![]() |
|
Plagegeister aller Art und deren Bekämpfung: "wssetup.exe Perion Network Ltd." bei PC startWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
/// Malware-holic ![]() ![]() ![]() ![]() ![]() ![]() | ![]() "wssetup.exe Perion Network Ltd." bei PC start Passt. Scan mit Combofix
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
![]() | #2 |
![]() | ![]() "wssetup.exe Perion Network Ltd." bei PC start Ganz großer Mist.......Panik/Hilfe
__________________Der Internetexplorer geht nicht mehr, hab mehrmals einen Neustart gemacht, nichts ging. Hab jetzt Google als Startseite angelegt und konnte so wieder ins Forum gelangen. Wenn ich eine Seite in der Adressleiste anwählen will, bleibt alles weiß und nichts passiert. Das ist jetzt alles passiert, nachdem ich Combofix laufen lassen habe. Der Log von Combofix Code:
ATTFilter ComboFix 13-06-13.01 - *** 15.06.2013 12:50:54.1.6 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8188.6574 [GMT 2:00] ausgeführt von:: c:\users\***\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\ntuser.dat c:\windows\SysWow64\tmp4C89.tmp c:\windows\SysWow64\tmp4C8A.tmp . . ((((((((((((((((((((((( Dateien erstellt von 2013-05-15 bis 2013-06-15 )))))))))))))))))))))))))))))) . . 2013-06-15 10:54 . 2013-06-15 10:54 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2013-06-15 10:54 . 2013-06-15 10:54 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-06-14 12:03 . 2013-06-14 12:03 -------- d-----w- c:\programdata\Solidshield 2013-06-14 11:41 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{38D67761-B52B-455A-A2CD-E1B295648B0F}\mpengine.dll 2013-06-13 09:25 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-06-13 09:25 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll 2013-06-13 09:25 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll 2013-06-13 09:25 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll 2013-06-13 09:25 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll 2013-06-13 09:25 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll 2013-06-13 09:25 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll 2013-06-13 09:25 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2013-06-13 09:25 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll 2013-06-13 09:25 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll 2013-06-13 09:25 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe 2013-06-13 09:25 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe 2013-06-13 09:25 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll 2013-06-08 13:30 . 2013-06-13 13:04 75825640 ----a-w- c:\windows\system32\MRT.exe 2013-06-05 13:31 . 2013-06-05 13:31 -------- d-----w- c:\users\***\AppData\Local\EA Games 2013-06-05 13:05 . 2013-06-05 13:07 -------- d-----w- c:\users\***\AppData\Roaming\DAEMON Tools Lite 2013-06-05 13:03 . 2013-06-05 13:07 -------- d-----w- c:\programdata\DAEMON Tools Lite 2013-06-05 06:26 . 2013-06-14 12:08 -------- d-----w- c:\windows\SysWow64\WNLT 2013-06-05 06:26 . 2013-06-05 06:26 -------- d-----w- c:\windows\SysWow64\jmdp 2013-06-05 06:26 . 2013-06-05 06:26 -------- d-----w- c:\windows\SysWow64\ARFC 2013-06-05 06:26 . 2013-05-21 13:31 1447728 ----a-w- c:\windows\system32\dmwu.exe 2013-06-05 06:26 . 2013-05-21 13:30 33792 ----a-w- c:\windows\system32\ImHttpComm.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-06-13 21:01 . 2012-04-01 19:12 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-06-13 21:01 . 2012-03-25 09:44 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-05-27 22:13 . 2012-03-31 00:09 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2013-05-27 22:13 . 2012-03-27 16:03 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2013-05-27 22:13 . 2012-03-27 16:03 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2013-05-02 00:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe 2013-04-12 14:45 . 2013-04-23 17:16 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-10 06:01 . 2013-05-15 17:47 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys 2013-04-10 06:01 . 2013-05-15 17:47 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-04-10 03:30 . 2013-05-15 17:47 3153920 ----a-w- c:\windows\system32\win32k.sys 2013-04-04 03:35 . 2013-04-26 10:35 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-03-23 01:58 . 2013-03-23 01:58 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-03-23 01:58 . 2013-03-23 01:58 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-03-23 01:58 . 2013-03-23 01:58 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-03-23 01:58 . 2013-03-23 01:58 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-03-23 01:58 . 