|
Plagegeister aller Art und deren Bekämpfung: Auf seltsamen Link geklicktWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.06.2013, 22:27 | #16 |
/// the machine /// TB-Ausbilder | Auf seltsamen Link geklickt Hehe
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.06.2013, 05:04 | #17 |
| Auf seltsamen Link geklickt Hier ESET:
__________________Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=0cfae7dbdd7796498c431542a3269dd0 # engine=13985 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-06-03 10:11:59 # local_time=2013-06-04 12:11:59 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1033 # osver=6.2.9200 NT # compatibility_mode=1799 16775165 100 96 7072 235720809 1719 0 # compatibility_mode=5893 16776574 100 94 5073521 29803630 0 0 # scanned=216708 # found=0 # cleaned=0 # scan_time=4309 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=0cfae7dbdd7796498c431542a3269dd0 # engine=13985 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-06-03 11:37:29 # local_time=2013-06-04 01:37:29 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1033 # osver=6.2.9200 NT # compatibility_mode=1799 16775165 100 96 12202 235725939 0 0 # compatibility_mode=5893 16776574 100 94 5078651 29808760 0 0 # scanned=232705 # found=0 # cleaned=0 # scan_time=4687 |
04.06.2013, 06:33 | #18 |
/// the machine /// TB-Ausbilder | Auf seltsamen Link geklickt Frisches FRST Log bitte. Noch Probleme?
__________________
__________________ |
04.06.2013, 13:10 | #19 |
| Auf seltsamen Link geklickt Sobald ich SecurityCheck starten will, steht da das mein Betriebssystem nicht unterstützt wird (habe windows 8) Das neue FRST kommt gleich Hier der neue FRST: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-06-2013 02 Ran by Sarah (administrator) on 04-06-2013 14:16:08 Running from C:\Users\Sarah\Desktop Windows 8 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe (Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe () C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\WINDOWS\splwow64.exe () C:\Program Files (x86)\Orange Mobiles Internet\UIMain.exe () C:\Program Files (x86)\Orange Mobiles Internet\CMUpdater.exe () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\Sarah\Desktop\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated) HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-27] (Synaptics) HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12921488 2012-09-14] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 [1214608 2012-09-14] (Realtek Semiconductor) HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo) HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-10-20] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-10-20] (Lenovo(beijing) Limited) HKCU\...\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-16] () HKCU\...\Run: [GoogleChromeAutoLaunch_3AA6F76B1F039D21D0A8ED450CE79138] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window [825808 2013-05-23] (Google Inc.) MountPoints2: {3cc730bf-4c58-11e2-be76-20689d7b2506} - "F:\AutoRun.exe" HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 [277504 2012-08-16] (Intel Corporation) HKLM-x32\...\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-05-02] (Vimicro) HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [UIExec] "C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe" [153424 2012-02-11] () HKLM-x32\...\Run: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] () HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-08] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [250504 2013-02-10] (NVIDIA Corporation) Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com HKCU SearchScopes: DefaultScope {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = SearchScopes: HKCU - {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 213.94.78.27 213.94.78.26 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.at/" CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File CHR Extension: (Google Docs) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Nuvi Collection) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbjcghmcibkemiabpnofapahcpjjpefe\5_0 CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0 CHR Extension: (Gmail) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-04-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-04-02] (Avira Operations GmbH & Co. KG) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252088 2012-08-25] (Broadcom Corporation.) R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-06] (Broadcom Corporation.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] () R2 UI Assistant Service; C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe [270672 2012-02-11] () S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation) R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [165688 2012-08-25] (Broadcom Corporation.) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated) S3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-09] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [975104 2012-08-24] (Vimicro Corporation) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) R3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows (R) Win 7 DDK provider) R3 zte_cdc_acm; C:\Windows\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-05-23] (ZTE) R3 zte_cdc_ecm; C:\Windows\system32\DRIVERS\zte_cdc_ecm.sys [36864 2011-05-23] (ZTE) S3 zte_cpo; C:\Windows\system32\DRIVERS\zte_cpo.sys [14336 2011-05-23] (ZTE) R3 zte_ecm_enum; C:\Windows\System32\drivers\zte_ecm_enum.sys [56320 2011-05-23] (ZTE) R3 zte_ecm_enum_filter; C:\Windows\System32\drivers\zte_ecm_enum_filter.sys [56320 2011-05-23] (ZTE) R2 avgntflt; system32\DRIVERS\avgntflt.sys [x] R1 avipbb; \SystemRoot\system32\DRIVERS\avipbb.sys [x] R1 avkmgr; \SystemRoot\system32\DRIVERS\avkmgr.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-06-04 14:15 - 2013-06-04 14:15 - 01916714 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64 (1).exe 2013-06-04 14:14 - 2013-06-04 14:14 - 01916714 ____A (Farbar) C:\Users\Sarah\Downloads\FRST64.exe 2013-06-04 06:07 - 2013-06-04 06:07 - 00890839 ____A C:\Users\Sarah\Desktop\SecurityCheck.exe 2013-06-04 00:22 - 2013-06-04 12:40 - 00026064 ____A C:\Users\Sarah\Documents\Parfüm - Deutsch.odt 2013-06-04 00:17 - 2013-06-04 00:17 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu (1).exe 2013-06-03 22:52 - 2013-06-03 22:53 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu.exe 2013-06-03 22:41 - 2013-06-03 22:43 - 01916754 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe 2013-06-03 22:38 - 2013-06-03 22:38 - 00003064 ____A C:\Users\Sarah\Desktop\FSS.txt 2013-06-03 22:37 - 2013-06-03 22:37 - 00355651 ____A (Farbar) C:\Users\Sarah\Downloads\FSS (1).exe 2013-06-03 22:36 - 2013-06-03 22:36 - 00355651 ____A (Farbar) C:\Users\Sarah\Desktop\FSS.exe 2013-06-03 22:35 - 2013-06-03 22:35 - 00021951 ____A C:\Users\Sarah\Desktop\Result.txt 2013-06-03 22:33 - 2013-06-03 22:33 - 00760723 ____A (Farbar) C:\Users\Sarah\Desktop\MiniToolBox.exe 2013-06-03 22:26 - 2013-06-03 22:26 - 00000759 ____A C:\Users\Sarah\Desktop\JRT.txt 2013-06-03 22:22 - 2013-06-03 22:22 - 00000000 ____D C:\Windows\ERUNT 2013-06-03 22:21 - 2013-06-03 22:24 - 00000000 ____D C:\JRT 2013-06-03 22:21 - 2013-06-03 22:21 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Sarah\Desktop\JRT.exe 2013-06-03 22:12 - 2013-06-03 22:13 - 00016259 ____A C:\AdwCleaner[S1].txt 2013-06-03 22:10 - 2013-06-03 22:10 - 00632031 ____A C:\Users\Sarah\Desktop\adwcleaner.exe 2013-06-03 22:00 - 2013-06-03 22:00 - 00015388 ____A C:\Users\Sarah\Desktop\Addition.txt 2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST 2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe 2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner 2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel 2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip 2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs 2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2013-05-22 22:33 - 2013-05-23 19:20 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt 2013-05-22 21:06 - 2013-05-22 21:09 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt 2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt 2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg 2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2 2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun 2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java 2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe 2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe 2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg 2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe 2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk 2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar 2013-05-21 16:17 - 2013-05-21 16:18 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe 2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-20 17:30 - 2013-04-10 01:17 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-05-20 17:29 - 2013-04-10 01:17 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-05-20 17:29 - 2013-04-10 01:17 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-05-20 17:29 - 2013-04-10 01:17 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll 2013-05-20 17:29 - 2013-04-10 01:17 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-05-20 17:29 - 2013-04-10 01:17 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-05-20 17:29 - 2013-04-10 01:16 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-05-20 17:29 - 2013-04-10 01:16 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-05-20 17:29 - 2013-04-10 01:16 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-05-20 17:29 - 2013-04-10 01:16 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-05-20 17:29 - 2013-04-10 00:30 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-05-20 17:29 - 2013-04-10 00:30 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-05-20 17:29 - 2013-04-10 00:29 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-05-20 17:29 - 2013-04-10 00:29 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-05-20 17:29 - 2013-04-10 00:29 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-05-20 17:29 - 2013-04-10 00:29 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-05-20 17:29 - 2013-04-10 00:29 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-05-20 17:29 - 2013-04-10 00:29 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt 2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp 2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo 2013-05-19 14:42 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink 2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo 2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo 2013-05-19 14:22 - 2013-04-16 04:34 - 01455368 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys 2013-05-18 16:44 - 2013-03-06 08:31 - 19758592 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll 2013-05-18 16:44 - 2013-03-06 07:03 - 17561600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-05-18 16:43 - 2013-03-06 09:10 - 00112872 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe 2013-05-18 16:43 - 2013-03-06 08:31 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll 2013-05-18 16:43 - 2013-03-06 08:29 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll 2013-05-18 16:43 - 2013-03-06 07:03 - 00199168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-05-18 16:09 - 2013-03-15 02:17 - 00861184 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys 2013-05-18 13:08 - 2013-03-22 05:49 - 02382336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2013-05-18 13:08 - 2013-03-22 00:47 - 02851840 ____A (Microsoft Corporation) C:\Windows\System32\esent.dll 2013-05-18 08:58 - 2013-04-09 06:51 - 14267904 ____A (Microsoft Corporation) C:\Windows\System32\wmp.dll 2013-05-18 08:58 - 2013-04-09 06:51 - 13648384 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll 2013-05-18 08:58 - 2013-04-09 06:51 - 03552768 ____A (Microsoft Corporation) C:\Windows\System32\tquery.dll 2013-05-18 08:58 - 2013-04-09 06:50 - 02107904 ____A (Microsoft Corporation) C:\Windows\System32\mssrch.dll 2013-05-18 08:58 - 2013-04-08 23:52 - 11878912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-05-18 08:58 - 2013-04-08 23:51 - 10789888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2013-05-18 08:58 - 2013-04-08 23:51 - 02767360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2013-05-18 08:58 - 2013-04-08 23:51 - 01593344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2013-05-18 08:57 - 2013-04-09 07:33 - 00489576 ____A (Microsoft Corporation) C:\Windows\System32\AudioEng.dll 2013-05-18 08:57 - 2013-04-09 07:33 - 00446792 ____A (Microsoft Corporation) C:\Windows\System32\AudioSes.dll 2013-05-18 08:57 - 2013-04-09 07:33 - 00253544 ____A (Microsoft Corporation) C:\Windows\System32\audiodg.exe 2013-05-18 08:57 - 2013-04-09 07:27 - 00284424 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys 2013-05-18 08:57 - 2013-04-09 07:20 - 00306952 ____A (Microsoft Corporation) C:\Windows\System32\kd_02_10ec.dll 2013-05-18 08:57 - 2013-04-09 07:20 - 00086280 ____A (Microsoft Corporation) C:\Windows\System32\kdnet.dll 2013-05-18 08:57 - 2013-04-09 07:18 - 00077960 ____A (Microsoft Corporation) C:\Windows\System32\kdvm.dll 2013-05-18 08:57 - 2013-04-09 07:17 - 01829408 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2013-05-18 08:57 - 2013-04-09 06:52 - 00816128 ____A (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe 2013-05-18 08:57 - 2013-04-09 06:52 - 00804352 ____A (Microsoft Corporation) C:\Windows\System32\RecoveryDrive.exe 2013-05-18 08:57 - 2013-04-09 06:52 - 00373760 ____A (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe 2013-05-18 08:57 - 2013-04-09 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe 2013-05-18 08:57 - 2013-04-09 06:52 - 00126464 ____A (Microsoft Corporation) C:\Windows\System32\Robocopy.exe 2013-05-18 08:57 - 2013-04-09 06:51 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll 2013-05-18 08:57 - 2013-04-09 06:51 - 00595456 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.dll 2013-05-18 08:57 - 2013-04-09 06:51 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-05-18 08:57 - 2013-04-09 06:51 - 00456704 ____A (Microsoft Corporation) C:\Windows\System32\wpncore.dll 2013-05-18 08:57 - 2013-04-09 06:51 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll 2013-05-18 08:57 - 2013-04-09 06:51 - 00367616 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe 2013-05-18 08:57 - 2013-04-09 06:51 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wscsvc.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 01285632 ____A (Microsoft Corporation) C:\Windows\System32\schedsvc.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00745984 ____A (Microsoft Corporation) C:\Windows\System32\mssvp.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00435200 ____A (Microsoft Corporation) C:\Windows\System32\mssph.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00422400 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00414720 ____A (Microsoft Corporation) C:\Windows\System32\GenuineCenter.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00096256 ____A (Microsoft Corporation) C:\Windows\System32\mssprxy.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\msscntrs.dll 2013-05-18 08:57 - 2013-04-09 06:50 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\msshooks.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 01444864 ____A (Microsoft Corporation) C:\Windows\System32\MSAudDecMFT.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00817152 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00468992 ____A (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00281088 ____A (Microsoft Corporation) C:\Windows\System32\mfreadwrite.