| |
| |||||||
Log-Analyse und Auswertung: download protect 2.2.1 / 2.2.4 unter windows 7 lässt sich nicht entfernenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
10.07.2014, 10:55
| #1 |
 |  download protect 2.2.1 / 2.2.4 unter windows 7 lässt sich nicht entfernen Hallo Trojaner-Board, seit ein paar Wochen habe ich auch dieses lästigen Add on "Download Protect". Zunächst Version 2.2.1, nachdem ich dann Firefox deinstalliert und wieder neu instaliert hatte, nun auch als Version 2.2.4. Symptome: Google installiert sich immer wieder als Startseite im Browser. In der Toolbar mit Suchmaschinen habe ich google gelöscht, aber nach Neustart des Browsers installiert es sich wieder. Ich hoffe jetzt auf Eure Hilfe und gehe schrittweise nach der Anleitung für Hilfesuchende vor. Schritt 2: Systemscan mit FRST Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2014 Ran by rott (administrator) on LAPTOP03 on 10-07-2014 11:35:08 Running from C:\Users\rott\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Windows\System32\icardied.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe () C:\Program Files\Sony\VAIO Care\listener.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2012-03-13] (Realtek Semiconductor) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-04-28] (Atheros Commnucations) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885944 2012-09-20] (Synaptics Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-09] (Intel Corporation) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-03] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-05-23] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-4036131265-775681615-194005139-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-05-23] (Samsung) HKU\S-1-5-21-4036131265-775681615-194005139-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-4036131265-775681615-194005139-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-05-23] (Samsung) HKU\S-1-5-21-4036131265-775681615-194005139-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ShellIconOverlayIdentifiers: MOBK649 -> {7d7a9cff-a4c1-f2b8-7421-c722f7eac08a} => No File ShellIconOverlayIdentifiers: MOBK6492 -> {658e5c17-2ba4-ed79-d884-37ebe15e7b9b} => No File ShellIconOverlayIdentifiers: MOBK6493 -> {22f1b264-d4dd-ef46-08eb-3eb0c80441ba} => No File BootExecute: autocheck autochk * GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.r-s-p.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} SearchScopes: HKCU - {1BF3F661-39CF-4A9E-BE81-ABA78009E55D} URL = https://www.google.com/search?q={searchTerms} BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: DownloadProtect Extension - {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} - C:\Program Files\{81CABC00-945A-4E2F-8651-E3519688C63F}\{F9A72EB3-41B4-4863-8C07-BE055869DBFD}.bin (Download Protect) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: DownloadProtect Extension - {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} - C:\Program Files (x86)\{91F04974-7027-4F26-8836-B146D73721BC}\{F9FF583F-7400-429D-8D85-D22FD21AD6FE}.bin (Download Protect) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\rott\AppData\Roaming\Mozilla\Firefox\Profiles\h3l67yn9.default FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.de?hl=de&gl=de FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF user.js: detected! => C:\Users\rott\AppData\Roaming\Mozilla\Firefox\Profiles\h3l67yn9.default\user.js FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-05-14] FF HKLM-x32\...\Firefox\Extensions: [{6055B52C-B785-4E92-A556-1FF2F9B038BA}] - C:\Windows\Installer\{53588732-FE57-4C55-B66C-AE46E4E77759}\{6055B52C-B785-4E92-A556-1FF2F9B038BA}.xpi FF Extension: Download Protect - C:\Windows\Installer\{53588732-FE57-4C55-B66C-AE46E4E77759}\{6055B52C-B785-4E92-A556-1FF2F9B038BA}.xpi [2014-06-24] FF HKLM-x32\...\Firefox\Extensions: [{60243C39-D2EA-4D7A-8F10-9227700B9156}] - C:\Windows\Installer\{F669D510-606C-4634-92B4-E18462A8A39C}\{60243C39-D2EA-4D7A-8F10-9227700B9156}.xpi FF Extension: Download Protect - C:\Windows\Installer\{F669D510-606C-4634-92B4-E18462A8A39C}\{60243C39-D2EA-4D7A-8F10-9227700B9156}.xpi [2014-07-10] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation) S4 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.) R2 ntprintd; C:\Windows\system32\icardied.exe [118784 2014-04-03] () [File not signed] R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-01] (Intel Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-27] (Sony Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros) ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG) S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [422144 2012-04-28] (Atheros) S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36128 2012-02-23] (Atheros) R3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2014-05-04] () S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-03-13] (Synaptics