - 00026020 _____ () C:\WINDOWS\tsoc.log

2014-03-15 14:48 - 2014-03-13 20:33 - 00004635 _____ () C:\WINDOWS\imsins.log

2014-03-15 14:48 - 2014-03-13 20:33 - 00003038 _____ () C:\WINDOWS\tabletoc.log

2014-03-15 14:48 - 2014-03-13 20:33 - 00001942 _____ () C:\WINDOWS\ocmsn.log

2014-03-15 14:48 - 2014-03-13 20:31 - 00401432 _____ () C:\WINDOWS\setupact.log

2014-03-15 14:48 - 2010-03-20 17:46 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü

2014-03-15 14:46 - 2014-03-13 21:22 - 00001024 ____H () C:\WINDOWS\system32\config\userdiff.LOG

2014-03-15 14:46 - 2014-03-13 21:03 - 00001024 ____H () C:\WINDOWS\system32\config\userdifr.LOG

2014-03-15 14:46 - 2014-03-13 20:59 - 00002636 _____ () C:\WINDOWS\wmsetup.log

2014-03-15 14:46 - 2010-03-21 11:05 - 00262144 _____ () C:\WINDOWS\system32\config\userdifr

2014-03-15 14:46 - 2010-03-20 17:58 - 00316640 _____ () C:\WINDOWS\WMSysPr9.prx

2014-03-15 14:46 - 2010-03-20 17:58 - 00001607 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programmzugriff und -standards.lnk

2014-03-15 14:46 - 2010-03-20 17:58 - 00001599 _____ () C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Remoteunterstützung.lnk

2014-03-15 14:46 - 2010-03-20 17:58 - 00001507 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Windows Update.lnk

2014-03-15 14:46 - 2010-03-20 17:58 - 00000772 _____ () C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Windows Media Player.lnk

2014-03-15 14:46 - 2010-03-20 17:58 - 00000398 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Windows-Katalog.lnk

2014-03-15 14:46 - 2010-03-20 17:55 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung

2014-03-15 14:46 - 2010-03-20 17:46 - 00000000 ___RD () C:\Dokumente und Einstellungen\Default User\Startmenü\Programme

2014-03-15 14:45 - 2014-03-15 14:45 - 00000488 ___RH () C:\WINDOWS\system32\logonui.exe.manifest

2014-03-15 14:45 - 2014-03-13 20:31 - 00001424 _____ () C:\WINDOWS\setuperr.log

2014-03-15 14:45 - 2010-03-20 18:37 - 00000000 ___RD () C:\WINDOWS\Web

2014-03-15 14:45 - 2010-03-20 17:58 - 00023392 _____ () C:\WINDOWS\system32\nscompat.tlb

2014-03-15 14:45 - 2010-03-20 17:58 - 00016832 _____ () C:\WINDOWS\system32\amcompat.tlb

2014-03-15 14:45 - 2010-03-20 17:57 - 00000488 ___RH () C:\WINDOWS\system32\WindowsLogon.manifest

2014-03-15 14:45 - 2010-03-20 17:46 - 00004161 _____ () C:\WINDOWS\ODBCINST.INI

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\WindowsShell.Manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\wuaucpl.cpl.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\sapi.cpl.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\nwc.cpl.manifest

2014-03-15 14:44 - 2014-03-15 14:44 - 00000749 ___RH () C:\WINDOWS\system32\ncpa.cpl.manifest

2014-03-15 14:44 - 2014-03-13 21:01 - 00002084 _____ () C:\WINDOWS\sessmgr.setup.log

2014-03-15 14:44 - 2014-03-13 20:33 - 00032471 _____ () C:\WINDOWS\ocgen.log

2014-03-15 14:44 - 2014-03-13 20:33 - 00027761 _____ () C:\WINDOWS\FaxSetup.log

2014-03-15 14:44 - 2014-03-13 20:33 - 00006676 _____ () C:\WINDOWS\netfxocm.log

2014-03-15 14:44 - 2014-03-13 20:33 - 00003700 _____ () C:\WINDOWS\MedCtrOC.log

2014-03-15 14:44 - 2014-03-13 20:33 - 00002170 _____ () C:\WINDOWS\msgsocm.log

2014-03-15 14:44 - 2010-03-20 17:57 - 00000758 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Movie Maker.lnk

2014-03-15 14:44 - 2010-03-20 17:57 - 00000749 ___RH () C:\WINDOWS\system32\cdplayer.exe.manifest

2014-03-15 14:44 - 2010-03-20 17:57 - 00000000 ___RD () C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Zubehör

2014-03-15 14:44 - 2004-08-04 14:00 - 00000507 _____ () C:\WINDOWS\win.ini

2014-03-15 14:43 - 2014-03-15 14:43 - 00000120 _____ () C:\WINDOWS\DtcInstall.log

