![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Computer gesperrt, BundespolizeiWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
| | #1 |
| | Computer gesperrt, Bundespolizei Hallo zusammen, auch ich habe wie einige andere ein Problem mit dem Bundespolizei-Trojaner: Entsperren nach Zahlung. Jetzt habe ich Windows 7 mit dem Vaio Recovery Tool wieder zurückgesetzt, und ich habe auch wieder Zugriff auf meinen Rechner. Bevor ich wieder Software installiere würde ich gerne auf Nummer sicher gehen, dass mein Rechner wirklich entseucht ist - so ganz traue ich dem Frieden nicht... Wäre schön, wenn mir jemand hilft. Danke! |
| | #2 |
| /// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | Computer gesperrt, Bundespolizei hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
| | #3 |
| | Computer gesperrt, Bundespolizei Hallo,
__________________hier die logfiles: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-07-2013
Ran by RW (administrator) on 19-07-2013 16:34:05
Running from C:\Users\RW\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(InterVideo) c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Sophos Plc) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Sophos Plc) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Java\jre6\bin\jusched.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Java\jre6\bin\jucheck.exe
(Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Plus HD) C:\program files (x86)\plus-hd-2.3\plus-hd-2.3-bg.exe
(Adobe Systems, Inc.) C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe
() C:\Users\RW\Qtrax\Player\notification.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-08-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [171520 2009-08-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Runonce: [Del484289] - cmd.exe /Q /D /c del "C:\Users\RW\AppData\Local\Temp\0.del" [x]
HKLM-x32\...\Runonce: [Del529935] - cmd.exe /Q /D /c del "C:\Users\RW\AppData\Local\Temp\0.del" [x]
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKCU\...\Run: [QtraxNotification] - C:\Users\RW\Qtrax\Player\Notification.exe [110888 2013-07-08] ()
HKCU\...\Runonce: [Del484289] - cmd.exe /Q /D /c del "C:\Users\RW\AppData\Local\Temp\0.del" [x]
HKCU\...\Runonce: [Del529935] - cmd.exe /Q /D /c del "C:\Users\RW\AppData\Local\Temp\0.del" [x]
HKCU\...\Runonce: [Qtrax] - C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 330160670.portal.qtrax.com [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Java\jre6\bin\jusched.exe" [148888 2009-08-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [317288 2009-05-26] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-07-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2013-07-19] (Sony Corporation)
AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll [2521040 2013-05-23] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sophos AutoUpdate Monitor.lnk
ShortcutTarget: Sophos AutoUpdate Monitor.lnk -> C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Sophos Plc)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=E01B0024D63D2A24&affID=119357&tsp=4948
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=E01B0024D63D2A24&affID=119357&tsp=4948
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=E01B0024D63D2A24&affID=119357&tsp=4948
SearchScopes: HKCU - {2836DF67-69C4-4079-A2EF-3AE9ED076131} URL = hxxp://services.zinio.com/search?s={selection}&rf=sonyslices
SearchScopes: HKCU - {67E027F9-491D-4552-9C9D-DE1726B7FC5E} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {B712BDD9-D446-414E-A7A9-1BB225B65ED3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner64.dll (Google Inc.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Plus-HD-2.3 - {11111111-1111-1111-1111-110311341126} - C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-bho.dll (Plus HD)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Super Lyrics - {30B87EBD-E91B-498B-B25D-DF116AF00393} - C:\Program Files (x86)\Super_Lyrics\124.dll (Super Add-on Software)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll (Google Inc.)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Super Lyrics - {B9020890-9E08-446B-87B0-0C5CD0436D86} - C:\Program Files (x86)\Super_Lyrics\116.dll No File
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: DealPly - {EF7BD87A-8024-11E2-F316-F3E56188709B} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 78.42.43.62 82.212.62.62
Chrome:
=======
CHR Extension: (Super Lyrics) - C:\Users\RW\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnjcnjlaajofpendibcoodneacalfho\1.116
CHR Extension: (DealPly Shopping ) - C:\Users\RW\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmfnfnpmhcllokmkepffndflpnadjmma\3.5.0.0_0
==================== Services (Whitelisted) =================
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2827728 2013-05-23] ()
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [189984 2009-07-24] (Realtek Semiconductor)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)
R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [175144 2009-09-04] (Sophos Plc)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)
R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)
R2 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2013-05-02] (Wajam)
==================== Drivers (Whitelisted) ====================
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\Users\RW\Qtrax
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\FRST
2013-07-19 16:32 - 2013-07-19 16:32 - 01778207 _____ (Farbar) C:\Users\RW\Desktop\FRST64.exe
2013-07-19 16:29 - 2013-07-19 16:29 - 00003778 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-07-19 16:29 - 2013-07-19 16:29 - 00002371 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-07-19 16:29 - 2013-07-19 16:29 - 00002341 _____ C:\Users\RW\Desktop\Qtrax Player.lnk
2013-07-19 16:28 - 2013-07-19 16:28 - 00003480 _____ C:\Windows\System32\Tasks\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-07-19 16:28 - 2013-07-19 16:28 - 00003368 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-19 16:28 - 2013-07-19 16:28 - 00003360 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-07-19 16:28 - 2013-07-19 16:28 - 00003036 _____ C:\Windows\System32\Tasks\Super Lyrics Update
2013-07-19 16:28 - 2013-07-19 16:28 - 00000394 _____ C:\Windows\Tasks\Super Lyrics Update.job
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Zip Opener Packages
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Super_Lyrics
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Delta
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-07-19 16:27 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\BabSolution
2013-07-19 16:27 - 2013-07-19 16:27 - 00004222 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-codedownloader
2013-07-19 16:27 - 2013-07-19 16:27 - 00004218 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-updater
2013-07-19 16:27 - 2013-07-19 16:27 - 00004122 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-enabler
2013-07-19 16:27 - 2013-07-19 16:27 - 00003200 _____ C:\Windows\System32\Tasks\DSite
2013-07-19 16:27 - 2013-07-19 16:27 - 00001192 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00001188 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-19 16:27 - 2013-07-19 16:27 - 00001092 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00000274 _____ C:\Windows\Tasks\DSite.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Macromedia
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\DSite
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Babylon
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\ProgramData\Babylon
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Wajam
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-19 16:26 - 2013-07-19 16:26 - 00793536 _____ C:\Users\RW\Desktop\ZipOpenerSetup.exe
2013-07-19 16:22 - 2013-07-19 16:22 - 00000000 ____D C:\Users\RW\AppData\Roaming\Adobe
2013-07-19 09:43 - 2010-01-09 09:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-07-19 09:43 - 2010-01-09 08:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
2013-07-19 09:42 - 2012-02-15 08:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-07-19 09:42 - 2012-02-15 07:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-07-19 09:42 - 2012-02-15 06:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-07-19 09:42 - 2012-02-15 06:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-07-19 09:42 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20130719-094223.backup
2013-07-19 09:37 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-07-19 09:37 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-07-19 09:37 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-07-19 09:37 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-07-19 09:37 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-07-19 09:37 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-07-19 09:30 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Local\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00002766 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Roaming\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 09:28 - 2013-07-19 09:44 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-07-19 09:28 - 2013-07-19 09:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-19 09:28 - 2013-07-19 09:28 - 00001258 _____ C:\Users\RW\Desktop\Spybot - Search & Destroy.lnk
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\ProgramData\Sophos
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-19 07:15 - 2013-07-19 06:50 - 00000000 ____D C:\Program Files\Sony
2013-07-19 07:02 - 2013-07-19 07:02 - 00000355 _____ C:\Users\RW\Desktop\Computer.lnk
2013-07-19 07:01 - 2013-07-19 07:01 - 00004270 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C}
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Roaming\ATI
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\Sony_Corporation
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\ATI
2013-07-19 07:00 - 2013-07-19 07:00 - 00090992 _____ C:\Users\RW\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-19 07:00 - 2013-07-19 07:00 - 00031480 _____ C:\Windows\ie8_main.log
2013-07-19 07:00 - 2013-07-19 07:00 - 00001439 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00001405 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\SysWOW64\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\system32\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Roaming\Sony Corporation
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Local\VirtualStore
2013-07-19 06:59 - 2013-07-19 16:33 - 00000000 ____D C:\Users\RW
2013-07-19 06:59 - 2013-07-19 06:59 - 00000020 ___SH C:\Users\RW\ntuser.ini
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-19 06:59 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-07-19 06:59 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-07-19 06:51 - 2013-07-19 06:51 - 00004358 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244}
2013-07-19 06:49 - 2013-07-19 09:23 - 00385430 _____ C:\Windows\PFRO.log
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\Documentation
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\_FS_SWRINFO
2013-07-19 06:47 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive
2013-07-19 06:46 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-19 06:45 - 2013-07-19 06:45 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-07-19 06:45 - 2013-07-19 06:45 - 00028728 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\VAIO FW screensavers
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony Corporation
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 _____ C:\Windows\VAIOUpdt.INI
2013-07-19 06:45 - 2009-07-20 22:03 - 00000008 _____ C:\Windows\SysWOW64\FW_version.txt
2013-07-19 06:43 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-07-19 06:42 - 2009-07-01 11:49 - 00098304 _____ (Sony Corporation) C:\Windows\SysWOW64\VESWinlogon.dll
2013-07-19 06:40 - 2013-07-19 06:40 - 00001372 _____ C:\Windows\xpsp1hfm.log
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Uninstall
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Sonic
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files\Roxio
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files (x86)\Roxio
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2009-05-21 02:56 - 00072176 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxhpinst.exe
2013-07-19 06:39 - 2009-05-15 12:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2013-07-19 06:39 - 2009-05-15 12:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2013-07-19 06:39 - 2009-05-11 20:42 - 00133616 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxafs.dll
2013-07-19 06:37 - 2013-07-19 06:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
2013-07-19 06:36 - 2013-07-19 06:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-19 06:34 - 2013-07-19 06:37 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-19 06:34 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-19 06:34 - 2013-07-19 06:34 - 00000000 __RHD C:\MSOCache
2013-07-19 06:33 - 2013-07-19 06:33 - 00000000 ____D C:\ProgramData\SiteAdvisor
2013-07-19 06:31 - 2013-07-19 09:24 - 00000000 ____D C:\ProgramData\McAfee
2013-07-19 06:30 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\ProgramData\Partner
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\ProgramData\Google
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files\Google
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-19 06:30 - 2009-08-03 22:15 - 00002835 _____ C:\Windows\SysWOW64\McOEMAppRules.dat
2013-07-19 06:30 - 2009-08-03 22:15 - 00001253 _____ C:\Windows\SysWOW64\Mdat_1.3.00.0907310.txt
2013-07-19 06:30 - 2009-05-26 14:32 - 00019968 _____ (ArcSoft, Inc.) C:\Windows\system32\Drivers\ArcSoftKsUFilter.sys
2013-07-19 06:30 - 2005-04-27 16:36 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2013-07-19 06:30 - 1995-07-31 13:44 - 00212480 _____ (Eastman Kodak) C:\Windows\SysWOW64\PCDLIB32.DLL
2013-07-19 06:28 - 2013-07-19 06:29 - 00000187 _____ C:\Installer_Setup.log
2013-07-19 06:28 - 2013-07-19 06:28 - 00000000 ____D C:\ProgramData\ATI
2013-07-19 06:27 - 2013-07-19 06:27 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-07-19 06:27 - 2013-07-19 06:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-07-19 06:26 - 2013-07-19 06:26 - 00000000 ____D C:\Program Files (x86)\InterVideo
2013-07-19 06:25 - 2013-07-19 06:43 - 00174874 _____ C:\Windows\DirectX.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00489182 _____ C:\vcredist_x86.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00000000 ____D C:\Windows\{AEC0FEE6-3A76-44E1-97A2-5DA325DFC41C}