Incorporated) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-10 11:35 - 2014-07-10 11:35 - 00018958 _____ () C:\Users\rott\Downloads\FRST.txt 2014-07-10 11:34 - 2014-07-10 11:35 - 00000000 ____D () C:\FRST 2014-07-10 11:33 - 2014-07-10 11:34 - 02084352 _____ (Farbar) C:\Users\rott\Downloads\FRST64.exe 2014-07-10 11:31 - 2014-07-10 11:33 - 00000470 _____ () C:\Users\rott\Downloads\defogger_disable.log 2014-07-10 11:31 - 2014-07-10 11:31 - 00000000 _____ () C:\Users\rott\defogger_reenable 2014-07-10 11:30 - 2014-07-10 11:30 - 00050477 _____ () C:\Users\rott\Downloads\Defogger.exe 2014-07-10 10:05 - 2014-07-10 10:05 - 00000000 ____D () C:\Program Files\{81CABC00-945A-4E2F-8651-E3519688C63F} 2014-07-10 10:05 - 2014-07-10 10:05 - 00000000 ____D () C:\Program Files (x86)\{91F04974-7027-4F26-8836-B146D73721BC} 2014-07-10 08:39 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 08:39 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 08:39 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 08:39 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 08:39 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 08:39 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 08:39 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 08:39 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 08:39 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 08:39 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 08:39 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 08:39 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 08:39 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 08:39 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 08:39 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 08:39 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 08:39 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 08:39 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 08:39 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 08:39 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 08:39 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 08:39 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 08:39 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 08:39 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 08:39 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 08:39 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 08:39 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 08:39 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 08:39 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 08:39 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 08:39 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 08:39 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 08:39 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 08:39 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 08:39 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 08:39 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 08:39 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 08:39 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 08:39 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 08:39 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 08:39 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 08:39 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 08:39 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 08:39 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 08:39 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 08:39 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 08:39 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 08:39 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 08:39 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 08:39 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 08:39 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 08:39 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 08:39 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 08:39 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 08:39 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 08:39 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 08:37 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 08:37 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 08:37 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 08:37 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 08:36 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 08:36 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 08:36 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 08:36 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 08:36 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 08:36 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 08:36 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 08:36 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 08:36 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 