| |
| |||||||
Log-Analyse und Auswertung: Conduit.search protect deinstalliert, wie weiter?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
16.08.2014, 14:25
| #3 |
 |  Conduit.search protect deinstalliert, wie weiter? Hallo Jürgen. Danke für deine Mühe. Beim Verschieben der Dateien in die Quarantäne gab es eine Zugriffsverweigerung seitens AVIRA (Zugriff Registry) Ich hatte AVIRA nicht abgestellt.
__________________Code:
ATTFilter # AdwCleaner v3.306 - Bericht erstellt am 16/08/2014 um 14:04:39
# Aktualisiert 15/08/2014 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Nicole - VAIO
# Gestartet von : C:\Users\Nicole\Desktop\adwcleaner_3.306.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Nicole\AppData\Roaming\OpenCandy
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default\searchplugins\trovi-search.xml
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.17054
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v31.0 (x86 de)
[ Datei : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M0ED740EA-1282-4D7E-82B2-FD088A646F1C&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP614D10F8-0EF[...]
*************************
AdwCleaner[R0].txt - [3668 octets] - [16/08/2014 14:03:13]
AdwCleaner[S0].txt - [3339 octets] - [16/08/2014 14:04:39]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3399 octets] ##########
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 16.08.2014 Suchlauf-Zeit: 14:23:19 Logdatei: Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.08.16.04 Rootkit Datenbank: v2014.08.15.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8 CPU: x64 Dateisystem: NTFS Benutzer: Nicole Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 346023 Verstrichene Zeit: 26 Min, 11 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 1 PUP.Optional.SearchProtect.A, HKU\S-1-5-21-3278550599-1859411315-2701880331-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Conduit_Search_Protect, In Quarantäne, [f2f632944d2ec86e0726083a53b19967], Registrierungswerte: 2 Hijack.Trojan.Poweliks, HKU\S-1-5-21-3278550599-1859411315-2701880331-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN, C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe, In Quarantäne, [de0a3195c9b22e0864ef3bc78779f40c] Hijack.Trojan.Poweliks, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\SAMSUNG\KIES\EXTERNAL\FIRMWAREUPDATE\KIESPDLR.EXE, 1, In Quarantäne, [de0a3195c9b22e0864ef3bc78779f40c] Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 28 PUP.Optional.OpenCandy, C:\$Recycle.Bin\S-1-5-21-3278550599-1859411315-2701880331-1001\$RQIMJ0D.exe, In Quarantäne, [9058a3233f3c4cea939b03f5877dde22], PUP.Optional.SearchProtect.A, C:\Users\Nicole\AppData\Local\Temp\nscC3C5.exe, In Quarantäne, [b6322c9ac2b982b40fab250fd42daa56], PUP.Optional.SearchProtect.A, C:\Users\Nicole\AppData\Local\Temp\nsh314.exe, In Quarantäne, [6e7a42849ae1ba7c05b5a88c8879e21e], PUP.Optional.Conduit.A, C:\Users\Nicole\AppData\Local\Temp\sp-downloader.exe, In Quarantäne, [9d4b02c4502b2313697dd84f4ab7dd23], PUP.Optional.SearchProtect.A, C:\Users\Nicole\AppData\Local\Temp\SPSetup.exe, In Quarantäne, [2fb9bb0b2b5054e2a3209cfb3dc4f20e], PUP.Optional.Conduit.A, C:\Users\Nicole\AppData\Local\Temp\nshE939.exe, In Quarantäne, [3daba91d582385b154482a63b74aea16], PUP.Optional.SearchProtect.A, C:\Users\Nicole\AppData\Local\Temp\nsr45.exe, In Quarantäne, [7e6a468016651224d3e79e96e51ca060], PUP.Optional.SearchProtect.A, C:\Users\Nicole\AppData\Local\Temp\nsrC163.exe, In Quarantäne, [7a6e636326557fb75c5e38fcee13e719], PUP.Optional.Conduit.A, C:\Users\Nicole\AppData\Local\Temp\nsf9764\SpSetup.exe, In Quarantäne, [46a24482c6b5181e28823dec0bf646ba], PUP.Optional.Conduit.A, C:\Windows\Temp\nsa491.exe, In Quarantäne, [697f893d7704a2941e7e870625dcd42c], PUP.Optional.Conduit.A, C:\Windows\Temp\nsb2023.exe, In Quarantäne, [8662d4f20279979f722ae7a6679a926e], PUP.Optional.Conduit.A, C:\Windows\Temp\nsb5E3A.exe, In Quarantäne, [ad3b44820873f541f1ab8a031ce5b54b], PUP.Optional.Conduit.A, C:\Windows\Temp\nsd7CAC.exe, In Quarantäne, [2fb9f8ce215a48ee1a821a73af5248b8], PUP.Optional.Conduit.A, C:\Windows\Temp\nshE888.exe, In Quarantäne, [fdeb299da0db72c43a62ee9f89785ca4], PUP.Optional.Conduit.A, C:\Windows\Temp\nsiA525.exe, In Quarantäne, [09df428482f9c3736735682525dc748c], PUP.Optional.Conduit.A, C:\Windows\Temp\nsiCC86.exe, In Quarantäne, [a840ab1b6615fd39bae2dcb1669ba45c], PUP.Optional.Conduit.A, C:\Windows\Temp\nsj8C0F.exe, In Quarantäne, [82669c2aadce3ff77923becf47baa35d], PUP.Optional.Conduit.A, C:\Windows\Temp\nskD4A3.exe, In