2013-07-19 06:25 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-07-19 06:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-07-19 06:25 - 2007-01-08 15:30 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-07-19 06:25 - 2007-01-08 15:30 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-07-19 06:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-07-19 06:25 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00091928 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00068888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-07-19 06:25 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-07-19 06:25 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-07-19 06:25 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-07-19 06:25 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-07-19 06:25 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-07-19 06:25 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-07-19 06:25 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-07-19 06:25 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-07-19 06:25 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-07-19 06:25 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-07-19 06:25 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-07-19 06:25 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-07-19 06:25 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-07-19 06:25 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-07-19 06:25 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-07-19 06:25 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-07-19 06:25 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-07-19 06:25 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-07-19 06:25 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-07-19 06:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-07-19 06:25 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-07-19 06:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-07-19 06:24 - 2013-07-19 09:47 - 00415835 _____ C:\Windows\WindowsUpdate.log
2013-07-19 06:24 - 2013-07-19 06:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-19 06:22 - 2009-05-20 12:00 - 00055280 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys
2013-07-19 06:21 - 2013-07-19 06:25 - 00000000 ____D C:\ProgramData\Adobe
2013-07-19 06:21 - 2013-07-19 06:24 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-19 06:20 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony
2013-07-19 06:20 - 2013-07-19 06:20 - 00000000 ____D C:\Windows\Sonysys
==================== One Month Modified Files and Folders =======
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\Users\RW\Qtrax
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\FRST
2013-07-19 16:33 - 2013-07-19 06:59 - 00000000 ____D C:\Users\RW
2013-07-19 16:32 - 2013-07-19 16:32 - 01778207 _____ (Farbar) C:\Users\RW\Desktop\FRST64.exe
2013-07-19 16:31 - 2009-07-14 06:45 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-19 16:31 - 2009-07-14 06:45 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-19 16:29 - 2013-07-19 16:29 - 00003778 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-07-19 16:29 - 2013-07-19 16:29 - 00002371 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-07-19 16:29 - 2013-07-19 16:29 - 00002341 _____ C:\Users\RW\Desktop\Qtrax Player.lnk
2013-07-19 16:28 - 2013-07-19 16:28 - 00003480 _____ C:\Windows\System32\Tasks\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-07-19 16:28 - 2013-07-19 16:28 - 00003368 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-19 16:28 - 2013-07-19 16:28 - 00003360 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-07-19 16:28 - 2013-07-19 16:28 - 00003036 _____ C:\Windows\System32\Tasks\Super Lyrics Update
2013-07-19 16:28 - 2013-07-19 16:28 - 00000394 _____ C:\Windows\Tasks\Super Lyrics Update.job
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Zip Opener Packages
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Super_Lyrics
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Delta
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-07-19 16:28 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\BabSolution
2013-07-19 16:28 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Local\Google
2013-07-19 16:27 - 2013-07-19 16:27 - 00004222 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-codedownloader
2013-07-19 16:27 - 2013-07-19 16:27 - 00004218 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-updater
2013-07-19 16:27 - 2013-07-19 16:27 - 00004122 _____ C:\Windows\System32\Tasks\Plus-HD-2.3-enabler
2013-07-19 16:27 - 2013-07-19 16:27 - 00003200 _____ C:\Windows\System32\Tasks\DSite
2013-07-19 16:27 - 2013-07-19 16:27 - 00001192 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00001188 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-19 16:27 - 2013-07-19 16:27 - 00001092 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00000274 _____ C:\Windows\Tasks\DSite.job
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Macromedia
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\DSite
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Babylon
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\ProgramData\Babylon
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Wajam
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-19 16:27 - 2009-07-14 19:58 - 00643866 _____ C:\Windows\system32\perfh007.dat
2013-07-19 16:27 - 2009-07-14 19:58 - 00126394 _____ C:\Windows\system32\perfc007.dat
2013-07-19 16:27 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-19 16:26 - 2013-07-19 16:26 - 00793536 _____ C:\Users\RW\Desktop\ZipOpenerSetup.exe
2013-07-19 16:24 - 2013-07-19 06:24 - 00415835 _____ C:\Windows\WindowsUpdate.log
2013-07-19 16:22 - 2013-07-19 16:22 - 00000000 ____D C:\Users\RW\AppData\Roaming\Adobe
2013-07-19 16:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-19 16:19 - 2009-07-14 06:51 - 00023361 _____ C:\Windows\setupact.log
2013-07-19 09:44 - 2013-07-19 09:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-07-19 09:35 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-07-19 09:30 - 2013-07-19 09:30 - 00002766 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Roaming\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 09:29 - 2013-07-19 09:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-19 09:28 - 2013-07-19 09:28 - 00001258 _____ C:\Users\RW\Desktop\Spybot - Search & Destroy.lnk
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\ProgramData\Sophos
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-19 09:26 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-07-19 09:24 - 2013-07-19 06:31 - 00000000 ____D C:\ProgramData\McAfee
2013-07-19 09:23 - 2013-07-19 06:49 - 00385430 _____ C:\Windows\PFRO.log
2013-07-19 07:15 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-07-19 07:15 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-07-19 07:02 - 2013-07-19 07:02 - 00000355 _____ C:\Users\RW\Desktop\Computer.lnk
2013-07-19 07:01 - 2013-07-19 07:01 - 00004270 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C}
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Roaming\ATI
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\Sony_Corporation
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\ATI
2013-07-19 07:00 - 2013-07-19 07:00 - 00090992 _____ C:\Users\RW\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-19 07:00 - 2013-07-19 07:00 - 00031480 _____ C:\Windows\ie8_main.log
2013-07-19 07:00 - 2013-07-19 07:00 - 00001439 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00001405 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\SysWOW64\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\system32\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Roaming\Sony Corporation
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Local\VirtualStore
2013-07-19 06:59 - 2013-07-19 06:59 - 00000020 ___SH C:\Users\RW\ntuser.ini
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-19 06:59 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-19 06:59 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-07-19 06:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-19 06:54 - 2009-08-19 04:17 - 00000000 ____D C:\Windows\Panther
2013-07-19 06:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-07-19 06:51 - 2013-07-19 06:51 - 00004358 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244}
2013-07-19 06:51 - 2009-07-14 06:46 - 00003043 _____ C:\Windows\DtcInstall.log
2013-07-19 06:50 - 2013-07-19 07:15 - 00000000 ____D C:\Program Files\Sony
2013-07-19 06:50 - 2009-08-18 20:12 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-07-19 06:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-07-19 06:49 - 2009-07-14 06:45 - 00377584 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\Documentation
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\_FS_SWRINFO
2013-07-19 06:48 - 2009-08-18 18:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-19 06:48 - 2009-08-18 18:56 - 00036014 _____ C:\Windows\DPINST.LOG
2013-07-19 06:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-07-19 06:47 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive
2013-07-19 06:47 - 2013-07-19 06:46 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-19 06:46 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-19 06:45 - 2013-07-19 06:45 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-07-19 06:45 - 2013-07-19 06:45 - 00028728 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\VAIO FW screensavers
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony Corporation
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 _____ C:\Windows\VAIOUpdt.INI
2013-07-19 06:45 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-07-19 06:45 - 2013-07-19 06:20 - 00000000 ____D C:\Program Files (x86)\Sony
2013-07-19 06:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-07-19 06:43 - 2013-07-19 06:25 - 00174874 _____ C:\Windows\DirectX.log
2013-07-19 06:42 - 2009-08-18 20:11 - 00000000 ____D C:\Program Files\Common Files\Sony Shared
2013-07-19 06:40 - 2013-07-19 06:40 - 00001372 _____ C:\Windows\xpsp1hfm.log
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Uninstall
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Sonic
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files\Roxio
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files (x86)\Roxio
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-19 06:38 - 2013-07-19 06:36 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-19 06:37 - 2013-07-19 06:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
2013-07-19 06:37 - 2013-07-19 06:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-19 06:35 - 2013-07-19 06:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-19 06:35 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-07-19 06:34 - 2013-07-19 06:34 - 00000000 __RHD C:\MSOCache
2013-07-19 06:33 - 2013-07-19 06:33 - 00000000 ____D C:\ProgramData\SiteAdvisor
2013-07-19 06:33 - 2009-07-14 04:34 - 00000435 _____ C:\Windows\win.ini
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\ProgramData\Partner
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\ProgramData\Google
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files\Google
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-19 06:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-07-19 06:29 - 2013-07-19 06:28 - 00000187 _____ C:\Installer_Setup.log
2013-07-19 06:28 - 2013-07-19 06:28 - 00000000 ____D C:\ProgramData\ATI
2013-07-19 06:27 - 2013-07-19 06:27 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-07-19 06:27 - 2013-07-19 06:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-07-19 06:26 - 2013-07-19 06:26 - 00000000 ____D C:\Program Files (x86)\InterVideo
2013-07-19 06:25 - 2013-07-19 06:25 - 00489182 _____ C:\vcredist_x86.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00000000 ____D C:\Windows\{AEC0FEE6-3A76-44E1-97A2-5DA325DFC41C}
2013-07-19 06:25 - 2013-07-19 06:21 - 00000000 ____D C:\ProgramData\Adobe
2013-07-19 06:24 - 2013-07-19 06:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-19 06:24 - 2013-07-19 06:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-19 06:20 - 2013-07-19 06:20 - 00000000 ____D C:\Windows\Sonysys
2013-07-19 06:20 - 2009-08-19 04:19 - 00000012 _____ C:\Windows\csup.txt
2013-07-19 06:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-07-19 06:17 - 2009-08-18 18:28 - 00003540 _____ C:\Windows\TSSysprep.log
2013-07-19 06:16 - 2009-08-18 18:58 - 00000000 ____D C:\Program Files\Apoint
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2009-08-18 18:25
==================== End Of Log ============================
und die Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-07-2013
Ran by RW at 2013-07-19 16:34:47
Running from C:\Users\RW\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.12.36)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.12.36)
Adobe Photoshop Elements 7.0 (x32 Version: 7.0.1)
Adobe Premiere Elements 7.0 (x32 Version: 7.0.1)
Adobe Reader 9.1 - Deutsch (x32 Version: 9.1.0)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.193)
ATI Catalyst Install Manager (Version: 3.0.732.0)
BrowserDefender (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full New (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Light (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center InstallProxy (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Localization All (x32 Version: 2009.0710.1127.18698)
CCC Help Chinese Standard (x32 Version: 2009.0720.2144.37243)
CCC Help Chinese Traditional (x32 Version: 2009.0720.2144.37243)
CCC Help Czech (x32 Version: 2009.0720.2144.37243)
CCC Help Danish (x32 Version: 2009.0720.2144.37243)
CCC Help Dutch (x32 Version: 2009.0720.2144.37243)
CCC Help English (x32 Version: 2009.0720.2144.37243)
CCC Help Finnish (x32 Version: 2009.0720.2144.37243)
CCC Help French (x32 Version: 2009.0720.2144.37243)
CCC Help German (x32 Version: 2009.0720.2144.37243)
CCC Help Greek (x32 Version: 2009.0720.2144.37243)
CCC Help Hungarian (x32 Version: 2009.0720.2144.37243)
CCC Help Italian (x32 Version: 2009.0720.2144.37243)
CCC Help Japanese (x32 Version: 2009.0720.2144.37243)
CCC Help Korean (x32 Version: 2009.0720.2144.37243)
CCC Help Norwegian (x32 Version: 2009.0720.2144.37243)
CCC Help Polish (x32 Version: 2009.0720.2144.37243)
CCC Help Portuguese (x32 Version: 2009.0720.2144.37243)
CCC Help Russian (x32 Version: 2009.0720.2144.37243)