2013-03-23 01:58 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-03-23 01:58 . 2013-03-23 01:58 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-03-23 01:58 . 2013-03-23 01:58 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-03-23 01:57 . 2013-03-23 01:57 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-03-23 01:57 . 2013-03-23 01:57 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-03-23 01:57 . 2013-03-23 01:57 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-03-23 01:57 . 2013-03-23 01:57 81408 ----a-w- c:\windows\system32\icardie.dll 2013-03-23 01:57 . 2013-03-23 01:57 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-03-23 01:57 . 2013-03-23 01:57 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-03-23 01:57 . 2013-03-23 01:57 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-03-23 01:57 . 2013-03-23 01:57 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-03-23 01:57 . 2013-03-23 01:57 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-03-23 01:57 . 2013-03-23 01:57 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-03-23 01:57 . 2013-03-23 01:57 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-03-23 01:57 . 2013-03-23 01:57 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-03-23 01:57 . 2013-03-23 01:57 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-03-23 01:57 . 2013-03-23 01:57 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-03-23 01:57 . 2013-03-23 01:57 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-03-23 01:57 . 2013-03-23 01:57 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-03-23 01:57 . 2013-03-23 01:57 441856 ----a-w- c:\windows\system32\html.iec 2013-03-23 01:57 . 2013-03-23 01:57 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-03-23 01:57 . 2013-03-23 01:57 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-03-23 01:57 . 2013-03-23 01:57 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-03-23 01:57 . 2013-03-23 01:57 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-03-23 01:57 . 2013-03-23 01:57 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-03-23 01:57 . 2013-03-23 01:57 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-03-23 01:57 . 2013-03-23 01:57 235008 ----a-w- c:\windows\system32\url.dll 2013-03-23 01:57 . 2013-03-23 01:57 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-03-23 01:57 . 2013-03-23 01:57 216064 ----a-w- c:\windows\system32\msls31.dll 2013-03-23 01:57 . 2013-03-23 01:57 197120 ----a-w- c:\windows\system32\msrating.dll 2013-03-23 01:57 . 2013-03-23 01:57 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-03-23 01:57 . 2013-03-23 01:57 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-03-23 01:57 . 2013-03-23 01:57 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-03-23 01:57 . 2013-03-23 01:57 149504 ----a-w- c:\windows\system32\occache.dll 2013-03-23 01:57 . 2013-03-23 01:57 144896 ----a-w- c:\windows\system32\wextract.exe 2013-03-23 01:57 . 2013-03-23 01:57 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-03-23 01:57 . 2013-03-23 01:57 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-03-23 01:57 . 2013-03-23 01:57 13824 ----a-w- c:\windows\system32\mshta.exe 2013-03-23 01:57 . 2013-03-23 01:57 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-03-23 01:57 . 2013-03-23 01:57 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-03-23 01:57 . 2013-03-23 01:57 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-03-23 01:57 . 2013-03-23 01:57 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-03-23 01:57 . 2013-03-23 01:57 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-03-23 01:57 . 2013-03-23 01:57 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-03-23 01:57 . 2013-03-23 01:57 102912 ----a-w- c:\windows\system32\inseng.dll 2013-03-23 01:56 . 2013-03-23 01:56 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 648192 ----a-w- c:\windows\system32\d3d10level9.dll 2013-03-23 01:56 . 2013-03-23 01:56 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2013-03-23 01:56 . 2013-03-23 01:56 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2013-03-23 01:56 . 2013-03-23 01:56 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-03-23 01:56 . 2013-03-23 01:56 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-03-23 01:56 . 2013-03-23 01:56 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 3928064 ----a-w- c:\windows\system32\d2d1.dll 2013-03-23 01:56 . 2013-03-23 01:56 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-03-23 01:56 . 2013-03-23 01:56 363008 ----a-w- c:\windows\system32\dxgi.dll 2013-03-23 01:56 . 