![]() |
| |||||||
Log-Analyse und Auswertung: laptop sehr langsam, definitiver befall von plagegeisternWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
| | #1 | |
| | laptop sehr langsam, definitiver befall von plagegeistern Guten Abend, mein Laptop ist befallen mit vielen Plagegeistern. Deswegen bitte ich hier um Hilfe. Laut einer Anleitung aus dem Thread "Laptop wird immer langsamer" habe ich jetzt einen Scan mit FRST durchgeführt. Hier der Log: Additional.txt Zitat:
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:28-06-2014 02
Ran by DESIDERABILIS (administrator) on DESIDERABILIS83 on 16-06-2014 23:43:15
Running from C:\Users\DESIDERABILIS\Downloads
Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Handle) C:\Users\DESIDERABILIS\AppData\Roaming\Win System\handle.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Oceanis) C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-01-16] (AVAST Software)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7703072 2009-09-08] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1557800 2009-10-13] (Synaptics Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-06] (Microsoft Corporation)
HKU\S-1-5-21-2398524569-3030390016-3527150408-1000\...\Winlogon: [Shell] C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe [115888 2009-12-10] (Oceanis) <==== ATTENTION
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
BootExecute: autocheck autochk * autocheck iolorgdf32 C:\Users\DESIDERABILIS\AppData\Roaming\iolo\
==================== Internet (Whitelisted) ====================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1402954425&from=tugs&uid=TOSHIBAXMK2565GSX_6028C0FPTXX6028C0FPT&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {05022ED8-5124-48F2-85CA-357D1195F5C6} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=56eaeaf3-91b5-453c-90dc-cef74b84b753&apn_sauid=0D34198F-312C-4816-A2CB-50680207FA46
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.iminent.com/?appId=03FBFF9F-5F8B-488E-A978-2FF5E7DD4413&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - {2B271B78-8101-48CD-86EC-D7B768B7BDB5} URL = Shopping.com Deutschland - der große Produkt- und Preisvergleich
SearchScopes: HKCU - {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=foxysecurity
SearchScopes: HKCU - {9DCF2AF7-6CD0-4EC0-BA4B-279DC8D92715} URL = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search
SearchScopes: HKCU - {CA312EE5-C420-4FF0-98BA-9C748B74695E} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows 7 Starter Helper - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll (Oceanis)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\DESIDERABILIS\AppData\Roaming\Mozilla\Firefox\Profiles\c6vll6tw.default-1402954302832
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\Sony\MSS\3.8.130\npMcAfeeMss.dll No File
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\DESIDERABILIS\AppData\Roaming\Mozilla\Firefox\Profiles\c6vll6tw.default-1402954302832\user.js
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Foxy Secure - C:\Users\DESIDERABILIS\AppData\Roaming\Mozilla\Firefox\Profiles\c6vll6tw.default-1402954302832\Extensions\admin@foxysecure.com [2014-06-16]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16]
========================== Services (Whitelisted) =================
ATTENTION: => Could not perform signature verification. Cryptographic Service is not running.
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-16] (AVAST Software)
S2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [350120 2013-05-29] (Intel Corporation)
R2 HandleService; C:\Users\DESIDERABILIS\AppData\Roaming\Win System\handle.exe [637952 2014-06-10] (Handle)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
R3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [350120 2013-05-29] (Intel Corporation)
R3 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [513392 2009-11-30] (Sony Corporation)
R3 VCService; C:\Program Files\Sony\VAIO Care\VCService.exe [60504 2014-02-20] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [708608 2010-08-11] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1228336 2014-02-27] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-01-16] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-01-16] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-01-16] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-01-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-01-16] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-01-16] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-01-16] ()
R2 rimspci; C:\Windows\system32\drivers\rimssne86.sys [73216 2009-10-29] (REDC)
R2 risdsnpe; C:\Windows\system32\drivers\risdsne86.sys [46592 2009-10-29] (REDC)
S4 MpKslf3e71aee; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CF850DEE-C819-42D6-A3AD-2150FEF0034E}\MpKslf3e71aee.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-16 23:57 - 2014-06-16 23:57 - 00002008 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oceanis Change Background W7.lnk
2014-06-16 23:57 - 2014-06-16 23:57 - 00000000 ____D () C:\Program Files\Oceanis
2014-06-16 23:54 - 2014-06-16 23:54 - 00000000 __SHD () C:\Users\DESIDERABILIS\AppData\Local\EmieUserList
2014-06-16 23:54 - 2014-06-16 23:54 - 00000000 __SHD () C:\Users\DESIDERABILIS\AppData\Local\EmieSiteList
2014-06-16 23:54 - 2014-06-16 23:54 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\Win System