CCC Help Spanish (x32 Version: 2009.0720.2144.37243)
CCC Help Swedish (x32 Version: 2009.0720.2144.37243)
CCC Help Thai (x32 Version: 2009.0720.2144.37243)
CCC Help Turkish (x32 Version: 2009.0720.2144.37243)
ccc-core-static (x32 Version: 2009.0710.1127.18698)
ccc-utility64 (Version: 2009.0710.1127.18698)
Choice Guard (x32 Version: 1.2.87.0)
Click to Disc (x32 Version: 1.2.70.06160)
Click to Disc Editor (x32 Version: 2.0.02)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.4518.1014)
DealPly (HKCU)
DealPly (remove only) (x32 Version: 4.8.6.1)
Delta Chrome Toolbar (x32)
Delta toolbar (x32 Version: 1.8.21.5)
Dolby Control Center (Version: 1.2.0702)
eaner (Version: 3.28)
Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.4.0.06120)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32)
Intel® Matrix Storage Manager
Java(TM) 6 Update 14 (64-bit) (Version: 6.0.140)
Java(TM) 6 Update 14 (x32 Version: 6.0.140)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 2 (SP2) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Works (x32 Version: 9.7.0621)
MSVCRT (x32 Version: 14.0.1468.721)
Music Transfer (x32 Version: 1.3.01.13160)
MusicStation (x32 Version: 1.2.2.180)
Norton Online Backup (x32 Version: 1.2.20.0)
Open It! (x32 Version: 1.1.1)
Plus-HD-2.3 (x32 Version: 1.27.153.8)
Primo (x32 Version: 1.00.0000)
Qtrax Connection Manager (HKCU Version: 20.13.07.02)
Qtrax Player (HKCU)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5897)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5886)
Regi (Version: 1.00.0000)
Roxio Central Audio (x32 Version: 3.8.0)
Roxio Central Copy (x32 Version: 3.8.0)
Roxio Central Core (x32 Version: 3.8.0)
Roxio Central Data (x32 Version: 3.8.0)
Roxio Central Tools (x32 Version: 3.8.0)
Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)
Roxio Easy Media Creator Home (x32 Version: 10.3.121)
Runtime (x32 Version: 1.00.0000)
Setting Utility Series (x32 Version: 5.0.0.07300)
Skype™ 4.0 (x32 Version: 4.0.227)
Sony Home Network Library (x32 Version: 2.0.0.07280)
Sony Picture Utility (x32 Version: 4.2.12.16210)
Sophos AutoUpdate (x32 Version: 2.5.4)
Spybot - Search & Destroy (x32 Version: 1.6.2)
Super Lyrics (x32)
Unterstützung für VAIO-Präsentation (x32 Version: 2.0.0.05270)
Update for Zip Opener (HKCU)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.5.0.06261)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.5.0.06260)
VAIO Content Metadata Manager Settings (x32 Version: 3.5.0.06260)
VAIO Content Metadata XML Interface Library (x32 Version: 3.5.0.06180)
VAIO Content Monitoring Settings (x32 Version: 2.4.0.06120)
VAIO Control Center (x32 Version: 4.0.0.06120)
VAIO Data Restore Tool (x32 Version: 1.1.01.06290)
VAIO DVD Menu Data Basic (x32 Version: 1.0.00.08130)
VAIO Energie Verwaltung (x32 Version: 4.0.0.07160)
VAIO Entertainment Platform (x32 Version: 3.5.0.07230)
VAIO Event Service (x32 Version: 5.0.0.07010)
VAIO FW screensaver (x32 Version: 1.0.0.0)
VAIO Gate (x32 Version: 1.0.0.08050)
VAIO Marketing Tools (x32)
VAIO Media plus (x32 Version: 2.0.0.07280)
VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)
VAIO Movie Story (x32 Version: 1.5.00.06191)
VAIO Movie Story Template Data (x32 Version: 1.5.00.06010)
VAIO Original Function Settings (x32 Version: 2.0.0.07010)
VAIO Original Funktion Einstellungen (x32 Version: 2.0.0.07010)
VAIO Premium Partners 1.00 (x32)
VAIO Smart Network (x32 Version: 3.0.0.08120)
VAIO Update 4 (x32 Version: 4.2.0.07300)
VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)
VAIO-Support für Übertragungen (x32 Version: 1.0.0.07290)
VD64Inst (Version: 1.00.0000)
Wajam (x32 Version: 1.80)
WIDCOMM Bluetooth Software (Version: 6.2.0.9600)
Windows Live Anmelde-Assistent (x32 Version: 5.000.817.1)
Windows Live Call (x32 Version: 14.0.8050.1202)
Windows Live Communications Platform (x32 Version: 14.0.8050.1202)
Windows Live Essentials (x32 Version: 14.0.8050.1202)
Windows Live Messenger (x32 Version: 14.0.8050.1202)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinDVD BD for VAIO (x32 Version: 8.0.20.79)
Zip Opener Packages (HKCU)
Zip Opener Packages 87 (HKCU)
==================== Restore Points =========================
19-07-2013 07:26:04 Installed Sophos Anti-Virus
19-07-2013 07:26:39 Installed Sophos AutoUpdate
19-07-2013 07:36:49 Windows Update
19-07-2013 07:43:01 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-07-19 09:42 - 00450371 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {18871FF2-164F-4AD7-9ED6-0D22B336E985} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-08-05] (Sony Corporation)
Task: {1B3C4044-97BC-4F86-BF14-2BF30D500B07} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-25] (Piriform Ltd)
Task: {3BBBAA3C-EE7A-42C1-A677-8B2D61DF1C74} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {40A1AFC9-7A27-4866-8D3A-DBDD39CF51F3} - System32\Tasks\Plus-HD-2.3-codedownloader => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-07-19] (Plus HD)
Task: {41F30417-DDAD-4702-A2C0-4457AFEB737F} - System32\Tasks\DSite => C:\Users\RW\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-07-19] ()
Task: {4265D9C3-B267-464A-9DAE-CE79F4DB5884} - System32\Tasks\EPUpdater => C:\Users\RW\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-06-06] ()
Task: {4F819418-A0D5-4B34-B707-CF05F233DBAE} - System32\Tasks\Super Lyrics Update => C:\Program Files (x86)\Super_Lyrics\SuperLupdater.exe [2013-07-18] (Super Add-on Software)
Task: {68A152AC-DDB8-4B1F-BBF2-F23ABC9D3C5F} - System32\Tasks\Plus-HD-2.3-updater => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-07-19] (Plus HD)
Task: {727D0B22-4269-42A9-A3BC-102DADBC633B} - System32\Tasks\SONY\VAIO Recovery Center\VAIO Reminder => C:\Program Files (x86)\Sony\VAIO Reminder\VAIOReminder.exe [2009-07-27] (Sony Corporation)
Task: {88991D28-B7F2-44E2-AD04-CF9B1D19A728} - System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244} => C:\Windows\system32\msfeedssync.exe [2009-07-14] (Microsoft Corporation)
Task: {A300329A-9685-43FF-86A0-AC8BBAD709F8} - System32\Tasks\DealPly => C:\Users\RW\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE [2013-02-27] ()
Task: {AB222130-C0E9-4BFD-8464-3331F95BE047} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {B7171258-AC18-497B-8C67-C6F639BCB993} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {BA3FBE3A-2750-482F-BD0A-D26689C668E6} - System32\Tasks\SONY\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe [2009-07-30] (Sony Corporation)
Task: {CDC96CD0-0F95-4FA0-B97B-A7C73D081E99} - System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C} => C:\Windows\system32\msfeedssync.exe [2009-07-14] (Microsoft Corporation)
Task: {EB70D698-5860-4ADD-897F-26A0B0B896C9} - System32\Tasks\Plus-HD-2.3-enabler => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-07-19] (Plus HD)
Task: {FE49DD07-4364-4BA1-9840-540FA8BF2CFE} - System32\Tasks\DealPlyUpdate => C:\Program No File
Task: C:\Windows\Tasks\DSite.job => ?
Task: C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-enabler.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-updater.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe
Task: C:\Windows\Tasks\Super Lyrics Update.job => C:\Program Files (x86)\Super_Lyrics\SuperLupdater.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/19/2013 04:20:25 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 04:16:22 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 09:44:59 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 09:33:35 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 09:24:41 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 09:18:49 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 06:58:19 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 06:50:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (07/19/2013 06:50:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (07/19/2013 06:50:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
System errors:
=============
Error: (07/19/2013 04:20:01 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (07/19/2013 04:19:48 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (07/19/2013 04:19:48 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (07/19/2013 04:15:58 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (07/19/2013 04:15:45 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (07/19/2013 04:15:45 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (07/19/2013 09:44:35 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (07/19/2013 09:44:18 AM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (07/19/2013 09:44:18 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (07/19/2013 09:37:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Sophos AutoUpdate Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 38%
Total physical RAM: 4063.02 MB
Available physical RAM: 2484.49 MB
Total Pagefile: 8124.2 MB
Available Pagefile: 6223.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:229.96 GB) (Free:205.93 GB) NTFS (Disk=0 Partition=3)
Drive d: (Daten) (Fixed) (Total:224.61 GB) (Free:190.84 GB) NTFS (Disk=0 Partition=4)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 353D0CB4)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=230 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=225 GB) - (Type=OF Extended)
==================== End Of Log ============================
|
| | #4 |
| /// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | Computer gesperrt, Bundespolizei GVU ist weg, aber jede menge Adware. Deinstalliere alles was: Toolbar Lyrics BrowserDefender im Namen hat. rebooten. Downloade Dir bitte
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
| | #5 |
| | Computer gesperrt, Bundespolizei So, das hat etwas gedauert...hier die Logfiles: 1. AdwCleaner Code:
ATTFilter # AdwCleaner v2.305 - Datei am 19/07/2013 um 17:26:28 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium (64 bits)
# Benutzer : RW - VAIO
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\RW\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
Gestoppt & Gelöscht : WajamUpdater
***** [Dateien / Ordner] *****
Datei Gelöscht : C:\Windows\Tasks\DSite.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-enabler.job
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-updater.job
Gelöscht mit Neustart : C:\Program Files (x86)\DealPly
Gelöscht mit Neustart : C:\Program Files (x86)\Plus-HD-2.3
Gelöscht mit Neustart : C:\Program Files (x86)\Wajam
Gelöscht mit Neustart : C:\ProgramData\Babylon
Gelöscht mit Neustart : C:\ProgramData\BrowserDefender
Gelöscht mit Neustart : C:\ProgramData\Partner
Gelöscht mit Neustart : C:\Users\RW\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmfnfnpmhcllokmkepffndflpnadjmma
Gelöscht mit Neustart : C:\Users\RW\AppData\Local\Temp\boost_interprocess
Gelöscht mit Neustart : C:\Users\RW\AppData\LocalLow\delta
Gelöscht mit Neustart : C:\Users\RW\AppData\Roaming\Babylon
Gelöscht mit Neustart : C:\Users\RW\AppData\Roaming\DealPly
Gelöscht mit Neustart : C:\Users\RW\AppData\Roaming\DSite
Gelöscht mit Neustart : C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
Gelöscht mit Neustart : C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\DealPly
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311341126}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311341126}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Schlüssel Gelöscht : HKCU\Software\Wajam
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344344426}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\DealPly
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341126}
Schlüssel Gelöscht : HKLM\Software\Wajam
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110311341126}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220322342226}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550355345526}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660366346626}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\e6df8bb03fe843
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345526}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346626}
***** [Internet Browser] *****
-\\ Internet Explorer v8.0.7600.16385
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=E01B0024D63D2A24&affID=119357&tsp=4948 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=E01B0024D63D2A24&affID=119357&tsp=4948 --> hxxp://www.google.com
*************************
AdwCleaner[R1].txt - [8209 octets] - [19/07/2013 17:26:00]
AdwCleaner[S1].txt - [8156 octets] - [19/07/2013 17:26:28]
########## EOF - C:\AdwCleaner[S1].txt - [8216 octets] ##########
Code:
ATTFilter # AdwCleaner v2.305 - Datei am 19/07/2013 um 17:34:20 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium (64 bits)
# Benutzer : RW - VAIO
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\RW\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Gelöscht mit Neustart : C:\Program Files (x86)\DealPly
Gelöscht mit Neustart : C:\Program Files (x86)\Plus-HD-2.3
Gelöscht mit Neustart : C:\Program Files (x86)\Wajam
Gelöscht mit Neustart : C:\ProgramData\Babylon
Gelöscht mit Neustart : C:\ProgramData\Partner
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v8.0.7600.16385
[OK] Die Registrierungsdatenbank ist sauber.
*************************
AdwCleaner[R1].txt - [8209 octets] - [19/07/2013 17:26:00]
AdwCleaner[S1].txt - [8277 octets] - [19/07/2013 17:26:28]
AdwCleaner[S2].txt - [309 octets] - [19/07/2013 17:34:06]
AdwCleaner[S3].txt - [987 octets] - [19/07/2013 17:34:20]
########## EOF - C:\AdwCleaner[S3].txt - [1046 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.1.6 (07.17.2013:4)
OS: Windows 7 Home Premium x64
Ran by RW on 19.07.2013 at 17:46:16,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B9020890-9E08-446B-87B0-0C5CD0436D86}
~~~ Files
Successfully deleted: [File] C:\Windows\tasks\Super Lyrics Update.job
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\Program Files (x86)\dealply"
Successfully deleted: [Folder] "C:\Program Files (x86)\super_lyrics"
Successfully deleted: [Folder] "C:\Program Files (x86)\wajam"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.07.2013 at 17:51:27,70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-07-2013
Ran by RW (administrator) on 19-07-2013 17:52:05
Running from C:\Users\RW\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(InterVideo) c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
() C:\Users\RW\Qtrax\Player\notification.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Java\jre6\bin\jusched.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-08-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [171520 2009-08-18] (Sun Microsystems, Inc.)