2014-03-15 14:43 - 2014-03-13 21:00 - 00000621 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Messenger.lnk

2014-03-15 14:43 - 2010-03-20 17:55 - 00025668 _____ () C:\WINDOWS\system32\emptyregdb.dat

2014-03-15 14:43 - 2010-03-20 17:55 - 00000000 ____D () C:\WINDOWS\system32\Com

2014-03-15 14:42 - 2014-03-13 20:33 - 00022952 _____ () C:\WINDOWS\msmqinst.log

2014-03-15 14:41 - 2014-03-13 20:58 - 00000373 _____ () C:\WINDOWS\cmsetacl.log

2014-03-15 14:41 - 2010-03-20 18:41 - 00000223 ___SH () C:\boot.ini

2014-03-15 12:24 - 2010-03-20 18:41 - 23330816 _____ () C:\WINDOWS\system32\config\software.sav

2014-03-15 12:24 - 2010-03-20 18:41 - 06815744 _____ () C:\WINDOWS\system32\config\system.sav

2014-03-15 12:24 - 2010-03-20 18:41 - 00483328 _____ () C:\WINDOWS\system32\config\default.sav

2014-03-15 12:24 - 2010-03-20 18:41 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\usmt

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\npp

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\1031

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\PeerNet

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\msagent

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\Media

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\ime

2014-03-15 12:23 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\Help

2014-03-15 12:21 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\twain_32

2014-03-15 12:20 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\icsxml

2014-03-15 12:20 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\ias

2014-03-15 12:20 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\1033

2014-03-15 12:19 - 2010-03-20 18:37 - 00000000 ____D () C:\WINDOWS\Driver Cache

2014-03-15 12:14 - 2010-03-20 20:30 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups

2014-03-15 11:59 - 2014-03-13 20:33 - 00003970 _____ () C:\WINDOWS\regopt.log

2014-03-15 11:59 - 2004-08-04 14:00 - 00000246 _____ () C:\WINDOWS\system.ini

2014-03-15 11:57 - 2014-03-15 11:57 - 00065536 _____ () C:\WINDOWS\system32\config\TuneUp.evt

2014-03-15 11:57 - 2014-03-15 11:57 - 00065536 _____ () C:\WINDOWS\system32\config\Internet.evt

2014-03-15 11:29 - 2014-03-13 20:33 - 00001344 _____ () C:\WINDOWS\imsins.BAK

2014-03-14 17:56 - 2010-03-20 17:44 - 00065536 _____ () C:\WINDOWS\system32\config\security.sav

2014-03-14 11:52 - 2013-03-16 19:14 - 00001154 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-1417001333-725345543-1003Core.job

2014-03-13 21:18 - 2014-03-13 17:04 - 00027528 _____ () C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT

2014-03-13 21:18 - 2011-02-28 09:22 - 00000000 ___RD () C:\Dokumente und Einstellungen\Kurt\Eigene Dateien\Eigene Bilder

2014-03-13 21:18 - 2010-03-28 18:02 - 00000000 ___RD () C:\Dokumente und Einstellungen\Kurt\Eigene Dateien\Eigene Musik

2014-03-13 21:18 - 2010-03-20 18:02 - 00000772 _____ () C:\Dokumente und Einstellungen\Kurt\Startmenü\Programme\Windows Media Player.lnk

2014-03-13 21:18 - 2010-03-20 18:02 - 00000747 _____ () C:\Dokumente und Einstellungen\Kurt\Startmenü\Programme\Internet Explorer.lnk

2014-03-13 21:18 - 2010-03-20 18:02 - 00000000 ___SD () C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Verlauf

2014-03-13 21:18 - 2010-03-20 18:02 - 00000000 ___RD () C:\Dokumente und Einstellungen\Kurt\Startmenü\Programme

2014-03-13 21:06 - 2014-03-13 18:53 - 00161936 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-03-13 21:03 - 2014-03-13 21:03 - 00000000 _____ () C:\WINDOWS\control.ini

2014-03-13 21:03 - 2014-03-13 21:03 - 00000000 _____ () C:\AUTOEXEC.BAT

2014-03-13 21:01 - 2010-03-20 17:56 - 00000000 ____D () C:\WINDOWS\srchasst

2014-03-13 21:01 - 2010-03-20 17:56 - 00000000 ____D () C:\Programme\Outlook Express

2014-03-13 21:01 - 2010-03-20 17:56 - 00000000 ____D () C:\Programme\NetMeeting

2014-03-13 21:01 - 2010-03-20 17:56 - 00000000 ____D () C:\Programme\Movie Maker

2014-03-13 21:01 - 2010-03-20 17:56 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\System

2014-03-13 20:59 - 2010-03-20 17:55 - 00000000 ____D () C:\WINDOWS\system32\MsDtc