08:24 - 2014-07-10 08:49 - 00000112 _____ () C:\Windows\setupact.log 2014-07-10 08:24 - 2014-07-10 08:24 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-09 12:59 - 2014-07-10 10:37 - 00251019 _____ () C:\Windows\WindowsUpdate.log 2014-07-08 15:03 - 2014-07-08 15:03 - 01346519 _____ () C:\Users\rott\Downloads\adwcleaner_3.214.exe 2014-07-01 18:14 - 2014-07-10 10:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-01 18:14 - 2014-07-10 08:28 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-01 18:14 - 2014-07-10 08:28 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-01 18:14 - 2014-07-10 08:28 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-06-30 12:10 - 2014-06-30 12:10 - 00000000 ____D () C:\ProgramData\Oracle 2014-06-30 12:09 - 2014-06-30 12:09 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-06-30 12:09 - 2014-06-30 12:09 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-06-30 12:09 - 2014-06-30 12:09 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-06-30 12:09 - 2014-06-30 12:09 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-06-30 12:09 - 2014-06-30 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-06-30 12:06 - 2014-06-30 12:06 - 00918952 _____ (Oracle Corporation) C:\Users\rott\Downloads\jxpiinstall.exe 2014-06-30 09:36 - 2014-06-30 09:37 - 04812672 _____ (Piriform Ltd) C:\Users\rott\Downloads\ccsetup415.exe 2014-06-25 12:59 - 2014-06-25 12:59 - 00000000 ____D () C:\Users\rott\Desktop\Documents\WebCam Media 2014-06-25 12:58 - 2014-06-25 12:58 - 00000000 ____D () C:\Users\rott\AppData\Local\ArcSoft 2014-06-25 10:03 - 2014-06-25 10:19 - 00000000 ____D () C:\Users\rott\AppData\Roaming\Mozilla 2014-06-25 10:02 - 2014-06-25 10:02 - 00001119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-25 10:02 - 2014-06-25 10:02 - 00001107 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-25 10:02 - 2014-06-25 10:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-22 17:53 - 2014-06-22 17:53 - 00000000 ____D () C:\Users\rott\Desktop\Documents\Bluetooth Folder 2014-06-20 09:43 - 2014-06-20 09:43 - 00000000 ____D () C:\Windows\ERUNT 2014-06-20 09:18 - 2014-07-08 15:04 - 00000000 ____D () C:\AdwCleaner 2014-06-20 08:56 - 2014-06-20 08:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2014-06-20 08:55 - 2014-06-20 08:56 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center 2014-06-12 17:15 - 2014-06-12 17:15 - 00000000 __SHD () C:\Users\rott\AppData\Local\EmieUserList 2014-06-12 17:15 - 2014-06-12 17:15 - 00000000 __SHD () C:\Users\rott\AppData\Local\EmieSiteList 2014-06-12 10:06 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-06-12 10:02 - 2014-06-12 10:02 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-06-12 10:02 - 2014-06-12 10:02 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-06-12 10:02 - 2014-06-12 10:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-06-12 10:02 - 2014-06-12 10:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-06-12 10:02 - 2014-06-12 10:02 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-06-12 10:02 - 2014-06-12 10:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-06-12 10:02 - 2014-06-12 10:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-06-12 10:01 - 2014-06-12 10:01 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-06-12 10:01 - 2014-06-12 10:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-06-12 10:01 - 2014-06-12 10:01 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-06-12 09:25 - 2014-07-10 11:23 - 00000000 ____D () C:\Users\rott\Desktop\Documents\Outlook-Dateien 2014-06-12 08:09 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-06-12 08:09 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-06-11 09:56 - 2014-06-12 14:18 - 00001421 _____ () C:\Users\rott\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-11 09:39 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-06-11 09:39 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-06-11 09:39 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-06-11 09:39 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-06-11 09:39 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-06-11 09:39 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-06-11 09:39 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-06-11 09:39 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-06-11 09:39 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-06-11 09:39 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-06-11 09:39 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-06-11 09:39 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-06-11 09:39 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-06-11 09:39 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-06-11 09:39 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-06-11 09:39 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-06-11 09:38 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-06-11 