HKCU\...\Run: [QtraxNotification] - C:\Users\RW\Qtrax\Player\Notification.exe [110888 2013-07-08] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Java\jre6\bin\jusched.exe" [148888 2009-08-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [317288 2009-05-26] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-07-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2013-07-19] (Sony Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {2836DF67-69C4-4079-A2EF-3AE9ED076131} URL = hxxp://services.zinio.com/search?s={selection}&rf=sonyslices
SearchScopes: HKCU - {67E027F9-491D-4552-9C9D-DE1726B7FC5E} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {B712BDD9-D446-414E-A7A9-1BB225B65ED3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Super Lyrics - {30B87EBD-E91B-498B-B25D-DF116AF00393} - C:\Program Files (x86)\Super_Lyrics\124.dll No File
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 78.42.43.62 82.212.62.62
Chrome:
=======
CHR Extension: (Super Lyrics) - C:\Users\RW\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnjcnjlaajofpendibcoodneacalfho\1.116
==================== Services (Whitelisted) =================
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [189984 2009-07-24] (Realtek Semiconductor)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)
R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-19 17:51 - 2013-07-19 17:51 - 00001181 _____ C:\Users\RW\Desktop\JRT.txt
2013-07-19 17:46 - 2013-07-19 17:46 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 17:45 - 2013-07-19 17:45 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\RW\Desktop\JRT.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00001115 _____ C:\AdwCleaner[S3].txt
2013-07-19 17:34 - 2013-07-19 17:34 - 00000309 _____ C:\AdwCleaner[S2].txt
2013-07-19 17:26 - 2013-07-19 17:34 - 00001141 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 17:26 - 2013-07-19 17:26 - 00008277 _____ C:\AdwCleaner[S1].txt
2013-07-19 17:26 - 2013-07-19 17:26 - 00008209 _____ C:\AdwCleaner[R1].txt
2013-07-19 17:24 - 2013-07-19 17:24 - 00662345 _____ C:\Users\RW\Desktop\adwcleaner.exe
2013-07-19 17:16 - 2013-07-19 17:17 - 00000229 _____ C:\Users\RW\Desktop\Search.txt
2013-07-19 16:35 - 2013-05-02 02:06 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-07-19 16:34 - 2013-07-19 16:35 - 00018407 _____ C:\Users\RW\Desktop\Addition.txt
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\Users\RW\Qtrax
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\FRST
2013-07-19 16:32 - 2013-07-19 16:32 - 01778207 _____ (Farbar) C:\Users\RW\Desktop\FRST64.exe
2013-07-19 16:29 - 2013-07-19 16:29 - 00003778 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-07-19 16:29 - 2013-07-19 16:29 - 00002371 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-07-19 16:29 - 2013-07-19 16:29 - 00002341 _____ C:\Users\RW\Desktop\Qtrax Player.lnk
2013-07-19 16:28 - 2013-07-19 17:38 - 00000394 _____ C:\Windows\Tasks\Super Lyrics Update.job
2013-07-19 16:28 - 2013-07-19 16:28 - 00003480 _____ C:\Windows\System32\Tasks\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00003360 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-07-19 16:28 - 2013-07-19 16:28 - 00003036 _____ C:\Windows\System32\Tasks\Super Lyrics Update
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Zip Opener Packages
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-19 16:27 - 2013-07-19 16:27 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Macromedia
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-19 16:26 - 2013-07-19 16:26 - 00793536 _____ C:\Users\RW\Desktop\ZipOpenerSetup.exe
2013-07-19 16:22 - 2013-07-19 16:22 - 00000000 ____D C:\Users\RW\AppData\Roaming\Adobe
2013-07-19 09:43 - 2010-01-09 09:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-07-19 09:43 - 2010-01-09 08:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
2013-07-19 09:42 - 2012-02-15 08:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-07-19 09:42 - 2012-02-15 07:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-07-19 09:42 - 2012-02-15 06:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-07-19 09:42 - 2012-02-15 06:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-07-19 09:42 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20130719-094223.backup
2013-07-19 09:37 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-07-19 09:37 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-07-19 09:37 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-07-19 09:37 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-07-19 09:37 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-07-19 09:37 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-07-19 09:30 - 2013-07-19 17:19 - 00000000 ____D C:\Users\RW\AppData\Local\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00002766 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Roaming\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 09:28 - 2013-07-19 17:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-19 09:28 - 2013-07-19 17:43 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\ProgramData\Sophos
2013-07-19 07:15 - 2013-07-19 06:50 - 00000000 ____D C:\Program Files\Sony
2013-07-19 07:02 - 2013-07-19 07:02 - 00000355 _____ C:\Users\RW\Desktop\Computer.lnk
2013-07-19 07:01 - 2013-07-19 07:01 - 00004270 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C}
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Roaming\ATI
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\Sony_Corporation
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\ATI
2013-07-19 07:00 - 2013-07-19 07:00 - 00090992 _____ C:\Users\RW\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-19 07:00 - 2013-07-19 07:00 - 00031480 _____ C:\Windows\ie8_main.log
2013-07-19 07:00 - 2013-07-19 07:00 - 00001439 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00001405 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\SysWOW64\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\system32\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Roaming\Sony Corporation
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Local\VirtualStore
2013-07-19 06:59 - 2013-07-19 16:33 - 00000000 ____D C:\Users\RW
2013-07-19 06:59 - 2013-07-19 06:59 - 00000020 ___SH C:\Users\RW\ntuser.ini
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-19 06:59 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-07-19 06:59 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-07-19 06:51 - 2013-07-19 06:51 - 00004358 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244}
2013-07-19 06:49 - 2013-07-19 17:27 - 00389082 _____ C:\Windows\PFRO.log
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\Documentation
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\_FS_SWRINFO
2013-07-19 06:47 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive
2013-07-19 06:46 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-19 06:45 - 2013-07-19 06:45 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-07-19 06:45 - 2013-07-19 06:45 - 00028728 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\VAIO FW screensavers
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony Corporation
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 _____ C:\Windows\VAIOUpdt.INI
2013-07-19 06:45 - 2009-07-20 22:03 - 00000008 _____ C:\Windows\SysWOW64\FW_version.txt
2013-07-19 06:43 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-07-19 06:42 - 2009-07-01 11:49 - 00098304 _____ (Sony Corporation) C:\Windows\SysWOW64\VESWinlogon.dll
2013-07-19 06:40 - 2013-07-19 06:40 - 00001372 _____ C:\Windows\xpsp1hfm.log
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Uninstall
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Sonic
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files\Roxio
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files (x86)\Roxio
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2009-05-21 02:56 - 00072176 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxhpinst.exe
2013-07-19 06:39 - 2009-05-15 12:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2013-07-19 06:39 - 2009-05-15 12:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2013-07-19 06:39 - 2009-05-11 20:42 - 00133616 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxafs.dll
2013-07-19 06:37 - 2013-07-19 06:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
2013-07-19 06:36 - 2013-07-19 06:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-19 06:34 - 2013-07-19 06:37 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-19 06:34 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-19 06:34 - 2013-07-19 06:34 - 00000000 __RHD C:\MSOCache
2013-07-19 06:33 - 2013-07-19 06:33 - 00000000 ____D C:\ProgramData\SiteAdvisor
2013-07-19 06:31 - 2013-07-19 09:24 - 00000000 ____D C:\ProgramData\McAfee
2013-07-19 06:30 - 2013-07-19 17:27 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-19 06:30 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-07-19 06:30 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files\Google
2013-07-19 06:30 - 2009-08-03 22:15 - 00002835 _____ C:\Windows\SysWOW64\McOEMAppRules.dat
2013-07-19 06:30 - 2009-08-03 22:15 - 00001253 _____ C:\Windows\SysWOW64\Mdat_1.3.00.0907310.txt
2013-07-19 06:30 - 2009-05-26 14:32 - 00019968 _____ (ArcSoft, Inc.) C:\Windows\system32\Drivers\ArcSoftKsUFilter.sys
2013-07-19 06:30 - 2005-04-27 16:36 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2013-07-19 06:30 - 1995-07-31 13:44 - 00212480 _____ (Eastman Kodak) C:\Windows\SysWOW64\PCDLIB32.DLL
2013-07-19 06:28 - 2013-07-19 06:29 - 00000187 _____ C:\Installer_Setup.log
2013-07-19 06:28 - 2013-07-19 06:28 - 00000000 ____D C:\ProgramData\ATI
2013-07-19 06:27 - 2013-07-19 06:27 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-07-19 06:27 - 2013-07-19 06:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-07-19 06:26 - 2013-07-19 06:26 - 00000000 ____D C:\Program Files (x86)\InterVideo
2013-07-19 06:25 - 2013-07-19 06:43 - 00174874 _____ C:\Windows\DirectX.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00489182 _____ C:\vcredist_x86.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00000000 ____D C:\Windows\{AEC0FEE6-3A76-44E1-97A2-5DA325DFC41C}
2013-07-19 06:25 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-07-19 06:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-07-19 06:25 - 2007-01-08 15:30 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-07-19 06:25 - 2007-01-08 15:30 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-07-19 06:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-07-19 06:25 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00091928 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00068888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-07-19 06:25 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-07-19 06:25 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-07-19 06:25 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-07-19 06:25 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-07-19 06:25 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-07-19 06:25 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-07-19 06:25 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-07-19 06:25 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-07-19 06:25 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-07-19 06:25 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-07-19 06:25 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-07-19 06:25 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-07-19 06:25 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-07-19 06:25 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-07-19 06:25 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-07-19 06:25 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-07-19 06:25 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-07-19 06:25 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-07-19 06:25 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-07-19 06:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-07-19 06:25 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-07-19 06:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-07-19 06:24 - 2013-07-19 17:34 - 00547433 _____ C:\Windows\WindowsUpdate.log
2013-07-19 06:24 - 2013-07-19 06:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-19 06:22 - 2009-05-20 12:00 - 00055280 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys
2013-07-19 06:21 - 2013-07-19 06:25 - 00000000 ____D C:\ProgramData\Adobe
2013-07-19 06:21 - 2013-07-19 06:24 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-19 06:20 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony
2013-07-19 06:20 - 2013-07-19 06:20 - 00000000 ____D C:\Windows\Sonysys
==================== One Month Modified Files and Folders =======
2013-07-19 17:51 - 2013-07-19 17:51 - 00001181 _____ C:\Users\RW\Desktop\JRT.txt
2013-07-19 17:46 - 2013-07-19 17:46 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 17:45 - 2013-07-19 17:45 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\RW\Desktop\JRT.exe
2013-07-19 17:43 - 2013-07-19 09:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-19 17:43 - 2013-07-19 09:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-07-19 17:43 - 2009-07-14 19:58 - 00643866 _____ C:\Windows\system32\perfh007.dat
2013-07-19 17:43 - 2009-07-14 19:58 - 00126394 _____ C:\Windows\system32\perfc007.dat
2013-07-19 17:43 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-19 17:43 - 2009-07-14 06:45 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-19 17:43 - 2009-07-14 06:45 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-19 17:38 - 2013-07-19 16:28 - 00000394 _____ C:\Windows\Tasks\Super Lyrics Update.job
2013-07-19 17:38 - 2013-07-19 06:24 - 00547433 _____ C:\Windows\WindowsUpdate.log
2013-07-19 17:35 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-19 17:35 - 2009-07-14 06:51 - 00023473 _____ C:\Windows\setupact.log
2013-07-19 17:34 - 2013-07-19 17:34 - 00001115 _____ C:\AdwCleaner[S3].txt
2013-07-19 17:34 - 2013-07-19 17:34 - 00000309 _____ C:\AdwCleaner[S2].txt
2013-07-19 17:34 - 2013-07-19 17:26 - 00001141 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 17:27 - 2013-07-19 06:49 - 00389082 _____ C:\Windows\PFRO.log
2013-07-19 17:27 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files\Google
2013-07-19 17:27 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-19 17:26 - 2013-07-19 17:26 - 00008277 _____ C:\AdwCleaner[S1].txt
2013-07-19 17:26 - 2013-07-19 17:26 - 00008209 _____ C:\AdwCleaner[R1].txt
2013-07-19 17:24 - 2013-07-19 17:24 - 00662345 _____ C:\Users\RW\Desktop\adwcleaner.exe
2013-07-19 17:19 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Local\Google
2013-07-19 17:17 - 2013-07-19 17:16 - 00000229 _____ C:\Users\RW\Desktop\Search.txt
2013-07-19 16:35 - 2013-07-19 16:34 - 00018407 _____ C:\Users\RW\Desktop\Addition.txt
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\Users\RW\Qtrax
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\FRST
2013-07-19 16:33 - 2013-07-19 06:59 - 00000000 ____D C:\Users\RW
2013-07-19 16:32 - 2013-07-19 16:32 - 01778207 _____ (Farbar) C:\Users\RW\Desktop\FRST64.exe
2013-07-19 16:29 - 2013-07-19 16:29 - 00003778 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-07-19 16:29 - 2013-07-19 16:29 - 00002371 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-07-19 16:29 - 2013-07-19 16:29 - 00002341 _____ C:\Users\RW\Desktop\Qtrax Player.lnk