2014-03-13 20:59 - 2010-03-20 17:55 - 00000000 ____D () C:\Programme\Windows NT

2014-03-13 19:24 - 2014-03-13 19:24 - 00186454 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat

2014-03-13 19:24 - 2014-03-13 19:24 - 00186454 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1757981266-1417001333-725345543-1003-0.dat

2014-03-13 19:12 - 2014-03-13 19:12 - 00003074 _____ () C:\WINDOWS\KB2929961.log

2014-03-13 19:12 - 2014-03-13 19:11 - 00003385 _____ () C:\WINDOWS\KB2930275.log

2014-03-13 19:11 - 2014-01-24 11:41 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Package Cache

2014-03-13 19:03 - 2012-02-15 19:19 - 00000000 ____D () C:\Programme\Microsoft Silverlight

2014-03-13 19:03 - 2012-02-15 19:19 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight

2014-03-13 19:03 - 2010-03-20 18:00 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService

2014-03-13 19:03 - 2010-03-20 18:00 - 00000000 __SHD () C:\Dokumente und Einstellungen\LocalService

2014-03-13 19:02 - 2014-03-13 18:43 - 00000000 ____D () C:\Programme\StartEd

2014-03-13 19:02 - 2014-03-13 18:43 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Startmenü\Programme\StartEd Lite

2014-03-13 19:02 - 2010-03-24 12:08 - 00000000 __SHD () C:\Dokumente und Einstellungen\Kurt\UserData

2014-03-10 17:15 - 2010-03-31 15:52 - 00000046 _____ () C:\WINDOWS\system32\_WKERNEL.FRE

2014-03-10 17:11 - 2010-03-28 16:55 - 00000000 _____ () C:\WINDOWS\system32\w32apiw.dll

2014-03-10 11:25 - 2014-03-09 09:17 - 00000214 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

2014-03-08 15:06 - 2010-03-20 18:50 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Desktop\REZEPTE

2014-03-07 20:44 - 2010-03-29 09:23 - 00000000 ____D () C:\WINDOWS\system32\NtmsData

2014-03-05 10:26 - 2014-03-28 18:20 - 00050648 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-03-05 10:26 - 2014-03-28 18:20 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-03-05 08:51 - 2014-02-03 10:59 - 00000000 ____D () C:\Dokumente und Einstellungen\Kurt\Anwendungsdaten\Wise Registry Cleaner

2014-03-04 10:47 - 2014-03-04 10:47 - 95027928 ____T () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\9j7jlcb.fee

2014-03-03 11:56 - 2014-03-03 11:56 - 95027928 ____T () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\t0frbbnv.fee

2014-02-28 19:35 - 2014-02-28 13:39 - 95027928 ____T () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\vbh8azj.fee
 

Some content of TEMP:

====================

C:\Dokumente und Einstellungen\Kurt\Lokale Einstellungen\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\WINDOWS\explorer.exe

[2004-08-04 14:00] - [2004-08-04 14:00] - 1035264 ____A (Microsoft Corporation) 22fe1be02eadde1632e478e4125639e0 
 

C:\WINDOWS\system32\winlogon.exe

[2004-08-04 14:00] - [2004-08-04 14:00] - 0507392 ____A (Microsoft Corporation) 2b6a0baf33a9918f09442d873848ff72 
 

C:\WINDOWS\system32\svchost.exe

[2004-08-04 14:00] - [2004-08-04 14:00] - 0014336 ____A (Microsoft Corporation) 65a819b121eb6fdab4400ea42bdffe64 
 

C:\WINDOWS\system32\services.exe

[2004-08-04 14:00] - [2004-08-04 14:00] - 0108544 ____A (Microsoft Corporation) edb6b81761bd60f32f740bbc40afb676 
 

C:\WINDOWS\system32\User32.dll

[2004-08-04 14:00] - [2004-08-04 14:00] - 0578560 ____A (Microsoft Corporation) 56785fd5236d7b22cf471a6da9db46d8 
 

C:\WINDOWS\system32\userinit.exe

[2004-08-04 14:00] - [2004-08-04 14:00] - 0025088 ____A (Microsoft Corporation) d1e53dc57143f2584b1dd53b036c0633 
 

C:\WINDOWS\system32\rpcss.dll

[2004-08-04 14:00] - [2004-08-04 14:00] - 0395776 ____A (Microsoft Corporation) 9f28ff58d6d67b123272869d89d14004 
 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.

C:\WINDOWS\system32\Drivers\volsnap.sys

[2004-08-04 14:00] - [2004-08-04 14:00] - 0053760 ____A (Microsoft Corporation) d6888520ff56d72a50437e371ca25fc9 
 
 

==================== End Of Log ============================

--- --- ---

Probleme gibts sonst keine ersichtlichen mehr!
LG Zyrene