09:38 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-06-11 07:48 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-11 07:48 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-11 07:48 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-11 07:48 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-06-11 07:48 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-11 07:48 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-11 07:48 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-11 07:48 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-11 07:48 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-11 07:48 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-11 07:48 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-06-11 07:48 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-06-11 07:48 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-06-11 07:48 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll ==================== One Month Modified Files and Folders ======= 2014-07-10 11:35 - 2014-07-10 11:35 - 00018958 _____ () C:\Users\rott\Downloads\FRST.txt 2014-07-10 11:35 - 2014-07-10 11:34 - 00000000 ____D () C:\FRST 2014-07-10 11:34 - 2014-07-10 11:33 - 02084352 _____ (Farbar) C:\Users\rott\Downloads\FRST64.exe 2014-07-10 11:33 - 2014-07-10 11:31 - 00000470 _____ () C:\Users\rott\Downloads\defogger_disable.log 2014-07-10 11:31 - 2014-07-10 11:31 - 00000000 _____ () C:\Users\rott\defogger_reenable 2014-07-10 11:31 - 2012-08-27 14:20 - 00000000 ____D () C:\Users\rott 2014-07-10 11:30 - 2014-07-10 11:30 - 00050477 _____ () C:\Users\rott\Downloads\Defogger.exe 2014-07-10 11:23 - 2014-06-12 09:25 - 00000000 ____D () C:\Users\rott\Desktop\Documents\Outlook-Dateien 2014-07-10 11:13 - 2012-05-07 09:24 - 00703214 _____ () C:\Windows\system32\perfh007.dat 2014-07-10 11:13 - 2012-05-07 09:24 - 00150822 _____ () C:\Windows\system32\perfc007.dat 2014-07-10 11:13 - 2009-07-14 07:13 - 01629436 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-10 10:56 - 2014-07-01 18:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-10 10:37 - 2014-07-09 12:59 - 00251019 _____ () C:\Windows\WindowsUpdate.log 2014-07-10 10:05 - 2014-07-10 10:05 - 00000000 ____D () C:\Program Files\{81CABC00-945A-4E2F-8651-E3519688C63F} 2014-07-10 10:05 - 2014-07-10 10:05 - 00000000 ____D () C:\Program Files (x86)\{91F04974-7027-4F26-8836-B146D73721BC} 2014-07-10 10:05 - 2014-05-21 12:02 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-10 10:05 - 2014-04-06 15:36 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-07-10 08:54 - 2009-07-14 06:45 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-10 08:54 - 2009-07-14 06:45 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-10 08:49 - 2014-07-10 08:24 - 00000112 _____ () C:\Windows\setupact.log 2014-07-10 08:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-10 08:49 - 2009-07-14 06:45 - 00473272 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-10 08:47 - 2014-04-23 15:39 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-10 08:47 - 2012-02-24 06:01 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 08:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-10 08:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-10 08:45 - 2013-09-05 17:02 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 08:42 - 2012-09-03 10:43 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 08:36 - 2012-08-27 15:33 - 00000000 ____D () C:\Users\rott\AppData\Roaming\Adobe 2014-07-10 08:28 - 2014-07-01 18:14 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-10 08:28 - 2014-07-01 18:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-10 08:28 - 2014-07-01 18:14 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-10 08:24 - 2014-07-10 08:24 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-09 14:58 - 2014-01-10 11:33 - 00000000 ____D () C:\Users\rott\AppData\Roaming\MyPhoneExplorer 2014-07-08 15:04 - 2014-06-20 09:18 - 00000000 ____D () C:\AdwCleaner 2014-07-08 15:03 - 2014-07-08 15:03 - 01346519 _____ () C:\Users\rott\Downloads\adwcleaner_3.214.exe 2014-07-03 22:04 - 2013-04-03 20:08 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-02 09:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME 2014-06-30 12:10 - 2014-06-30 12:10 - 00000000 ____D () C:\ProgramData\Oracle 2014-06-30 12:09 - 2014-06-30 12:09 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-06-30 12:09 - 2014-06-30 12:09 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-06-30 12:09 - 2014-06-30 12:09 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-06-30 12:09 - 2014-06-30 12:09 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-06-30 12:09 - 2014-06-30 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-06-30 12:06 - 2014-06-30 12:06 - 00918952 _____ (Oracle Corporation) C:\Users\rott\Downloads\jxpiinstall.exe 2014-06-30 09:37 - 2014-06-30 09:36 - 04812672 _____ (Piriform