2013-07-19 16:28 - 2013-07-19 16:28 - 00003480 _____ C:\Windows\System32\Tasks\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00003360 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-07-19 16:28 - 2013-07-19 16:28 - 00003036 _____ C:\Windows\System32\Tasks\Super Lyrics Update
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Zip Opener Packages
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-19 16:27 - 2013-07-19 16:27 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Macromedia
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-19 16:26 - 2013-07-19 16:26 - 00793536 _____ C:\Users\RW\Desktop\ZipOpenerSetup.exe
2013-07-19 16:22 - 2013-07-19 16:22 - 00000000 ____D C:\Users\RW\AppData\Roaming\Adobe
2013-07-19 09:35 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-07-19 09:30 - 2013-07-19 09:30 - 00002766 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Roaming\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\ProgramData\Sophos
2013-07-19 09:26 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-07-19 09:24 - 2013-07-19 06:31 - 00000000 ____D C:\ProgramData\McAfee
2013-07-19 07:15 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-07-19 07:15 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-07-19 07:02 - 2013-07-19 07:02 - 00000355 _____ C:\Users\RW\Desktop\Computer.lnk
2013-07-19 07:01 - 2013-07-19 07:01 - 00004270 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C}
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Roaming\ATI
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\Sony_Corporation
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\ATI
2013-07-19 07:00 - 2013-07-19 07:00 - 00090992 _____ C:\Users\RW\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-19 07:00 - 2013-07-19 07:00 - 00031480 _____ C:\Windows\ie8_main.log
2013-07-19 07:00 - 2013-07-19 07:00 - 00001439 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00001405 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\SysWOW64\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\system32\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Roaming\Sony Corporation
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Local\VirtualStore
2013-07-19 06:59 - 2013-07-19 06:59 - 00000020 ___SH C:\Users\RW\ntuser.ini
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-19 06:59 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-19 06:59 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-07-19 06:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-19 06:54 - 2009-08-19 04:17 - 00000000 ____D C:\Windows\Panther
2013-07-19 06:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-07-19 06:51 - 2013-07-19 06:51 - 00004358 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244}
2013-07-19 06:51 - 2009-07-14 06:46 - 00003043 _____ C:\Windows\DtcInstall.log
2013-07-19 06:50 - 2013-07-19 07:15 - 00000000 ____D C:\Program Files\Sony
2013-07-19 06:50 - 2009-08-18 20:12 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-07-19 06:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-07-19 06:49 - 2009-07-14 06:45 - 00377584 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\Documentation
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\_FS_SWRINFO
2013-07-19 06:48 - 2009-08-18 18:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-19 06:48 - 2009-08-18 18:56 - 00036014 _____ C:\Windows\DPINST.LOG
2013-07-19 06:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-07-19 06:47 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive
2013-07-19 06:47 - 2013-07-19 06:46 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-19 06:46 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-19 06:45 - 2013-07-19 06:45 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-07-19 06:45 - 2013-07-19 06:45 - 00028728 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\VAIO FW screensavers
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony Corporation
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 _____ C:\Windows\VAIOUpdt.INI
2013-07-19 06:45 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-07-19 06:45 - 2013-07-19 06:20 - 00000000 ____D C:\Program Files (x86)\Sony
2013-07-19 06:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-07-19 06:43 - 2013-07-19 06:25 - 00174874 _____ C:\Windows\DirectX.log
2013-07-19 06:42 - 2009-08-18 20:11 - 00000000 ____D C:\Program Files\Common Files\Sony Shared
2013-07-19 06:40 - 2013-07-19 06:40 - 00001372 _____ C:\Windows\xpsp1hfm.log
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Uninstall
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Sonic
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files\Roxio
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files (x86)\Roxio
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-19 06:38 - 2013-07-19 06:36 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-19 06:37 - 2013-07-19 06:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
2013-07-19 06:37 - 2013-07-19 06:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-19 06:35 - 2013-07-19 06:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-19 06:35 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-07-19 06:34 - 2013-07-19 06:34 - 00000000 __RHD C:\MSOCache
2013-07-19 06:33 - 2013-07-19 06:33 - 00000000 ____D C:\ProgramData\SiteAdvisor
2013-07-19 06:33 - 2009-07-14 04:34 - 00000435 _____ C:\Windows\win.ini
2013-07-19 06:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-07-19 06:29 - 2013-07-19 06:28 - 00000187 _____ C:\Installer_Setup.log
2013-07-19 06:28 - 2013-07-19 06:28 - 00000000 ____D C:\ProgramData\ATI
2013-07-19 06:27 - 2013-07-19 06:27 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-07-19 06:27 - 2013-07-19 06:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-07-19 06:26 - 2013-07-19 06:26 - 00000000 ____D C:\Program Files (x86)\InterVideo
2013-07-19 06:25 - 2013-07-19 06:25 - 00489182 _____ C:\vcredist_x86.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00000000 ____D C:\Windows\{AEC0FEE6-3A76-44E1-97A2-5DA325DFC41C}
2013-07-19 06:25 - 2013-07-19 06:21 - 00000000 ____D C:\ProgramData\Adobe
2013-07-19 06:24 - 2013-07-19 06:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-19 06:24 - 2013-07-19 06:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-19 06:20 - 2013-07-19 06:20 - 00000000 ____D C:\Windows\Sonysys
2013-07-19 06:20 - 2009-08-19 04:19 - 00000012 _____ C:\Windows\csup.txt
2013-07-19 06:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-07-19 06:17 - 2009-08-18 18:28 - 00003540 _____ C:\Windows\TSSysprep.log
2013-07-19 06:16 - 2009-08-18 18:58 - 00000000 ____D C:\Program Files\Apoint
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2009-08-18 18:25
==================== End Of Log ============================
--- --- --- und noch die Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-07-2013
Ran by RW at 2013-07-19 17:52:33
Running from C:\Users\RW\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.12.36)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.12.36)
Adobe Photoshop Elements 7.0 (x32 Version: 7.0.1)
Adobe Premiere Elements 7.0 (x32 Version: 7.0.1)
Adobe Reader 9.1 - Deutsch (x32 Version: 9.1.0)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.193)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full New (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Light (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center InstallProxy (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Localization All (x32 Version: 2009.0710.1127.18698)
CCC Help Chinese Standard (x32 Version: 2009.0720.2144.37243)
CCC Help Chinese Traditional (x32 Version: 2009.0720.2144.37243)
CCC Help Czech (x32 Version: 2009.0720.2144.37243)
CCC Help Danish (x32 Version: 2009.0720.2144.37243)
CCC Help Dutch (x32 Version: 2009.0720.2144.37243)
CCC Help English (x32 Version: 2009.0720.2144.37243)
CCC Help Finnish (x32 Version: 2009.0720.2144.37243)
CCC Help French (x32 Version: 2009.0720.2144.37243)
CCC Help German (x32 Version: 2009.0720.2144.37243)
CCC Help Greek (x32 Version: 2009.0720.2144.37243)
CCC Help Hungarian (x32 Version: 2009.0720.2144.37243)
CCC Help Italian (x32 Version: 2009.0720.2144.37243)
CCC Help Japanese (x32 Version: 2009.0720.2144.37243)
CCC Help Korean (x32 Version: 2009.0720.2144.37243)
CCC Help Norwegian (x32 Version: 2009.0720.2144.37243)
CCC Help Polish (x32 Version: 2009.0720.2144.37243)
CCC Help Portuguese (x32 Version: 2009.0720.2144.37243)
CCC Help Russian (x32 Version: 2009.0720.2144.37243)
CCC Help Spanish (x32 Version: 2009.0720.2144.37243)
CCC Help Swedish (x32 Version: 2009.0720.2144.37243)
CCC Help Thai (x32 Version: 2009.0720.2144.37243)
CCC Help Turkish (x32 Version: 2009.0720.2144.37243)
ccc-core-static (x32 Version: 2009.0710.1127.18698)
ccc-utility64 (Version: 2009.0710.1127.18698)
Choice Guard (x32 Version: 1.2.87.0)
Click to Disc (x32 Version: 1.2.70.06160)
Click to Disc Editor (x32 Version: 2.0.02)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.4518.1014)
Dolby Control Center (Version: 1.2.0702)
eaner (Version: 3.28)
Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.4.0.06120)
Intel® Matrix Storage Manager
Java(TM) 6 Update 14 (64-bit) (Version: 6.0.140)
Java(TM) 6 Update 14 (x32 Version: 6.0.140)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 2 (SP2) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Works (x32 Version: 9.7.0621)
MSVCRT (x32 Version: 14.0.1468.721)
Music Transfer (x32 Version: 1.3.01.13160)
MusicStation (x32 Version: 1.2.2.180)
Norton Online Backup (x32 Version: 1.2.20.0)
Open It! (x32 Version: 1.1.1)
Plus-HD-2.3 (x32 Version: 1.27.153.8)
Primo (x32 Version: 1.00.0000)
Qtrax Connection Manager (HKCU Version: 20.13.07.02)
Qtrax Player (HKCU)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5897)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5886)
Regi (Version: 1.00.0000)
Roxio Central Audio (x32 Version: 3.8.0)
Roxio Central Copy (x32 Version: 3.8.0)
Roxio Central Core (x32 Version: 3.8.0)
Roxio Central Data (x32 Version: 3.8.0)
Roxio Central Tools (x32 Version: 3.8.0)
Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)
Roxio Easy Media Creator Home (x32 Version: 10.3.121)
Runtime (x32 Version: 1.00.0000)
Setting Utility Series (x32 Version: 5.0.0.07300)
Skype™ 4.0 (x32 Version: 4.0.227)
Sony Home Network Library (x32 Version: 2.0.0.07280)
Sony Picture Utility (x32 Version: 4.2.12.16210)
Super Lyrics (x32)
Unterstützung für VAIO-Präsentation (x32 Version: 2.0.0.05270)
Update for Zip Opener (HKCU)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.5.0.06261)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.5.0.06260)
VAIO Content Metadata Manager Settings (x32 Version: 3.5.0.06260)
VAIO Content Metadata XML Interface Library (x32 Version: 3.5.0.06180)
VAIO Content Monitoring Settings (x32 Version: 2.4.0.06120)
VAIO Control Center (x32 Version: 4.0.0.06120)
VAIO Data Restore Tool (x32 Version: 1.1.01.06290)
VAIO DVD Menu Data Basic (x32 Version: 1.0.00.08130)
VAIO Energie Verwaltung (x32 Version: 4.0.0.07160)
VAIO Entertainment Platform (x32 Version: 3.5.0.07230)
VAIO Event Service (x32 Version: 5.0.0.07010)
VAIO FW screensaver (x32 Version: 1.0.0.0)
VAIO Gate (x32 Version: 1.0.0.08050)
VAIO Marketing Tools (x32)
VAIO Media plus (x32 Version: 2.0.0.07280)
VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)
VAIO Movie Story (x32 Version: 1.5.00.06191)
VAIO Movie Story Template Data (x32 Version: 1.5.00.06010)
VAIO Original Function Settings (x32 Version: 2.0.0.07010)
VAIO Original Funktion Einstellungen (x32 Version: 2.0.0.07010)
VAIO Premium Partners 1.00 (x32)
VAIO Smart Network (x32 Version: 3.0.0.08120)
VAIO Update 4 (x32 Version: 4.2.0.07300)
VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)
VAIO-Support für Übertragungen (x32 Version: 1.0.0.07290)
VD64Inst (Version: 1.00.0000)
WIDCOMM Bluetooth Software (Version: 6.2.0.9600)
Windows Live Anmelde-Assistent (x32 Version: 5.000.817.1)
Windows Live Call (x32 Version: 14.0.8050.1202)
Windows Live Communications Platform (x32 Version: 14.0.8050.1202)
Windows Live Essentials (x32 Version: 14.0.8050.1202)
Windows Live Messenger (x32 Version: 14.0.8050.1202)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinDVD BD for VAIO (x32 Version: 8.0.20.79)
Zip Opener Packages (HKCU)
Zip Opener Packages 87 (HKCU)
==================== Restore Points =========================
19-07-2013 07:26:04 Installed Sophos Anti-Virus
19-07-2013 07:26:39 Installed Sophos AutoUpdate
19-07-2013 07:36:49 Windows Update
19-07-2013 07:43:01 Windows Update
19-07-2013 15:44:15 Removed Sophos AutoUpdate
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-07-19 09:42 - 00450371 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {18871FF2-164F-4AD7-9ED6-0D22B336E985} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-08-05] (Sony Corporation)
Task: {1B3C4044-97BC-4F86-BF14-2BF30D500B07} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-25] (Piriform Ltd)
Task: {4F819418-A0D5-4B34-B707-CF05F233DBAE} - System32\Tasks\Super Lyrics Update => C:\Program Files (x86)\Super_Lyrics\SuperLupdater.exe No File
Task: {727D0B22-4269-42A9-A3BC-102DADBC633B} - System32\Tasks\SONY\VAIO Recovery Center\VAIO Reminder => C:\Program Files (x86)\Sony\VAIO Reminder\VAIOReminder.exe [2009-07-27] (Sony Corporation)
Task: {88991D28-B7F2-44E2-AD04-CF9B1D19A728} - System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244} => C:\Windows\system32\msfeedssync.exe [2009-07-14] (Microsoft Corporation)
Task: {8FF2658B-1144-4605-9195-6F5F1748A4F8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {A300329A-9685-43FF-86A0-AC8BBAD709F8} - System32\Tasks\DealPly => C:\Users\RW\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File
Task: {AB222130-C0E9-4BFD-8464-3331F95BE047} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {AD10A1E9-2F90-4807-B668-488C750A0B6D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {BA3FBE3A-2750-482F-BD0A-D26689C668E6} - System32\Tasks\SONY\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe [2009-07-30] (Sony Corporation)
Task: {CDC96CD0-0F95-4FA0-B97B-A7C73D081E99} - System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C} => C:\Windows\system32\msfeedssync.exe [2009-07-14] (Microsoft Corporation)
Task: {FE49DD07-4364-4BA1-9840-540FA8BF2CFE} - System32\Tasks\DealPlyUpdate => C:\Program No File
Task: C:\Windows\Tasks\Super Lyrics Update.job => C:\Program Files (x86)\Super_Lyrics\SuperLupdater.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 4063.02 MB
Available physical RAM: 2747.6 MB
Total Pagefile: 8124.2 MB
Available Pagefile: 6555.17 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:229.96 GB) (Free:205.72 GB) NTFS (Disk=0 Partition=3)
Drive d: (Daten) (Fixed) (Total:224.61 GB) (Free:190.84 GB) NTFS (Disk=0 Partition=4)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 353D0CB4)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=230 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=225 GB) - (Type=OF Extended)
==================== End Of Log ============================
Hallo, ich habe inzwischen mal mit Spybot geprüft und insgesamt 14 Probleme gefunden: DeltaToolbar (4 x in der Registry) QTrax (9 Einträge) RightMedia (1 Cookie) Soll ich löschen oder hast du einen anderen Vorschlag? |
| | #6 |
| /// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | Computer gesperrt, Bundespolizei Löschen, zeig mir das Log dann. ESET Online Scanner
Downloade Dir bitte
und ein frisches FRST log bitte.