2014-06-16 23:54 - 2014-06-16 23:31 - 00000000 ____D () C:\Program Files\Common Files\Umbrella
2014-06-16 23:54 - 2014-06-16 23:31 - 00000000 ____D () C:\Program Files\Common Files\IMGUpdater
2014-06-16 23:53 - 2014-06-16 23:54 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\Security Systems
2014-06-16 23:43 - 2014-06-16 23:44 - 00010467 _____ () C:\Users\DESIDERABILIS\Downloads\FRST.txt
2014-06-16 23:42 - 2014-06-16 23:43 - 00000000 ____D () C:\FRST
2014-06-16 23:42 - 2014-06-16 23:42 - 00078760 _____ () C:\Users\DESIDERABILIS\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-16 23:42 - 2014-06-16 23:40 - 00000030 _____ () C:\AVScanner.ini
2014-06-16 23:41 - 2014-06-16 23:41 - 02083328 _____ (Farbar) C:\Users\DESIDERABILIS\Downloads\FRST64.exe
2014-06-16 23:40 - 2014-06-16 23:40 - 01073664 _____ (Farbar) C:\Users\DESIDERABILIS\Downloads\FRST.exe
2014-06-16 23:40 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-16 23:40 - 2014-06-16 23:31 - 00000000 ____D () C:\Program Files\Bench
2014-06-16 23:38 - 2014-06-16 23:38 - 00013566 _____ () C:\Users\DESIDERABILIS\Desktop\msconfig - Verknüpfung.lnk
2014-06-16 23:38 - 2014-06-16 23:38 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Local\com
2014-06-16 23:38 - 2014-06-16 23:36 - 00202204 _____ () C:\Windows\WindowsUpdate.log
2014-06-16 23:36 - 2014-06-16 23:37 - 00004192 _____ () C:\Users\DESIDERABILIS\Documents\cc_20140616_233642.reg
2014-06-16 23:36 - 2014-06-16 23:36 - 00001063 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-06-16 23:36 - 2014-06-16 23:36 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\SupTab
2014-06-16 23:36 - 2014-06-16 23:36 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-06-16 23:36 - 2014-06-16 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewPlayer
2014-06-16 23:36 - 2014-06-16 23:31 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\VOPackage
2014-06-16 23:35 - 2014-06-16 23:35 - 00013341 _____ () C:\Users\DESIDERABILIS\Desktop\Festplatte defragmentieren - Verknüpfung.lnk
2014-06-16 23:32 - 2014-06-16 23:32 - 00000000 _____ () C:\END
2014-06-16 23:31 - 2014-06-16 23:31 - 00332264 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-16 23:31 - 2014-06-16 23:31 - 00046396 _____ () C:\Windows\PFRO.log
2014-06-16 23:31 - 2014-06-16 23:31 - 00000056 _____ () C:\Windows\setupact.log
2014-06-16 23:31 - 2014-06-16 23:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-16 23:10 - 2014-06-16 23:10 - 00002108 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care.lnk
2014-06-16 23:10 - 2014-06-16 23:10 - 00000000 __RHD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
2014-06-16 22:55 - 2014-06-16 22:55 - 00001145 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk
2014-06-16 22:50 - 2014-06-16 22:50 - 00000000 ___SD () C:\Windows\system32\CompatTel
==================== One Month Modified Files and Folders =======
2014-06-17 00:10 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-17 00:06 - 2009-07-14 04:04 - 00000537 _____ () C:\Windows\win.ini
2014-06-16 23:57 - 2014-06-16 23:57 - 00002008 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oceanis Change Background W7.lnk
2014-06-16 23:57 - 2014-06-16 23:57 - 00000000 ____D () C:\Program Files\Oceanis
2014-06-16 23:54 - 2014-06-16 23:54 - 00000000 __SHD () C:\Users\DESIDERABILIS\AppData\Local\EmieUserList
2014-06-16 23:54 - 2014-06-16 23:54 - 00000000 __SHD () C:\Users\DESIDERABILIS\AppData\Local\EmieSiteList
2014-06-16 23:54 - 2014-06-16 23:54 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\Win System
2014-06-16 23:54 - 2014-06-16 23:53 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\Security Systems
2014-06-16 23:52 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-06-16 23:49 - 2013-11-17 20:39 - 00000000 ____D () C:\Windows\pss
2014-06-16 23:48 - 2009-11-27 00:11 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-16 23:47 - 2013-05-27 09:58 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-16 23:44 - 2014-06-16 23:43 - 00010467 _____ () C:\Users\DESIDERABILIS\Downloads\FRST.txt
2014-06-16 23:43 - 2014-06-16 23:42 - 00000000 ____D () C:\FRST
2014-06-16 23:42 - 2014-06-16 23:42 - 00078760 _____ () C:\Users\DESIDERABILIS\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-16 23:41 - 2014-06-16 23:41 - 02083328 _____ (Farbar) C:\Users\DESIDERABILIS\Downloads\FRST64.exe
2014-06-16 23:41 - 2014-01-16 18:49 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-16 23:40 - 2014-06-16 23:42 - 00000030 _____ () C:\AVScanner.ini
2014-06-16 23:40 - 2014-06-16 23:40 - 01073664 _____ (Farbar) C:\Users\DESIDERABILIS\Downloads\FRST.exe
2014-06-16 23:40 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-16 23:40 - 2013-05-27 09:58 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-06-16 23:40 - 2013-05-27 09:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-06-16 23:39 - 2009-07-14 06:34 - 00010464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-16 23:39 - 2009-07-14 06:34 - 00010464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-16 23:38 - 2014-06-16 23:38 - 00013566 _____ () C:\Users\DESIDERABILIS\Desktop\msconfig - Verknüpfung.lnk
2014-06-16 23:38 - 2014-06-16 23:38 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Local\com
2014-06-16 23:38 - 2013-07-31 22:15 - 00000000 ____D () C:\Users\DESIDERABILIS\Desktop\Untermietvertrag
2014-06-16 23:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-06-16 23:37 - 2014-06-16 23:36 - 00004192 _____ () C:\Users\DESIDERABILIS\Documents\cc_20140616_233642.reg