Quarantäne, [43a50eb8e893b2843369cdc043bec43c], PUP.Optional.Conduit.A, C:\Windows\Temp\nsl6C80.exe, In Quarantäne, [9d4b3f878fec7abcf2aa9eefaa576c94], PUP.Optional.Conduit.A, C:\Windows\Temp\nsmD7A2.exe, In Quarantäne, [34b4e3e3700bb680a6f6aedf17eab54b], PUP.Optional.Conduit.A, C:\Windows\Temp\nsnD117.exe, In Quarantäne, [15d308be512a0e285448f09dae53b848], PUP.Optional.Conduit.A, C:\Windows\Temp\nsr396B.exe, In Quarantäne, [22c6bf07cead0d2933696c21ec15fe02], PUP.Optional.Conduit.A, C:\Windows\Temp\nsr5DE8.exe, In Quarantäne, [a840992db5c6ae88bae26b22ba474bb5], PUP.Optional.Conduit.A, C:\Windows\Temp\nss5862.exe, In Quarantäne, [f0f8daecdf9cb185cfcd216cbc450cf4], PUP.Optional.Conduit.A, C:\Windows\Temp\nsvAF67.exe, In Quarantäne, [32b66d594635171f5844b7d64fb2d62a], PUP.Optional.Conduit.A, C:\Windows\Temp\nsz3E0B.exe, In Quarantäne, [05e37353b5c655e18715523b8c75e51b], PUP.Optional.Conduit.A, C:\Windows\Temp\nsz5E6.exe, In Quarantäne, [777121a5c5b6fd39207ccac3d22f31cf], Hijack.Trojan.Poweliks, C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe, In Quarantäne, [de0a3195c9b22e0864ef3bc78779f40c], Physische Sektoren: 0 (No malicious items detected) (end) FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-08-2014 02 Ran by Nicole (administrator) on VAIO on 16-08-2014 15:15:59 Running from C:\Users\Nicole\Desktop Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (AMD) C:\Windows\System32\atieclxx.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe () C:\Program Files\Sony\VAIO Care\listener.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-09-27] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-09-27] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2930488 2012-09-27] (Synaptics Incorporated) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-28] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3278550599-1859411315-2701880331-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1511792 2013-03-28] (Samsung) HKU\S-1-5-21-3278550599-1859411315-2701880331-1001\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2013-03-20] (Samsung Electronics) HKU\S-1-5-21-3278550599-1859411315-2701880331-1001\...\MountPoints2: {25add885-d978-11e2-be89-84a6c8d455b1} - "E:\AutoRun.exe" HKU\S-1-5-21-3278550599-1859411315-2701880331-1001\...\MountPoints2: {25add948-d978-11e2-be89-84a6c8d455b1} - "E:\AutoRun.exe" HKU\S-1-5-21-3278550599-1859411315-2701880331-1001\...\MountPoints2: {8f30b680-c55f-11e3-beb2-84a6c8d455b1} - "E:\LaunchU3.exe" -a Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu SearchScopes: HKCU - {40BABB93-6DE3-4226-89FD-CE07491DD6C2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASEJS SearchScopes: HKCU - {8813E2A5-F36E-49D8-9823-4B46D9D63389} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms} BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{04455E74-7968-48A2-B22D-F0F9D7ECCE61}: [NameServer]84.2.44.1 84.2.46.1 FireFox: ======== FF ProfilePath: C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.5.0 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default\searchplugins\avira-safesearch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default\Extensions\abs@avira.com [2014-08-14] FF Extension: Avira SafeSearch - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default\Extensions\safesearch@avira.com [2014-08-15] FF Extension: Adblock Plus - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\otw74ym5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-20] FF Extension: avast! Ad Blocker - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-08-02] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-07] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG) R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation) R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [File not signed] R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-25] (Intel Corporation) S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2013-07-09] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-25] (Intel Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-09-24] () R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation) R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-19] (Intel Corporation) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-19] (Intel Corporation) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1642544 2014-02-27] (Sony Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-09-24] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-08-22] (Advanced Micro Devices, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-16] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG) R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-07-09] (Bytemobile, Inc.) [File not signed] R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132480 2012-10-01] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1337216 2012-10-01] (Motorola Solutions, Inc.) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [212992 2013-07-09] (Huawei Technologies Co., Ltd.) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-16] (Malwarebytes Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4309032 2012-10-10] (Intel Corporation) R3 rimssne; C:\Windows\System32\drivers\rimssne64.sys [103424 2012-08-23] (REDC) R3 risdsnxc; C:\Windows\System32\drivers\risdsnxc64.sys [104960 2012-08-23] (REDC) R3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2014-06-23] () R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-09-27] (Synaptics Incorporated) R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation) R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2013-07-09] (Bytemobile, Inc.) [File not signed] R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider) R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-16 15:15 - 2014-08-16 15:15 - 00000000 ____D () C:\Users\Nicole\Desktop\FRST-OlderVersion 2014-08-16 14:19 - 2014-08-16 15:06 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-16 14:17 - 2014-08-16 14:17 - 00001066 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-08-16 14:17 - 2014-08-16 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-08-16 14:17 - 2014-08-16 14:17 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-08-16 14:17 - 2014-08-16 14:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-08-16 14:17 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-08-16 14:17 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-08-16 14:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-08-16 14:14 - 2014-08-16 14:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nicole\Desktop\mbam-setup-2.0.2.1012.exe 2014-08-16 14:04 - 2014-08-16 14:04 - 00003495 _____ () C:\Users\Nicole\Desktop\AdwCleaner[S0].txt 2014-08-16 14:03 - 2014-08-16 14:10 - 00000000 ____D () C:\AdwCleaner 2014-08-16 14:03 - 2014-08-16 14:04 - 00003668 _____ () C:\Users\Nicole\Desktop\AdwCleaner[R0].txt 2014-08-16 14:00 - 2014-08-16 14:00 - 01361203 _____ () C:\Users\Nicole\Desktop\adwcleaner_3.306.exe 2014-08-15 14:09 - 2014-08-15 14:10 - 00289200 _____ () C:\Windows\Minidump\081514-65312-01.dmp 2014-08-15 14:08 - 2014-08-16 14:57 - 00322128 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-15 14:03 - 2014-08-15 14:03 - 00000474 _____ () C:\Users\Nicole\Desktop\defogger_disable.log 2014-08-15 14:03 - 2014-08-15 14:03 - 00000000 _____ () C:\Users\Nicole\defogger_reenable 2014-08-15 14:02 - 2014-08-15 14:02 - 00380416 _____ () C:\Users\Nicole\Desktop\Gmer-19357.exe 2014-08-15 14:01 - 2014-08-15 14:01 - 00050477 _____ () C:\Users\Nicole\Desktop\Defogger.exe 2014-08-15 13:34 - 2014-08-15 13:34 - 00039031 _____ () C:\Users\Nicole\Desktop\FRST_15-08-2014_13-34-58.txt 2014-08-15 13:33 - 2014-08-15 13:34 - 00037648 _____ () C:\Users\Nicole\Desktop\Addition1.txt 2014-08-15 13:32 - 2014-08-16 15:16 - 00000000 ____D () C:\FRST 2014-08-15 13:32 - 2014-08-16 15:15 - 00021509 _____ () C:\Users\Nicole\Desktop\FRST.txt 2014-08-15 13:29 - 2014-08-16 15:15 - 02101248 _____ (Farbar) C:\Users\Nicole\Desktop\FRST64.exe 2014-08-15 11:44 - 2014-08-15 11:44 - 00000000 ____D () C:\Windows\Hewlett-Packard 2014-08-14 20:08 - 2014-08-14 20:08 - 00001097 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-08-14 20:07 - 2014-08-14 20:07 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-14 15:06 - 2014-07-16 00:51 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-08-14 14:18 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-14 14:18 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-08-14 14:07 - 2014-07-24 14:11 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-14 14:07 - 2014-07-24 14:10 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-14 14:07 - 2014-07-24 14:10 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-14 14:07 - 2014-07-24 14:10 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-08-14 14:07 - 2014-07-24 14:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 19279872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 15399936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-14 14:07 - 2014-07-24 