__________________ --> Computer gesperrt, Bundespolizei |
| | #7 |
| | Computer gesperrt, Bundespolizei Hallo, ich war einige Tage offline...hier das Logfile vom ESET-Scan: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=a3956b4b3ffdea49856b280abb008ccc
# engine=14494
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-22 05:33:26
# local_time=2013-07-22 07:33:26 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=5893 16776573 100 94 0 126920077 0 0
# scanned=151464
# found=3
# cleaned=0
# scan_time=2794
sh=33C939CDA5080E64858FCD1009953B586AA3FD45 ft=1 fh=2c11f21f1e6fc743 vn="a variant of Win32/Adware.AddLyrics.I application" ac=I fn="C:\Users\RW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YK8R1XB6\SuperLyrics_1060-2024_v122[1]"
sh=33C939CDA5080E64858FCD1009953B586AA3FD45 ft=1 fh=2c11f21f1e6fc743 vn="a variant of Win32/Adware.AddLyrics.I application" ac=I fn="C:\Users\RW\AppData\Local\Temp\SLupd.exe"
sh=87E041AE95745EF00E495B8EC0F2C1AF1BB973AC ft=1 fh=f2520af334832d0f vn="a variant of Win32/Adware.AddLyrics.I application" ac=I fn="C:\Users\RW\AppData\Local\Temp\is357113909\SuperLyrics_1060-2024_v116.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.70
Windows 7 x64 (UAC is enabled)
Out of date service pack!!
``````````````Antivirus/Firewall Check:``````````````
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
Spybot - Search & Destroy
Java(TM) 6 Update 14
Java version out of Date!
Adobe Flash Player 10 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-07-2013
Ran by RW (administrator) on 22-07-2013 19:49:31
Running from C:\Users\RW\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(InterVideo) c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
(Sophos Plc) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Sophos Plc) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Java\jre6\bin\jusched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
(Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-08-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-24] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-24] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre6\bin\jusched.exe [171520 2009-08-18] (Sun Microsystems, Inc.)
HKCU\...\Run: [QtraxNotification] - C:\Users\RW\Qtrax\Player\Notification.exe [x]
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Java\jre6\bin\jusched.exe" [148888 2009-08-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [317288 2009-05-26] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [98304 2009-07-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] - "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [MarketingTools] - C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [26624 2013-07-19] (Sony Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sophos AutoUpdate Monitor.lnk
ShortcutTarget: Sophos AutoUpdate Monitor.lnk -> C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Sophos Plc)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {2836DF67-69C4-4079-A2EF-3AE9ED076131} URL = hxxp://services.zinio.com/search?s={selection}&rf=sonyslices
SearchScopes: HKCU - {67E027F9-491D-4552-9C9D-DE1726B7FC5E} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {B712BDD9-D446-414E-A7A9-1BB225B65ED3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Super Lyrics - {30B87EBD-E91B-498B-B25D-DF116AF00393} - C:\Program Files (x86)\Super_Lyrics\124.dll No File
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 78.42.43.62 82.212.62.62
Chrome:
=======
CHR Extension: (Super Lyrics) - C:\Users\RW\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnjcnjlaajofpendibcoodneacalfho\1.116
==================== Services (Whitelisted) =================
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-06-26] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-06-26] (Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [189984 2009-07-24] (Realtek Semiconductor)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-07-27] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-07-27] (Sony Corporation)
R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [175144 2009-09-04] (Sophos Plc)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-07-23] (Sony Corporation)
R3 Vcsw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [313264 2009-07-23] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-07-23] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [76288 2009-07-31] (REDC)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-22 19:45 - 2013-07-22 19:45 - 00891062 _____ C:\Users\RW\Desktop\SecurityCheck.exe
2013-07-19 19:47 - 2013-07-19 19:47 - 00001358 _____ C:\AdwCleaner[S4].txt
2013-07-19 19:46 - 2013-07-19 19:46 - 00001283 _____ C:\AdwCleaner[R2].txt
2013-07-19 19:41 - 2013-07-19 19:41 - 00000348 _____ C:\Windows\wininit.ini
2013-07-19 18:07 - 2013-07-19 18:07 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-19 17:51 - 2013-07-19 17:51 - 00001181 _____ C:\Users\RW\Desktop\JRT.txt
2013-07-19 17:46 - 2013-07-19 17:46 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 17:45 - 2013-07-19 17:45 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\RW\Desktop\JRT.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00001115 _____ C:\AdwCleaner[S3].txt
2013-07-19 17:34 - 2013-07-19 17:34 - 00000309 _____ C:\AdwCleaner[S2].txt
2013-07-19 17:26 - 2013-07-19 19:47 - 00001308 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 17:26 - 2013-07-19 17:26 - 00008277 _____ C:\AdwCleaner[S1].txt
2013-07-19 17:26 - 2013-07-19 17:26 - 00008209 _____ C:\AdwCleaner[R1].txt
2013-07-19 17:24 - 2013-07-19 17:24 - 00662345 _____ C:\Users\RW\Desktop\adwcleaner.exe
2013-07-19 17:16 - 2013-07-19 17:17 - 00000229 _____ C:\Users\RW\Desktop\Search.txt
2013-07-19 16:35 - 2013-05-02 02:06 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-07-19 16:34 - 2013-07-19 17:52 - 00012713 _____ C:\Users\RW\Desktop\Addition.txt
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\FRST
2013-07-19 16:32 - 2013-07-19 16:32 - 01778207 _____ (Farbar) C:\Users\RW\Desktop\FRST64.exe
2013-07-19 16:29 - 2013-07-19 16:29 - 00003778 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-07-19 16:28 - 2013-07-22 18:38 - 00000394 _____ C:\Windows\Tasks\Super Lyrics Update.job
2013-07-19 16:28 - 2013-07-19 16:28 - 00003480 _____ C:\Windows\System32\Tasks\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00003360 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-07-19 16:28 - 2013-07-19 16:28 - 00003036 _____ C:\Windows\System32\Tasks\Super Lyrics Update
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Zip Opener Packages
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-19 16:27 - 2013-07-19 16:27 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Macromedia
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-19 16:26 - 2013-07-19 16:26 - 00793536 _____ C:\Users\RW\Desktop\ZipOpenerSetup.exe
2013-07-19 16:22 - 2013-07-19 16:22 - 00000000 ____D C:\Users\RW\AppData\Roaming\Adobe
2013-07-19 09:43 - 2010-01-09 09:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-07-19 09:43 - 2010-01-09 08:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
2013-07-19 09:42 - 2012-02-15 08:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-07-19 09:42 - 2012-02-15 07:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-07-19 09:42 - 2012-02-15 06:47 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-07-19 09:42 - 2012-02-15 06:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-07-19 09:42 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20130719-094223.backup
2013-07-19 09:37 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-07-19 09:37 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-07-19 09:37 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-07-19 09:37 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-07-19 09:37 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-07-19 09:37 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-07-19 09:37 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-07-19 09:30 - 2013-07-19 18:08 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 09:30 - 2013-07-19 17:19 - 00000000 ____D C:\Users\RW\AppData\Local\Google
2013-07-19 09:30 - 2013-07-19 09:30 - 00002766 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Roaming\Google
2013-07-19 09:28 - 2013-07-19 18:49 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-07-19 09:28 - 2013-07-19 18:11 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\ProgramData\Sophos
2013-07-19 07:15 - 2013-07-19 06:50 - 00000000 ____D C:\Program Files\Sony
2013-07-19 07:02 - 2013-07-19 07:02 - 00000355 _____ C:\Users\RW\Desktop\Computer.lnk
2013-07-19 07:01 - 2013-07-22 19:30 - 00004270 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C}
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Roaming\ATI
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\Sony_Corporation
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\ATI
2013-07-19 07:00 - 2013-07-19 07:00 - 00090992 _____ C:\Users\RW\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-19 07:00 - 2013-07-19 07:00 - 00031480 _____ C:\Windows\ie8_main.log
2013-07-19 07:00 - 2013-07-19 07:00 - 00001439 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00001405 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\SysWOW64\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\system32\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Roaming\Sony Corporation
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Local\VirtualStore
2013-07-19 06:59 - 2013-07-19 19:41 - 00000000 ____D C:\Users\RW
2013-07-19 06:59 - 2013-07-19 06:59 - 00000020 ___SH C:\Users\RW\ntuser.ini
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-19 06:59 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-07-19 06:59 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-07-19 06:51 - 2013-07-19 06:51 - 00004358 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244}
2013-07-19 06:49 - 2013-07-19 19:48 - 00390538 _____ C:\Windows\PFRO.log
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\Documentation
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\_FS_SWRINFO
2013-07-19 06:47 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive
2013-07-19 06:46 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-19 06:45 - 2013-07-19 06:45 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-07-19 06:45 - 2013-07-19 06:45 - 00028728 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\VAIO FW screensavers
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony Corporation
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 _____ C:\Windows\VAIOUpdt.INI
2013-07-19 06:45 - 2009-07-20 22:03 - 00000008 _____ C:\Windows\SysWOW64\FW_version.txt
2013-07-19 06:43 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-07-19 06:42 - 2009-07-01 11:49 - 00098304 _____ (Sony Corporation) C:\Windows\SysWOW64\VESWinlogon.dll
2013-07-19 06:40 - 2013-07-19 06:40 - 00001372 _____ C:\Windows\xpsp1hfm.log
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Uninstall
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Sonic
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files\Roxio
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files (x86)\Roxio
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2009-05-21 02:56 - 00072176 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxhpinst.exe
2013-07-19 06:39 - 2009-05-15 12:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2013-07-19 06:39 - 2009-05-15 12:00 - 00010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2013-07-19 06:39 - 2009-05-11 20:42 - 00133616 ____N (Sonic Solutions) C:\Windows\SysWOW64\pxafs.dll
2013-07-19 06:37 - 2013-07-19 06:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
2013-07-19 06:36 - 2013-07-19 06:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-19 06:34 - 2013-07-19 06:37 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-19 06:34 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-19 06:34 - 2013-07-19 06:34 - 00000000 __RHD C:\MSOCache
2013-07-19 06:33 - 2013-07-19 06:33 - 00000000 ____D C:\ProgramData\SiteAdvisor
2013-07-19 06:31 - 2013-07-19 09:24 - 00000000 ____D C:\ProgramData\McAfee
2013-07-19 06:30 - 2013-07-19 17:27 - 00000000 ____D C:\Program Files\Google
2013-07-19 06:30 - 2013-07-19 17:27 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-19 06:30 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-07-19 06:30 - 2009-08-03 22:15 - 00002835 _____ C:\Windows\SysWOW64\McOEMAppRules.dat
2013-07-19 06:30 - 2009-08-03 22:15 - 00001253 _____ C:\Windows\SysWOW64\Mdat_1.3.00.0907310.txt
2013-07-19 06:30 - 2009-05-26 14:32 - 00019968 _____ (ArcSoft, Inc.) C:\Windows\system32\Drivers\ArcSoftKsUFilter.sys
2013-07-19 06:30 - 2005-04-27 16:36 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2013-07-19 06:30 - 1995-07-31 13:44 - 00212480 _____ (Eastman Kodak) C:\Windows\SysWOW64\PCDLIB32.DLL