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\fhengine.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00210432 ____A (Microsoft Corporation) C:\Windows\System32\iuilp.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00196096 ____A (Microsoft Corporation) C:\Windows\System32\dmvdsitf.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00172544 ____A (Microsoft Corporation) C:\Windows\System32\dwmredir.dll 2013-05-18 08:57 - 2013-04-09 06:49 - 00050176 ____A (Microsoft Corporation) C:\Windows\System32\fmifs.dll 2013-05-18 08:57 - 2013-04-09 06:48 - 02303488 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll 2013-05-18 08:57 - 2013-04-09 06:48 - 00785408 ____A (Microsoft Corporation) C:\Windows\System32\audiosrv.dll 2013-05-18 08:57 - 2013-04-09 06:48 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl 2013-05-18 08:57 - 2013-04-09 06:48 - 00169472 ____A (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll 2013-05-18 08:57 - 2013-04-09 04:35 - 04038144 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-05-18 08:57 - 2013-04-09 04:34 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidbth.sys 2013-05-18 08:57 - 2013-04-09 04:34 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys 2013-05-18 08:57 - 2013-04-09 04:34 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys 2013-05-18 08:57 - 2013-04-09 04:33 - 00623104 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys 2013-05-18 08:57 - 2013-04-09 04:33 - 00060416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys 2013-05-18 08:57 - 2013-04-09 04:32 - 00805376 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys 2013-05-18 08:57 - 2013-04-09 04:31 - 00247808 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys 2013-05-18 08:57 - 2013-04-09 04:31 - 00083456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys 2013-05-18 08:57 - 2013-04-09 01:44 - 00123880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2013-05-18 08:57 - 2013-04-09 01:39 - 01408896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-05-18 08:57 - 2013-04-09 01:37 - 00426024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2013-05-18 08:57 - 2013-04-09 01:37 - 00324368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2013-05-18 08:57 - 2013-04-08 23:52 - 00670208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2013-05-18 08:57 - 2013-04-08 23:52 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-05-18 08:57 - 2013-04-08 23:52 - 00302592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2013-05-18 08:57 - 2013-04-08 23:52 - 00171008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2013-05-18 08:57 - 2013-04-08 23:52 - 00106496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe 2013-05-18 08:57 - 2013-04-08 23:51 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 02035200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 01113600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00659456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00656896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00403968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl 2013-05-18 08:57 - 2013-04-08 23:51 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00324096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00268800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00214528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00186880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00155648 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00035328 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll 2013-05-18 08:57 - 2013-04-08 23:51 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll 2013-05-18 08:57 - 2013-04-05 01:30 - 00503080 ____A (Microsoft Corporation) C:\Windows\System32\ci.dll 2013-05-18 08:57 - 2013-04-03 00:08 - 00387688 ____A C:\Windows\System32\ApnDatabase.xml 2013-05-18 08:57 - 2013-03-30 20:16 - 01403784 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi 2013-05-18 08:57 - 2013-03-30 20:16 - 01267424 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe 2013-05-18 08:57 - 2013-03-29 00:09 - 01217328 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi 2013-05-18 08:57 - 2013-03-29 00:09 - 01093880 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe 2013-05-18 08:57 - 2013-03-16 00:05 - 00298456 ____A (Microsoft Corporation) C:\Windows\System32\rsaenh.dll 2013-05-18 08:57 - 2013-03-16 00:05 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll 2013-05-18 08:57 - 2012-12-13 06:00 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll 2013-05-18 08:57 - 2012-12-13 05:59 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-05-15 19:21 - 2013-04-11 08:40 - 06987528 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt 2013-05-14 20:09 - 2013-01-15 23:06 - 03662237 ____A C:\Users\Sarah\Documents\Dublin pp.pptx 2013-05-14 20:09 - 2012-11-21 18:29 - 01249251 ____A C:\Users\Sarah\Documents\Die spätbyzantinische Zeit-PPP.pptx 2013-05-14 18:50 - 2013-05-14 20:05 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp 2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx 2013-05-14 18:20 - 2013-05-14 20:08 