Ltd) C:\Users\rott\Downloads\ccsetup415.exe 2014-06-30 09:37 - 2012-10-12 12:28 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-06-30 09:37 - 2012-10-12 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-06-30 09:37 - 2012-10-12 12:28 - 00000000 ____D () C:\Program Files\CCleaner 2014-06-30 04:09 - 2014-07-10 08:36 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 08:36 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-26 16:23 - 2014-01-08 13:47 - 00000000 ____D () C:\daten 2014-06-25 13:08 - 2014-05-10 13:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-25 12:59 - 2014-06-25 12:59 - 00000000 ____D () C:\Users\rott\Desktop\Documents\WebCam Media 2014-06-25 12:59 - 2012-05-07 09:23 - 00000000 ___HD () C:\ProgramData\ArcSoft 2014-06-25 12:58 - 2014-06-25 12:58 - 00000000 ____D () C:\Users\rott\AppData\Local\ArcSoft 2014-06-25 12:58 - 2014-05-26 07:43 - 00000000 ____D () C:\Users\rott\AppData\Roaming\ArcSoft 2014-06-25 11:15 - 2013-06-09 04:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner 2014-06-25 10:19 - 2014-06-25 10:03 - 00000000 ____D () C:\Users\rott\AppData\Roaming\Mozilla 2014-06-25 10:02 - 2014-06-25 10:02 - 00001119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-25 10:02 - 2014-06-25 10:02 - 00001107 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-06-25 10:02 - 2014-06-25 10:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-22 17:53 - 2014-06-22 17:53 - 00000000 ____D () C:\Users\rott\Desktop\Documents\Bluetooth Folder 2014-06-20 22:14 - 2014-07-10 08:39 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-06-20 21:39 - 2014-07-10 08:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-06-20 09:58 - 2013-03-24 17:56 - 00000000 ____D () C:\Program Files (x86)\Nikon 2014-06-20 09:43 - 2014-06-20 09:43 - 00000000 ____D () C:\Windows\ERUNT 2014-06-20 08:56 - 2014-06-20 08:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center 2014-06-20 08:56 - 2014-06-20 08:55 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center 2014-06-20 08:56 - 2013-05-12 22:33 - 00003062 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2014-06-20 08:56 - 2013-05-12 22:33 - 00003060 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2014-06-20 08:56 - 2013-01-17 10:54 - 00003118 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2014-06-20 08:56 - 2012-08-27 16:27 - 00003092 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2014-06-20 08:56 - 2012-08-27 16:27 - 00003090 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2014-06-19 11:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-19 03:39 - 2014-07-10 08:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-19 03:06 - 2014-07-10 08:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-19 03:06 - 2014-07-10 08:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-19 02:48 - 2014-07-10 08:39 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-19 02:42 - 2014-07-10 08:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-19 02:42 - 2014-07-10 08:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-19 02:41 - 2014-07-10 08:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-06-19 02:41 - 2014-07-10 08:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-19 02:32 - 2014-07-10 08:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-19 02:31 - 2014-07-10 08:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-19 02:26 - 2014-07-10 08:39 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-19 02:24 - 2014-07-10 08:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-19 02:24 - 2014-07-10 08:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-19 02:23 - 2014-07-10 08:39 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-19 02:16 - 2014-07-10 08:39 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-19 02:14 - 2014-07-10 08:39 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-19 02:09 - 2014-07-10 08:39 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-19 01:59 - 2014-07-10 08:39 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-19 01:56 - 2014-07-10 08:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-19 01:53 - 2014-07-10 08:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-19 01:51 - 2014-07-10 08:39 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-19 01:50 - 2014-07-10 08:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-19 01:48 - 2014-07-10 08:39 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-19 01:39 - 2014-07-10 08:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-19 01:38 - 2014-07-10 08:39 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-06-19 01:37 - 2014-07-10 08:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-19 01:36 - 2014-07-10 08:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-06-19 01:35 - 2014-07-10 08:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-06-19 01:33 - 2014-07-10 08:39 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-19 01:32 - 2014-07-10 08:39 