2013-07-19 06:28 - 2013-07-19 06:29 - 00000187 _____ C:\Installer_Setup.log
2013-07-19 06:28 - 2013-07-19 06:28 - 00000000 ____D C:\ProgramData\ATI
2013-07-19 06:27 - 2013-07-19 06:27 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-07-19 06:27 - 2013-07-19 06:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-07-19 06:26 - 2013-07-19 06:26 - 00000000 ____D C:\Program Files (x86)\InterVideo
2013-07-19 06:25 - 2013-07-19 06:43 - 00174874 _____ C:\Windows\DirectX.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00489182 _____ C:\vcredist_x86.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00000000 ____D C:\Windows\{AEC0FEE6-3A76-44E1-97A2-5DA325DFC41C}
2013-07-19 06:25 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-07-19 06:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-07-19 06:25 - 2007-01-08 15:30 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-07-19 06:25 - 2007-01-08 15:30 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-07-19 06:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-07-19 06:25 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-07-19 06:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-07-19 06:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00091928 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-07-19 06:25 - 2006-09-28 16:04 - 00068888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-07-19 06:25 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-07-19 06:25 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-07-19 06:25 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-07-19 06:25 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-07-19 06:25 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-07-19 06:25 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-07-19 06:25 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-07-19 06:25 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-07-19 06:25 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-07-19 06:25 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-07-19 06:25 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-07-19 06:25 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-07-19 06:25 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-07-19 06:25 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-07-19 06:25 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-07-19 06:25 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-07-19 06:25 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-07-19 06:25 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-07-19 06:25 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-07-19 06:25 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-07-19 06:25 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-07-19 06:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-07-19 06:25 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-07-19 06:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-07-19 06:24 - 2013-07-22 19:01 - 01829013 _____ C:\Windows\WindowsUpdate.log
2013-07-19 06:24 - 2013-07-19 06:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-19 06:22 - 2009-05-20 12:00 - 00055280 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys
2013-07-19 06:21 - 2013-07-19 06:25 - 00000000 ____D C:\ProgramData\Adobe
2013-07-19 06:21 - 2013-07-19 06:24 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-19 06:20 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony
2013-07-19 06:20 - 2013-07-19 06:20 - 00000000 ____D C:\Windows\Sonysys
==================== One Month Modified Files and Folders =======
2013-07-22 19:45 - 2013-07-22 19:45 - 00891062 _____ C:\Users\RW\Desktop\SecurityCheck.exe
2013-07-22 19:30 - 2013-07-19 07:01 - 00004270 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C}
2013-07-22 19:01 - 2013-07-19 06:24 - 01829013 _____ C:\Windows\WindowsUpdate.log
2013-07-22 18:45 - 2009-07-14 19:58 - 00643866 _____ C:\Windows\system32\perfh007.dat
2013-07-22 18:45 - 2009-07-14 19:58 - 00126394 _____ C:\Windows\system32\perfc007.dat
2013-07-22 18:45 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-22 18:45 - 2009-07-14 06:45 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-22 18:45 - 2009-07-14 06:45 - 00009888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-22 18:42 - 2009-07-14 06:51 - 00024436 _____ C:\Windows\setupact.log
2013-07-22 18:38 - 2013-07-19 16:28 - 00000394 _____ C:\Windows\Tasks\Super Lyrics Update.job
2013-07-22 18:38 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-19 19:48 - 2013-07-19 06:49 - 00390538 _____ C:\Windows\PFRO.log
2013-07-19 19:47 - 2013-07-19 19:47 - 00001358 _____ C:\AdwCleaner[S4].txt
2013-07-19 19:47 - 2013-07-19 17:26 - 00001308 _____ C:\Windows\DeleteOnReboot.bat
2013-07-19 19:46 - 2013-07-19 19:46 - 00001283 _____ C:\AdwCleaner[R2].txt
2013-07-19 19:41 - 2013-07-19 19:41 - 00000348 _____ C:\Windows\wininit.ini
2013-07-19 19:41 - 2013-07-19 06:59 - 00000000 ____D C:\Users\RW
2013-07-19 18:49 - 2013-07-19 09:28 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-07-19 18:11 - 2013-07-19 09:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-19 18:08 - 2013-07-19 09:30 - 00000000 ____D C:\Program Files\CCleaner
2013-07-19 18:07 - 2013-07-19 18:07 - 00000000 ____D C:\Program Files (x86)\Sophos
2013-07-19 17:52 - 2013-07-19 16:34 - 00012713 _____ C:\Users\RW\Desktop\Addition.txt
2013-07-19 17:51 - 2013-07-19 17:51 - 00001181 _____ C:\Users\RW\Desktop\JRT.txt
2013-07-19 17:46 - 2013-07-19 17:46 - 00000000 ____D C:\Windows\ERUNT
2013-07-19 17:45 - 2013-07-19 17:45 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\RW\Desktop\JRT.exe
2013-07-19 17:34 - 2013-07-19 17:34 - 00001115 _____ C:\AdwCleaner[S3].txt
2013-07-19 17:34 - 2013-07-19 17:34 - 00000309 _____ C:\AdwCleaner[S2].txt
2013-07-19 17:27 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files\Google
2013-07-19 17:27 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-19 17:26 - 2013-07-19 17:26 - 00008277 _____ C:\AdwCleaner[S1].txt
2013-07-19 17:26 - 2013-07-19 17:26 - 00008209 _____ C:\AdwCleaner[R1].txt
2013-07-19 17:24 - 2013-07-19 17:24 - 00662345 _____ C:\Users\RW\Desktop\adwcleaner.exe
2013-07-19 17:19 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Local\Google
2013-07-19 17:17 - 2013-07-19 17:16 - 00000229 _____ C:\Users\RW\Desktop\Search.txt
2013-07-19 16:33 - 2013-07-19 16:33 - 00000000 ____D C:\FRST
2013-07-19 16:32 - 2013-07-19 16:32 - 01778207 _____ (Farbar) C:\Users\RW\Desktop\FRST64.exe
2013-07-19 16:29 - 2013-07-19 16:29 - 00003778 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-07-19 16:28 - 2013-07-19 16:28 - 00003480 _____ C:\Windows\System32\Tasks\DealPly
2013-07-19 16:28 - 2013-07-19 16:28 - 00003360 _____ C:\Windows\System32\Tasks\DealPlyUpdate
2013-07-19 16:28 - 2013-07-19 16:28 - 00003036 _____ C:\Windows\System32\Tasks\Super Lyrics Update
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\searchplugins
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Windows\SysWOW64\Extensions
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Users\RW\AppData\Roaming\Zip Opener Packages
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-19 16:28 - 2013-07-19 16:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-19 16:27 - 2013-07-19 16:27 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Users\RW\AppData\Roaming\Macromedia
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-07-19 16:27 - 2013-07-19 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-19 16:26 - 2013-07-19 16:26 - 00793536 _____ C:\Users\RW\Desktop\ZipOpenerSetup.exe
2013-07-19 16:22 - 2013-07-19 16:22 - 00000000 ____D C:\Users\RW\AppData\Roaming\Adobe
2013-07-19 09:42 - 2009-07-14 04:34 - 00450371 ____R C:\Windows\system32\Drivers\etc\hosts.20130719-185023.backup
2013-07-19 09:35 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-07-19 09:30 - 2013-07-19 09:30 - 00002766 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-07-19 09:30 - 2013-07-19 09:30 - 00000000 ____D C:\Users\RW\AppData\Roaming\Google
2013-07-19 09:26 - 2013-07-19 09:26 - 00000000 ____D C:\ProgramData\Sophos
2013-07-19 09:26 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-07-19 09:24 - 2013-07-19 06:31 - 00000000 ____D C:\ProgramData\McAfee
2013-07-19 07:15 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-07-19 07:15 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-07-19 07:02 - 2013-07-19 07:02 - 00000355 _____ C:\Users\RW\Desktop\Computer.lnk
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Roaming\ATI
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\Sony_Corporation
2013-07-19 07:01 - 2013-07-19 07:01 - 00000000 ____D C:\Users\RW\AppData\Local\ATI
2013-07-19 07:00 - 2013-07-19 07:00 - 00090992 _____ C:\Users\RW\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-19 07:00 - 2013-07-19 07:00 - 00031480 _____ C:\Windows\ie8_main.log
2013-07-19 07:00 - 2013-07-19 07:00 - 00001439 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00001405 _____ C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\SysWOW64\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RH C:\Windows\system32\Drivers\104D_Sony_VGN-FW54M.mrk
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___RD C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Roaming\Sony Corporation
2013-07-19 07:00 - 2013-07-19 07:00 - 00000000 ____D C:\Users\RW\AppData\Local\VirtualStore
2013-07-19 06:59 - 2013-07-19 06:59 - 00000020 ___SH C:\Users\RW\ntuser.ini
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\RW\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Programme
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-19 06:59 - 2013-07-19 06:59 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-19 06:59 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-19 06:59 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-07-19 06:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-19 06:54 - 2009-08-19 04:17 - 00000000 ____D C:\Windows\Panther
2013-07-19 06:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-07-19 06:51 - 2013-07-19 06:51 - 00004358 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244}
2013-07-19 06:51 - 2009-07-14 06:46 - 00003043 _____ C:\Windows\DtcInstall.log
2013-07-19 06:50 - 2013-07-19 07:15 - 00000000 ____D C:\Program Files\Sony
2013-07-19 06:50 - 2009-08-18 20:12 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-07-19 06:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-07-19 06:49 - 2009-07-14 06:45 - 00377584 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\Documentation
2013-07-19 06:48 - 2013-07-19 06:48 - 00000000 ____D C:\_FS_SWRINFO
2013-07-19 06:48 - 2009-08-18 18:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-19 06:48 - 2009-08-18 18:56 - 00036014 _____ C:\Windows\DPINST.LOG
2013-07-19 06:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-07-19 06:47 - 2013-07-19 06:47 - 00000000 ____D C:\Program Files (x86)\Windows Live SkyDrive
2013-07-19 06:47 - 2013-07-19 06:46 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-19 06:46 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-07-19 06:45 - 2013-07-19 06:45 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-07-19 06:45 - 2013-07-19 06:45 - 00028728 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\VAIO FW screensavers
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 ____D C:\Program Files (x86)\Sony Corporation
2013-07-19 06:45 - 2013-07-19 06:45 - 00000000 _____ C:\Windows\VAIOUpdt.INI
2013-07-19 06:45 - 2013-07-19 06:30 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-07-19 06:45 - 2013-07-19 06:20 - 00000000 ____D C:\Program Files (x86)\Sony
2013-07-19 06:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-07-19 06:43 - 2013-07-19 06:25 - 00174874 _____ C:\Windows\DirectX.log
2013-07-19 06:42 - 2009-08-18 20:11 - 00000000 ____D C:\Program Files\Common Files\Sony Shared
2013-07-19 06:40 - 2013-07-19 06:40 - 00001372 _____ C:\Windows\xpsp1hfm.log
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Uninstall
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Sonic
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files\Roxio
2013-07-19 06:40 - 2013-07-19 06:40 - 00000000 ____D C:\Program Files (x86)\Roxio
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\ProgramData\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\MusicStation
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-07-19 06:39 - 2013-07-19 06:39 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-19 06:38 - 2013-07-19 06:36 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-07-19 06:37 - 2013-07-19 06:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
2013-07-19 06:37 - 2013-07-19 06:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-19 06:35 - 2013-07-19 06:35 - 00000000 ____D C:\Program Files\Microsoft Office