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt 2013-05-13 12:43 - 2013-05-13 21:02 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt 2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt 2013-05-12 21:12 - 2013-05-13 08:03 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt 2013-05-12 20:59 - 2013-05-12 21:42 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp 2013-05-12 20:39 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt 2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx 2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt 2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt 2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys 2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-05-05 17:11 - 2012-03-14 05:00 - 00385024 ____A (CANON INC.) C:\Windows\System32\CNMLMAR.DLL 2013-05-05 17:11 - 2011-04-27 11:01 - 00373248 ____A (CANON INC.) C:\Windows\System32\CNC_ARL.dll 2013-05-05 17:11 - 2011-04-27 11:00 - 00323584 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARL.dll 2013-05-05 17:11 - 2011-03-31 10:07 - 00302080 ____A (CANON INC.) C:\Windows\System32\CNC_ARC.dll 2013-05-05 17:11 - 2011-03-31 10:07 - 00114688 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARU.dll 2013-05-05 17:11 - 2011-03-31 10:06 - 00112128 ____A (CANON INC.) C:\Windows\System32\CNC_ARI.dll 2013-05-05 17:11 - 2010-11-29 09:17 - 00063744 ____A C:\Windows\SysWOW64\CNC1752D.TBL 2013-05-05 17:11 - 2008-08-25 18:02 - 00017920 ____A (CANON INC.) C:\Windows\System32\CNHMCA6.dll 2013-05-05 17:11 - 2008-08-25 18:02 - 00015872 ____A (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt ==================== One Month Modified Files and Folders ======= 2013-06-04 14:15 - 2013-06-04 14:15 - 01916714 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64 (1).exe 2013-06-04 14:14 - 2013-06-04 14:14 - 01916714 ____A (Farbar) C:\Users\Sarah\Downloads\FRST64.exe 2013-06-04 14:10 - 2012-10-20 11:17 - 00754172 ____A C:\Windows\System32\perfh007.dat 2013-06-04 14:10 - 2012-10-20 11:17 - 00156362 ____A C:\Windows\System32\perfc007.dat 2013-06-04 14:10 - 2012-07-26 09:28 - 01748838 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-04 14:07 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\sru 2013-06-04 12:40 - 2013-06-04 00:22 - 00026064 ____A C:\Users\Sarah\Documents\Parfüm - Deutsch.odt 2013-06-04 11:41 - 2013-02-16 16:33 - 00000000 ____D C:\Users\Sarah\AppData\Local\PMB Files 2013-06-04 09:52 - 2013-02-03 18:41 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-06-04 06:07 - 2013-06-04 06:07 - 00890839 ____A C:\Users\Sarah\Desktop\SecurityCheck.exe 2013-06-04 06:01 - 2013-02-03 18:41 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-06-04 01:04 - 2012-10-20 02:10 - 01309209 ____A C:\Windows\WindowsUpdate.log 2013-06-04 01:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache 2013-06-04 00:17 - 2013-06-04 00:17 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu (1).exe 2013-06-03 22:53 - 2013-06-03 22:52 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu.exe 2013-06-03 22:43 - 2013-06-03 22:41 - 01916754 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe 2013-06-03 22:38 - 2013-06-03 22:38 - 00003064 ____A C:\Users\Sarah\Desktop\FSS.txt 2013-06-03 22:37 - 2013-06-03 22:37 - 00355651 ____A (Farbar) C:\Users\Sarah\Downloads\FSS (1).exe 2013-06-03 22:36 - 2013-06-03 22:36 - 00355651 ____A (Farbar) C:\Users\Sarah\Desktop\FSS.exe 2013-06-03 22:35 - 2013-06-03 22:35 - 00021951 ____A C:\Users\Sarah\Desktop\Result.txt 2013-06-03 22:33 - 2013-06-03 22:33 - 00760723 ____A (Farbar) C:\Users\Sarah\Desktop\MiniToolBox.exe 2013-06-03 22:26 - 2013-06-03 22:26 - 00000759 ____A C:\Users\Sarah\Desktop\JRT.txt 2013-06-03 22:24 - 2013-06-03 22:21 - 00000000 ____D C:\JRT 2013-06-03 22:22 - 2013-06-03 22:22 - 00000000 ____D C:\Windows\ERUNT 2013-06-03 22:21 - 2013-06-03 22:21 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Sarah\Desktop\JRT.exe 2013-06-03 22:14 - 2012-07-26 09:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-06-03 22:13 - 2013-06-03 22:12 - 00016259 ____A C:\AdwCleaner[S1].txt 2013-06-03 22:13 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\System32\config\BBI 2013-06-03 22:12 - 2013-02-18 19:49 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Skype 2013-06-03 22:10 - 2013-06-03 22:10 - 00632031 ____A C:\Users\Sarah\Desktop\adwcleaner.exe 2013-06-03 22:00 - 2013-06-03 22:00 - 00015388 ____A C:\Users\Sarah\Desktop\Addition.txt 2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST 2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe 2013-06-02 16:01 - 2012-12-25 14:44 - 00000000 ____D C:\Users\Sarah\Documents\Fortsetzungsstorys 2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner 2013-06-02 12:20 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent 2013-06-01 13:23 - 2012-07-26 09:21 - 00051373 ____A C:\Windows\setupact.log 2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel 2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip 2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs 2013-05-26 17:14 - 2013-02-16 16:33 - 00000000 ____D C:\ProgramData\PMB Files 2013-05-26 15:12 - 2013-05-03 14:26 - 00001082 ____A C:\Users\Public\Desktop\Gameforge Live.lnk 