14:09 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-14 14:07 - 2014-07-24 14:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-14 14:07 - 2014-07-24 12:52 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-08-14 14:07 - 2014-07-24 12:52 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-08-14 14:07 - 2014-07-24 12:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 14371328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-08-14 14:07 - 2014-07-24 12:51 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-08-14 14:07 - 2014-07-24 12:51 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-08-14 14:07 - 2014-07-24 12:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-14 14:07 - 2014-07-24 12:29 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-08-14 14:07 - 2014-07-24 10:03 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-08-14 14:07 - 2014-07-16 01:03 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-14 14:07 - 2014-07-16 00:55 - 04035072 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-14 14:07 - 2014-07-12 04:36 - 01023488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-14 14:07 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-14 14:07 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-08-14 14:07 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-08-14 14:07 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-08-14 14:07 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-08-14 14:07 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-08-14 14:07 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe 2014-08-14 14:07 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe 2014-08-14 14:07 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-08-14 14:07 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-08-14 14:07 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-08-14 14:07 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-08-14 14:06 - 2014-06-20 01:35 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-14 14:06 - 2014-06-20 00:24 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-08-14 14:06 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-14 14:06 - 2014-06-05 19:30 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-08-14 14:06 - 2014-06-05 19:29 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-14 14:06 - 2014-06-05 19:29 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-14 14:06 - 2014-06-05 19:28 - 02306560 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-14 14:06 - 2014-06-05 19:28 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-08-14 14:06 - 2014-06-05 15:12 - 08857600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-08-14 14:06 - 2014-06-05 15:11 - 02416128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-08-14 14:06 - 2014-06-05 15:11 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-08-14 14:06 - 2014-06-05 15:10 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-08-14 14:06 - 2014-06-05 15:10 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2014-08-14 14:06 - 2014-05-29 06:04 - 00094552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2014-08-14 14:06 - 2014-05-08 03:34 - 00328024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-08-07 22:40 - 2014-08-07 22:40 - 00000000 ____D () C:\Users\Nicole\Desktop\Ich 2014-08-06 17:17 - 2014-08-06 17:17 - 00262158 _____ () C:\Users\Nicole\Downloads\antr_lvwa_vb_1_beihilfe_antrag_20100330.pdf~RF1f6e0f52.TMP 2014-08-02 12:04 - 2014-08-02 12:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-31 15:28 - 2014-08-02 02:15 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-31 15:28 - 2014-08-02 02:15 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-27 09:33 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-27 09:33 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-27 09:33 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-07-27 09:33 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-07-27 09:33 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-27 09:33 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2014-07-27 09:33 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-07-27 09:33 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-07-27 09:33 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-27 09:33 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2014-07-27 09:33 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-27 09:33 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-27 09:33 