2013-07-19 06:35 - 2013-07-19 06:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-19 06:35 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-07-19 06:34 - 2013-07-19 06:34 - 00000000 __RHD C:\MSOCache
2013-07-19 06:33 - 2013-07-19 06:33 - 00000000 ____D C:\ProgramData\SiteAdvisor
2013-07-19 06:33 - 2009-07-14 04:34 - 00000435 _____ C:\Windows\win.ini
2013-07-19 06:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2013-07-19 06:29 - 2013-07-19 06:28 - 00000187 _____ C:\Installer_Setup.log
2013-07-19 06:28 - 2013-07-19 06:28 - 00000000 ____D C:\ProgramData\ATI
2013-07-19 06:27 - 2013-07-19 06:27 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-07-19 06:27 - 2013-07-19 06:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-07-19 06:26 - 2013-07-19 06:26 - 00000000 ____D C:\Program Files (x86)\InterVideo
2013-07-19 06:25 - 2013-07-19 06:25 - 00489182 _____ C:\vcredist_x86.log
2013-07-19 06:25 - 2013-07-19 06:25 - 00000000 ____D C:\Windows\{AEC0FEE6-3A76-44E1-97A2-5DA325DFC41C}
2013-07-19 06:25 - 2013-07-19 06:21 - 00000000 ____D C:\ProgramData\Adobe
2013-07-19 06:24 - 2013-07-19 06:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-19 06:24 - 2013-07-19 06:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-19 06:20 - 2013-07-19 06:20 - 00000000 ____D C:\Windows\Sonysys
2013-07-19 06:20 - 2009-08-19 04:19 - 00000012 _____ C:\Windows\csup.txt
2013-07-19 06:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-07-19 06:17 - 2009-08-18 18:28 - 00003540 _____ C:\Windows\TSSysprep.log
2013-07-19 06:16 - 2009-08-18 18:58 - 00000000 ____D C:\Program Files\Apoint
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2009-08-18 18:25
==================== End Of Log ============================
--- --- --- und die Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-07-2013
Ran by RW at 2013-07-22 19:49:58
Running from C:\Users\RW\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.12.36)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.12.36)
Adobe Photoshop Elements 7.0 (x32 Version: 7.0.1)
Adobe Premiere Elements 7.0 (x32 Version: 7.0.1)
Adobe Reader 9.1 - Deutsch (x32 Version: 9.1.0)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.193)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Full New (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Light (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center InstallProxy (x32 Version: 2009.0710.1127.18698)
Catalyst Control Center Localization All (x32 Version: 2009.0710.1127.18698)
CCC Help Chinese Standard (x32 Version: 2009.0720.2144.37243)
CCC Help Chinese Traditional (x32 Version: 2009.0720.2144.37243)
CCC Help Czech (x32 Version: 2009.0720.2144.37243)
CCC Help Danish (x32 Version: 2009.0720.2144.37243)
CCC Help Dutch (x32 Version: 2009.0720.2144.37243)
CCC Help English (x32 Version: 2009.0720.2144.37243)
CCC Help Finnish (x32 Version: 2009.0720.2144.37243)
CCC Help French (x32 Version: 2009.0720.2144.37243)
CCC Help German (x32 Version: 2009.0720.2144.37243)
CCC Help Greek (x32 Version: 2009.0720.2144.37243)
CCC Help Hungarian (x32 Version: 2009.0720.2144.37243)
CCC Help Italian (x32 Version: 2009.0720.2144.37243)
CCC Help Japanese (x32 Version: 2009.0720.2144.37243)
CCC Help Korean (x32 Version: 2009.0720.2144.37243)
CCC Help Norwegian (x32 Version: 2009.0720.2144.37243)
CCC Help Polish (x32 Version: 2009.0720.2144.37243)
CCC Help Portuguese (x32 Version: 2009.0720.2144.37243)
CCC Help Russian (x32 Version: 2009.0720.2144.37243)
CCC Help Spanish (x32 Version: 2009.0720.2144.37243)
CCC Help Swedish (x32 Version: 2009.0720.2144.37243)
CCC Help Thai (x32 Version: 2009.0720.2144.37243)
CCC Help Turkish (x32 Version: 2009.0720.2144.37243)
ccc-core-static (x32 Version: 2009.0710.1127.18698)
ccc-utility64 (Version: 2009.0710.1127.18698)
Choice Guard (x32 Version: 1.2.87.0)
Click to Disc (x32 Version: 1.2.70.06160)
Click to Disc Editor (x32 Version: 2.0.02)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.4518.1014)
Dolby Control Center (Version: 1.2.0702)
eaner (Version: 3.28)
Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.4.0.06120)
Intel® Matrix Storage Manager
Java(TM) 6 Update 14 (64-bit) (Version: 6.0.140)
Java(TM) 6 Update 14 (x32 Version: 6.0.140)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 2 (SP2) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Works (x32 Version: 9.7.0621)
MSVCRT (x32 Version: 14.0.1468.721)
Music Transfer (x32 Version: 1.3.01.13160)
MusicStation (x32 Version: 1.2.2.180)
Norton Online Backup (x32 Version: 1.2.20.0)
Open It! (x32 Version: 1.1.1)
Plus-HD-2.3 (x32 Version: 1.27.153.8)
Primo (x32 Version: 1.00.0000)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5897)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5886)
Regi (Version: 1.00.0000)
Roxio Central Audio (x32 Version: 3.8.0)
Roxio Central Copy (x32 Version: 3.8.0)
Roxio Central Core (x32 Version: 3.8.0)
Roxio Central Data (x32 Version: 3.8.0)
Roxio Central Tools (x32 Version: 3.8.0)
Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)
Roxio Easy Media Creator Home (x32 Version: 10.3.121)
Runtime (x32 Version: 1.00.0000)
Setting Utility Series (x32 Version: 5.0.0.07300)
Skype™ 4.0 (x32 Version: 4.0.227)
Sony Home Network Library (x32 Version: 2.0.0.07280)
Sony Picture Utility (x32 Version: 4.2.12.16210)
Sophos AutoUpdate (x32 Version: 2.5.4)
Spybot - Search & Destroy (x32 Version: 1.6.2)
Super Lyrics (x32)
Unterstützung für VAIO-Präsentation (x32 Version: 2.0.0.05270)
Update for Zip Opener (HKCU)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.5.0.06261)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.5.0.06260)
VAIO Content Metadata Manager Settings (x32 Version: 3.5.0.06260)
VAIO Content Metadata XML Interface Library (x32 Version: 3.5.0.06180)
VAIO Content Monitoring Settings (x32 Version: 2.4.0.06120)
VAIO Control Center (x32 Version: 4.0.0.06120)
VAIO Data Restore Tool (x32 Version: 1.1.01.06290)
VAIO DVD Menu Data Basic (x32 Version: 1.0.00.08130)
VAIO Energie Verwaltung (x32 Version: 4.0.0.07160)
VAIO Entertainment Platform (x32 Version: 3.5.0.07230)
VAIO Event Service (x32 Version: 5.0.0.07010)
VAIO FW screensaver (x32 Version: 1.0.0.0)
VAIO Gate (x32 Version: 1.0.0.08050)
VAIO Marketing Tools (x32)
VAIO Media plus (x32 Version: 2.0.0.07280)
VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)
VAIO Movie Story (x32 Version: 1.5.00.06191)
VAIO Movie Story Template Data (x32 Version: 1.5.00.06010)
VAIO Original Function Settings (x32 Version: 2.0.0.07010)
VAIO Original Funktion Einstellungen (x32 Version: 2.0.0.07010)
VAIO Premium Partners 1.00 (x32)
VAIO Smart Network (x32 Version: 3.0.0.08120)
VAIO Update 4 (x32 Version: 4.2.0.07300)
VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)
VAIO-Support für Übertragungen (x32 Version: 1.0.0.07290)
VD64Inst (Version: 1.00.0000)
WIDCOMM Bluetooth Software (Version: 6.2.0.9600)
Windows Live Anmelde-Assistent (x32 Version: 5.000.817.1)
Windows Live Call (x32 Version: 14.0.8050.1202)
Windows Live Communications Platform (x32 Version: 14.0.8050.1202)
Windows Live Essentials (x32 Version: 14.0.8050.1202)
Windows Live Messenger (x32 Version: 14.0.8050.1202)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinDVD BD for VAIO (x32 Version: 8.0.20.79)
Zip Opener Packages (HKCU)
Zip Opener Packages 87 (HKCU)
==================== Restore Points =========================
19-07-2013 07:26:04 Installed Sophos Anti-Virus
19-07-2013 07:26:39 Installed Sophos AutoUpdate
19-07-2013 07:36:49 Windows Update
19-07-2013 07:43:01 Windows Update
19-07-2013 15:44:15 Removed Sophos AutoUpdate
19-07-2013 16:07:04 Installed Sophos Anti-Virus
19-07-2013 16:07:27 Installed Sophos AutoUpdate
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-07-19 18:50 - 00450371 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {06B9F129-8164-4DCB-B18F-2BEE50873908} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {18871FF2-164F-4AD7-9ED6-0D22B336E985} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-08-05] (Sony Corporation)
Task: {1B3C4044-97BC-4F86-BF14-2BF30D500B07} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-25] (Piriform Ltd)
Task: {4F819418-A0D5-4B34-B707-CF05F233DBAE} - System32\Tasks\Super Lyrics Update => C:\Program Files (x86)\Super_Lyrics\SuperLupdater.exe No File
Task: {727D0B22-4269-42A9-A3BC-102DADBC633B} - System32\Tasks\SONY\VAIO Recovery Center\VAIO Reminder => C:\Program Files (x86)\Sony\VAIO Reminder\VAIOReminder.exe [2009-07-27] (Sony Corporation)
Task: {88991D28-B7F2-44E2-AD04-CF9B1D19A728} - System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244} => C:\Windows\system32\msfeedssync.exe [2009-07-14] (Microsoft Corporation)
Task: {A300329A-9685-43FF-86A0-AC8BBAD709F8} - System32\Tasks\DealPly => C:\Users\RW\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File
Task: {AB222130-C0E9-4BFD-8464-3331F95BE047} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {BA3FBE3A-2750-482F-BD0A-D26689C668E6} - System32\Tasks\SONY\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe [2009-07-30] (Sony Corporation)
Task: {CDC96CD0-0F95-4FA0-B97B-A7C73D081E99} - System32\Tasks\User_Feed_Synchronization-{F2328C33-FB83-4F51-A886-B0D5FB051D6C} => C:\Windows\system32\msfeedssync.exe [2009-07-14] (Microsoft Corporation)
Task: {CF4AF30E-72B4-43C7-B3E8-99B5F79BBA7A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {FE49DD07-4364-4BA1-9840-540FA8BF2CFE} - System32\Tasks\DealPlyUpdate => C:\Program No File
Task: C:\Windows\Tasks\Super Lyrics Update.job => C:\Program Files (x86)\Super_Lyrics\SuperLupdater.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/22/2013 07:40:31 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.
Error: (07/22/2013 06:44:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.
Error: (07/22/2013 06:44:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.
Error: (07/22/2013 06:38:50 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 07:48:53 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (07/19/2013 05:56:12 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
System errors:
=============
Error: (07/22/2013 06:38:20 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (07/22/2013 06:38:08 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (07/22/2013 06:38:08 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (07/19/2013 07:48:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (07/19/2013 07:48:15 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (07/19/2013 07:48:15 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (07/19/2013 06:09:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Sophos AutoUpdate Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (07/19/2013 06:07:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Sophos AutoUpdate Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (07/19/2013 05:55:48 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (07/19/2013 05:55:35 PM) (Source: atikmdag) (User: )
Description: Display is not active
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 38%
Total physical RAM: 4063.02 MB
Available physical RAM: 2510.93 MB
Total Pagefile: 8124.2 MB
Available Pagefile: 6315.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:229.96 GB) (Free:202.13 GB) NTFS (Disk=0 Partition=3)
Drive d: (Daten) (Fixed) (Total:224.61 GB) (Free:190.84 GB) NTFS (Disk=0 Partition=4)
Drive h: (CORSAIR) (Removable) (Total:3.76 GB) (Free:3.75 GB) FAT32 (Disk=3 Partition=1)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 353D0CB4)
Partition 1: (Not Active) - (Size=11 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=230 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=225 GB) - (Type=OF Extended)
========================================================
Disk: 3 (Size: 4 GB) (Disk ID: 04DD5721)
Partition 1: (Active) - (Size=4 GB) - (Type=0B)
==================== End Of Log ============================
|
| | #8 |
| /// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | Computer gesperrt, Bundespolizei Java, Adobe Reader und Flash updaten. Windows updaten. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Fertig ![]() Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
| | #9 |
| | Computer gesperrt, Bundespolizei Hallo, das sieht wieder gut aus auf meinem Rechner, besten Dank für deine Hilfe! Bei der Sicherheitssoftware ist auch Neues für mich dabei, da werde ich mir noch einiges zu Gemüte führen. |
| | #10 |
| /// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | Computer gesperrt, Bundespolizei Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
![]() |
| Themen zu Computer gesperrt, Bundespolizei |
| andere, bundespolizei, bundespolizei trojaner windows 7, compu, computer, computer gesperrt, frieden, gesperrt, hallo zusammen, installiere, nummer, problem, recovery, schön, software, sperre, sperren, tool, vaio, windows, windows 7, wirklich, würde, zugriff, zurückgesetzt, zusammen |