2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Users\Sarah\Downloads\Gameforge Live 2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Program Files (x86)\GameforgeLive 2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2013-05-24 19:32 - 2013-02-20 21:58 - 00000000 ____D C:\Users\Sarah\Documents\Story-Ib 2013-05-24 18:11 - 2013-02-03 18:45 - 00002194 ____A C:\Users\Public\Desktop\Google Chrome.lnk 2013-05-23 19:20 - 2013-05-22 22:33 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt 2013-05-22 21:09 - 2013-05-22 21:06 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt 2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt 2013-05-22 19:50 - 2013-01-11 17:41 - 00000000 ____D C:\Users\Sarah\.gimp-2.8 2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg 2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2 2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun 2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java 2013-05-21 16:35 - 2013-02-03 18:22 - 00000000 ____D C:\users\Sarah 2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe 2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe 2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg 2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe 2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk 2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar 2013-05-21 16:18 - 2013-05-21 16:17 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe 2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-20 19:47 - 2013-01-05 19:07 - 00000000 ____D C:\Users\Sarah\Documents\Youcam 2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt 2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp 2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo 2013-05-19 14:43 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink 2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo 2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo 2013-05-19 14:42 - 2013-02-15 17:07 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\CyberLink 2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData 2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore 2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ____D C:\ProgramData\Skype 2013-05-17 19:06 - 2012-09-13 20:32 - 00106688 ____A C:\Windows\PFRO.log 2013-05-17 18:09 - 2013-02-08 17:11 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt 2013-05-14 20:08 - 2013-05-14 18:20 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt 2013-05-14 20:05 - 2013-05-14 18:50 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp 2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx 2013-05-13 21:02 - 2013-05-13 12:43 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt 2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt 2013-05-13 08:05 - 2013-05-12 20:39 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt 2013-05-13 08:03 - 2013-05-12 21:12 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt 2013-05-12 21:42 - 2013-05-12 20:59 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp 2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx 2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt 2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt 2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys 2013-05-07 22:07 - 2013-03-03 08:06 - 00693112 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-05-07 22:07 - 2013-03-03 08:06 - 00078200 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-05-05 17:11 - 2012-07-26 10:12 - 00000000 __RSD C:\Windows\Media 2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit Last Boot: 2013-06-02 08:11 ==================== End Of Log ============================ |
04.06.2013, 14:30 | #20 |
/// the machine /// TB-Ausbilder | Auf seltsamen Link geklickt Und meine Frage? Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.06.2013, 14:48 | #21 |
| Auf seltsamen Link geklickt Mit dem Computer? Naja, Probleme hatte ich ja nicht gerade, nur war ich mir unsicher ob nicht irgendetwas auf dem Laptop gelandet ist wegen der Mail. Was aber seit gestern passiert ist, ist dass der Laptop meinen Internet Stick vom Mobilen Internet dauernd auswirft, könnte das was damit zu tun haben ? Außerdem wollte er mir ein paar mal die Verwendung der Programme zur Diagnose verbieten, da sie angeblich gefährlich waren. Danke nochmal für die Hilfe bis jetzt Glaubst du denn das etwas auf dem Rechner sein könnte? |
04.06.2013, 17:03 | #22 | |
/// the machine /// TB-Ausbilder | Auf seltsamen Link geklicktZitat:
Aber wir sind fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob/Kritik loswerden möchtest: http://www.trojaner-board.de/lob-kritik-wuensche/ Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.06.2013, 19:51 | #23 |
| Auf seltsamen Link geklickt Alles erledigt! Puh, bin ich froh, dass nichts schlimmes oben war. Ich danke dir nochmal ganz herzlich für die Hilfe |
04.06.2013, 20:02 | #24 |
/// the machine /// TB-Ausbilder | Auf seltsamen Link geklickt Gern geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Auf seltsamen Link geklickt |
angeblich, anmelde, anmelden, befürchtung, direkt, geklickt, geschickt, kommentare, link, link geklickt, malware, melde, melden, natürlich, paypal, seite, seltsame, seltsamen, suspekte, warum |