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-27 09:33 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-27 09:33 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-27 09:33 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll 2014-07-27 09:33 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-07-27 09:32 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-27 09:32 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-27 09:32 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2014-07-27 09:32 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-16 15:16 - 2014-08-15 13:32 - 00021509 _____ () C:\Users\Nicole\Desktop\FRST.txt 2014-08-16 15:16 - 2014-08-15 13:32 - 00000000 ____D () C:\FRST 2014-08-16 15:15 - 2014-08-16 15:15 - 00000000 ____D () C:\Users\Nicole\Desktop\FRST-OlderVersion 2014-08-16 15:15 - 2014-08-15 13:29 - 02101248 _____ (Farbar) C:\Users\Nicole\Desktop\FRST64.exe 2014-08-16 15:06 - 2014-08-16 14:19 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-16 15:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-08-16 14:57 - 2014-08-15 14:08 - 00322128 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-16 14:57 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-08-16 14:56 - 2014-04-16 14:07 - 00012636 _____ () C:\Windows\PFRO.log 2014-08-16 14:55 - 2012-11-14 21:11 - 01391532 _____ () C:\Windows\WindowsUpdate.log 2014-08-16 14:17 - 2014-08-16 14:17 - 00001066 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-08-16 14:17 - 2014-08-16 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-08-16 14:17 - 2014-08-16 14:17 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-08-16 14:17 - 2014-08-16 14:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-08-16 14:15 - 2014-08-16 14:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nicole\Desktop\mbam-setup-2.0.2.1012.exe 2014-08-16 14:10 - 2014-08-16 14:03 - 00000000 ____D () C:\AdwCleaner 2014-08-16 14:04 - 2014-08-16 14:04 - 00003495 _____ () C:\Users\Nicole\Desktop\AdwCleaner[S0].txt 2014-08-16 14:04 - 2014-08-16 14:03 - 00003668 _____ () C:\Users\Nicole\Desktop\AdwCleaner[R0].txt 2014-08-16 14:00 - 2014-08-16 14:00 - 01361203 _____ () C:\Users\Nicole\Desktop\adwcleaner_3.306.exe 2014-08-15 14:44 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache 2014-08-15 14:24 - 2013-04-12 16:05 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Sony Corporation 2014-08-15 14:22 - 2012-11-14 20:42 - 00753134 _____ () C:\Windows\system32\perfh007.dat 2014-08-15 14:22 - 2012-11-14 20:42 - 00155826 _____ () C:\Windows\system32\perfc007.dat 2014-08-15 14:22 - 2012-07-26 09:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-08-15 14:15 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-08-15 14:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore 2014-08-15 14:11 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData 2014-08-15 14:10 - 2014-08-15 14:09 - 00289200 _____ () C:\Windows\Minidump\081514-65312-01.dmp 2014-08-15 14:09 - 2013-12-31 17:48 - 00000000 ____D () C:\Windows\Minidump 2014-08-15 14:08 - 2014-05-22 19:03 - 781358929 _____ () C:\Windows\MEMORY.DMP 2014-08-15 14:08 - 2013-04-12 16:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-15 14:03 - 2014-08-15 14:03 - 00000474 _____ () C:\Users\Nicole\Desktop\defogger_disable.log 2014-08-15 14:03 - 2014-08-15 14:03 - 00000000 _____ () C:\Users\Nicole\defogger_reenable 2014-08-15 14:03 - 2013-04-12 15:59 - 00000000 ____D () C:\Users\Nicole 2014-08-15 14:02 - 2014-08-15 14:02 - 00380416 _____ () C:\Users\Nicole\Desktop\Gmer-19357.exe 2014-08-15 14:01 - 2014-08-15 14:01 - 00050477 _____ () C:\Users\Nicole\Desktop\Defogger.exe 2014-08-15 13:34 - 2014-08-15 13:34 - 00039031 _____ () C:\Users\Nicole\Desktop\FRST_15-08-2014_13-34-58.txt 2014-08-15 13:34 - 2014-08-15 13:33 - 00037648 _____ () C:\Users\Nicole\Desktop\Addition1.txt 2014-08-15 12:17 - 2013-04-12 16:00 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Packages 2014-08-15 12:17 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-08-15 11:44 - 2014-08-15 11:44 - 00000000 ____D () C:\Windows\Hewlett-Packard 2014-08-15 11:44 - 2013-04-18 22:10 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\HpUpdate 2014-08-15 11:44 - 2013-04-18 22:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-08-15 11:44 - 2013-04-18 22:06 - 00000000 ____D () C:\Program Files (x86)\HP 2014-08-15 11:24 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp 2014-08-14 20:09 - 2013-04-24 22:05 - 01802752 ___SH () C:\Users\Nicole\Desktop\Thumbs.db 2014-08-14 20:08 - 