2014-06-16 23:36 - 2014-06-16 23:38 - 00202204 _____ () C:\Windows\WindowsUpdate.log
2014-06-16 23:36 - 2014-06-16 23:36 - 00001063 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-06-16 23:36 - 2014-06-16 23:36 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\SupTab
2014-06-16 23:36 - 2014-06-16 23:36 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-06-16 23:36 - 2014-06-16 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewPlayer
2014-06-16 23:36 - 2013-07-31 00:44 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-16 23:35 - 2014-06-16 23:35 - 00013341 _____ () C:\Users\DESIDERABILIS\Desktop\Festplatte defragmentieren - Verknüpfung.lnk
2014-06-16 23:34 - 2013-05-26 18:20 - 00001335 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-16 23:34 - 2013-05-26 18:17 - 00001627 _____ () C:\Users\DESIDERABILIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-16 23:32 - 2014-06-16 23:32 - 00000000 _____ () C:\END
2014-06-16 23:32 - 2013-05-26 17:31 - 00000000 ____D () C:\Update
2014-06-16 23:31 - 2014-06-16 23:54 - 00000000 ____D () C:\Program Files\Common Files\Umbrella
2014-06-16 23:31 - 2014-06-16 23:54 - 00000000 ____D () C:\Program Files\Common Files\IMGUpdater
2014-06-16 23:31 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files\Bench
2014-06-16 23:31 - 2014-06-16 23:36 - 00000000 ____D () C:\Users\DESIDERABILIS\AppData\Roaming\VOPackage
2014-06-16 23:31 - 2014-06-16 23:31 - 00332264 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-16 23:31 - 2014-06-16 23:31 - 00046396 _____ () C:\Windows\PFRO.log
2014-06-16 23:31 - 2014-06-16 23:31 - 00000056 _____ () C:\Windows\setupact.log
2014-06-16 23:31 - 2014-06-16 23:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-16 23:31 - 2013-05-26 18:20 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-16 23:31 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-16 23:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-06-16 23:10 - 2014-06-16 23:10 - 00002108 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care.lnk
2014-06-16 23:10 - 2014-06-16 23:10 - 00000000 __RHD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
2014-06-16 23:08 - 2014-01-16 18:29 - 00000000 ____D () C:\ProgramData\Sony
2014-06-16 22:56 - 2013-03-22 21:55 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-06-16 22:55 - 2014-06-16 22:55 - 00001145 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk
2014-06-16 22:54 - 2013-03-22 21:49 - 00000000 ____D () C:\Program Files\Sony
2014-06-16 22:54 - 2009-11-27 00:55 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-16 22:50 - 2014-06-16 22:50 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-08 10:48 - 2014-01-16 18:44 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-01-16 18:44 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-01 18:18 - 2013-07-31 22:00 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-30 11:18 - 2014-01-16 18:50 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:02 - 2014-01-16 18:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 11:02 - 2014-01-16 18:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 10:44 - 2014-01-16 18:50 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 10:43 - 2014-01-16 18:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 10:42 - 2014-01-16 18:50 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 10:38 - 2014-01-16 18:50 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 10:34 - 2014-01-16 18:50 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 10:33 - 2014-01-16 18:50 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 10:30 - 2014-01-16 18:50 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 10:28 - 2014-01-16 18:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 10:28 - 2014-01-16 18:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 10:27 - 2014-01-16 18:50 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 10:21 - 2014-01-16 18:50 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 10:16 - 2014-01-16 18:50 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:10 - 2014-01-16 18:50 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-01-16 18:50 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:04 - 2014-01-16 18:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:02 - 2014-01-16 18:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 09:57 - 2014-01-16 18:50 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 09:56 - 2014-01-16 18:50 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 09:54 - 2014-01-16 18:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 09:50 - 2014-01-16 18:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 09:49 - 2014-01-16 18:50 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 09:40 - 2014-01-16 18:50 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:21 - 2014-01-16 18:50 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:15 - 2014-01-16 18:50 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:13 - 2014-01-16 18:50 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
Some content of TEMP:
====================
C:\Users\DESIDERABILIS\AppData\Local\Temp\BackupSetup.exe
C:\Users\DESIDERABILIS\AppData\Local\Temp\FoxySecure_IE_FF_12-02-2014_Version_5_Setup.exe
C:\Users\DESIDERABILIS\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-06-17 00:02
==================== End Of Log ============================
--- --- --- |