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-19 01:28 - 2014-07-10 08:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-19 01:28 - 2014-07-10 08:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-19 01:27 - 2014-07-10 08:39 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-19 01:27 - 2014-07-10 08:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-19 01:25 - 2014-07-10 08:39 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-06-19 01:23 - 2014-07-10 08:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-06-19 01:22 - 2014-07-10 08:39 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-06-19 01:12 - 2014-07-10 08:39 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-19 01:06 - 2014-07-10 08:39 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-06-19 01:01 - 2014-07-10 08:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-19 00:59 - 2014-07-10 08:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-19 00:58 - 2014-07-10 08:39 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-19 00:58 - 2014-07-10 08:39 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-19 00:52 - 2014-07-10 08:39 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-19 00:51 - 2014-07-10 08:39 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-19 00:49 - 2014-07-10 08:39 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-19 00:46 - 2014-07-10 08:39 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-06-19 00:45 - 2014-07-10 08:39 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-19 00:35 - 2014-07-10 08:39 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-19 00:34 - 2014-07-10 08:39 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-19 00:15 - 2014-07-10 08:39 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-19 00:13 - 2014-07-10 08:39 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-19 00:09 - 2014-07-10 08:39 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-19 00:07 - 2014-07-10 08:39 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-06-18 04:18 - 2014-07-10 08:37 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-06-18 03:51 - 2014-07-10 08:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-06-18 03:10 - 2014-07-10 08:37 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-06-12 19:21 - 2012-12-10 19:43 - 00000000 ____D () C:\Users\rott\AppData\Local\Microsoft Help 2014-06-12 17:15 - 2014-06-12 17:15 - 00000000 __SHD () C:\Users\rott\AppData\Local\EmieUserList 2014-06-12 17:15 - 2014-06-12 17:15 - 00000000 __SHD () C:\Users\rott\AppData\Local\EmieSiteList 2014-06-12 15:52 - 2012-08-27 20:25 - 00000000 ____D () C:\Users\rott\AppData\Local\CrashDumps 2014-06-12 15:52 - 2011-02-11 00:48 - 00000000 ____D () C:\Windows\Panther 2014-06-12 14:18 - 2014-06-11 09:56 - 00001421 _____ () C:\Users\rott\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-12 14:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-06-12 10:02 - 2014-06-12 10:02 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-06-12 10:02 - 2014-06-12 10:02 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-06-12 10:02 - 2014-06-12 10:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-06-12 10:02 - 2014-06-12 10:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-06-12 10:02 - 2014-06-12 10:02 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-06-12 10:02 - 2014-06-12 10:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-06-12 10:02 - 2014-06-12 10:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-06-12 10:02 - 2014-06-12 10:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-06-12 10:01 - 2014-06-12 10:01 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-06-12 10:01 - 2014-06-12 10:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-06-12 10:01 - 2014-06-12 10:01 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-06-12 10:01 - 2014-06-12 10:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-06-12 10:01 - 2014-06-12 10:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-06-11 10:39 - 2012-08-27 15:30 - 00000000 ____D () C:\Update 2014-06-11 10:33 - 2012-05-07 08:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information Some content of TEMP: ==================== C:\Users\rott\AppData\Local\Temp\avgnt.exe C:\Users\rsp\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-08 16:27 ==================== End Of Log ============================ |
| Themen zu download protect 2.2.1 / 2.2.4 unter windows 7 lässt sich nicht entfernen |
| ccsetup, downloader, downloadprotect, firefox, flash player, home, homepage, installation, launch, mozilla, neustart, pup.optional.babylontoolbar.a, pup.optional.conduit.a, pup.optional.crossrider.a, pup.optional.passshow.a, pup.optional.scramblepacker.a, pup.optional.wajam.a, services.exe, suchmaschine, svchost.exe, win32/adware.addlyrics.as, win32/cnetinstaller.b, win32/downloadsponsor.a, win32/downware.l, win32/installmonetizer.ah, win32/wajam.g, windows, winlogon.exe |
Baum-Darstellung