2014-08-14 20:08 - 00001097 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-08-14 20:08 - 2014-02-21 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-08-14 20:08 - 2014-02-21 13:32 - 00000000 ____D () C:\ProgramData\Avira 2014-08-14 20:08 - 2014-02-21 13:32 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-08-14 20:07 - 2014-08-14 20:07 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-14 15:19 - 2013-10-14 17:35 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-07 22:46 - 2014-04-14 18:54 - 00006364 _____ () C:\Windows\setupact.log 2014-08-07 22:40 - 2014-08-07 22:40 - 00000000 ____D () C:\Users\Nicole\Desktop\Ich 2014-08-07 22:31 - 2013-04-21 19:45 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\vlc 2014-08-06 17:17 - 2014-08-06 17:17 - 00262158 _____ () C:\Users\Nicole\Downloads\antr_lvwa_vb_1_beihilfe_antrag_20100330.pdf~RF1f6e0f52.TMP 2014-08-06 14:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF 2014-08-04 12:49 - 2013-04-12 16:09 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3278550599-1859411315-2701880331-1001 2014-08-04 11:51 - 2012-11-14 21:33 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-08-02 12:04 - 2014-08-02 12:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-08-02 02:15 - 2014-07-31 15:28 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-08-02 02:15 - 2014-07-31 15:28 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-31 15:32 - 2014-02-22 19:02 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-31 15:26 - 2013-04-27 16:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-07-31 15:26 - 2013-04-27 16:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-07-31 15:23 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-31 15:23 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-31 15:23 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-31 15:22 - 2013-08-21 19:58 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-31 15:20 - 2013-04-27 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-07-31 15:20 - 2013-04-12 19:06 - 96441528 ____N (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-31 15:20 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-07-25 22:56 - 2014-06-22 09:33 - 00000000 ____D () C:\Users\Nicole\Desktop\iphone 2014-07-25 22:56 - 2014-06-15 23:15 - 00000000 ____D () C:\Users\Nicole\Desktop\felix und ronny 2014-07-24 14:11 - 2014-08-14 14:07 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-24 14:10 - 2014-08-14 14:07 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-24 14:10 - 2014-08-14 14:07 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-24 14:10 - 2014-08-14 14:07 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-07-24 14:10 - 2014-08-14 14:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 19279872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 15399936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-24 14:09 - 2014-08-14 14:07 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-24 14:09 - 2014-08-14 14:07 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-24 12:52 - 2014-08-14 14:07 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-24 12:52 - 2014-08-14 14:07 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-24 12:52 - 2014-08-14 14:07 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 14371328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-24 12:51 - 2014-08-14 14:07 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-24 12:51 - 2014-08-14 14:07 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-24 12:33 - 2014-08-14 14:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-24 12:29 - 2014-08-14 14:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-24 10:03 - 2014-08-14 14:07 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll Some content of TEMP: ==================== C:\Users\Nicole\AppData\Local\Temp\avgnt.exe C:\Users\Nicole\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-07 19:08 ==================== End Of Log ============================ --- --- ---   |
| Themen zu Conduit.search protect deinstalliert, wie weiter? |
| bingbar, branding, conduit search, conduit search entfernen, conduit.search, conduit.search entfernen, conduit_search, conduit_search entfernen, device driver, dvdvideosoft ltd., hijack.trojan.poweliks, lightning, newtab, officejet, pup.optional.conduit.a, pup.optional.opencandy, pup.optional.searchprotect.a, win32/bundled.toolbar.ask.d, win32/conduit.searchprotect.q, win32/toolbar.conduit.r, windowsapps, wscript.exe, xperia |
Baum-Darstellung