2013-03-23 01:56 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll 2013-03-23 01:56 . 2013-03-23 01:56 333312 ----a-w- c:\windows\system32\d3d10_1core.dll 2013-03-23 01:56 . 2013-03-23 01:56 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 296960 ----a-w- c:\windows\system32\d3d10core.dll 2013-03-23 01:56 . 2013-03-23 01:56 293376 ----a-w- c:\windows\SysWow64\dxgi.dll 2013-03-23 01:56 . 2013-03-23 01:56 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2013-03-23 01:56 . 2013-03-23 01:56 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2013-03-23 01:56 . 2013-03-23 01:56 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-03-23 01:56 . 2013-03-23 01:56 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll 2013-03-23 01:56 . 2013-03-23 01:56 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2013-03-23 01:56 . 2013-03-23 01:56 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll 2013-03-23 01:56 . 2013-03-23 01:56 221184 ----a-w- c:\windows\system32\UIAnimation.dll 2013-03-23 01:56 . 2013-03-23 01:56 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll 2013-03-23 01:56 . 2013-03-23 01:56 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll 2013-03-23 01:56 . 2013-03-23 01:56 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2013-03-23 01:56 . 2013-03-23 01:56 194560 ----a-w- c:\windows\system32\d3d10_1.dll 2013-03-23 01:56 . 2013-03-23 01:56 1887232 ----a-w- c:\windows\system32\d3d11.dll 2013-03-23 01:56 . 2013-03-23 01:56 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}] 2012-07-04 14:03 1310040 ----a-r- c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-07-04 1310040] . [HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}] [HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}] [HKEY_CLASSES_ROOT\SWEETIE.IEToolbar] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GAINWARD"="c:\program files (x86)\EXPERTool\TBPanel.exe" [2011-08-02 2273608] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "XFastUsb"="c:\program files (x86)\XFastUsb\XFastUsb.exe" [2012-03-25 4942336] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] "CTSyncService"="c:\program files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe" [2009-07-08 1233195] "VolPanel"="c:\program files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" [2009-05-04 241789] "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-07-28 348664] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280] "SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2012-10-04 115032] "Sweetpacks Communicator"="c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe" [2012-08-15 231768] "WinampAgent"="d:\programme\Winamp\winampa.exe" [2012-06-28 74752] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;d:\programme\Skype\Updater\Updater.exe;d:\programme\Skype\Updater\Updater.exe [x] R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x] R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x] R3 FNETTBOH_305;FNETTBOH_305;c:\windows\system32\drivers\FNETTBOH_305.SYS;c:\windows\SYSNATIVE\drivers\FNETTBOH_305.SYS [x] R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x] R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] R3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [x] R3 SynasUSB;SynasUSB;c:\windows\system32\drivers\SynUSB64.sys;c:\windows\SYSNATIVE\drivers\SynUSB64.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AsrAppCharger.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS;c:\windows\SYSNATIVE\drivers\FNETURPX.SYS [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 IBUpdaterService;IBUpdaterService;c:\windows\system32\dmwu.exe;c:\windows\SYSNATIVE\dmwu.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x] S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . Inhalt des "geplante Tasks" Ordners . 2013-06-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 21:01] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-10-05 11474024] "RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 17920] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.facebook.de/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Free YouTube to MP3 Converter - c:\users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html TCP: DhcpNameServer = 192.168.178.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Wow6432Node-HKCU-Run-ASRockXTU - (no file) Wow6432Node-HKCU-Run-zASRockInstantBoot - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-06-15 12:55:36 ComboFix-quarantined-files.txt 2013-06-15 10:55 . Vor Suchlauf: 7 Verzeichnis(se), 10.434.842.624 Bytes frei Nach Suchlauf: 10 Verzeichnis(se), 11.092.008.960 Bytes frei . - - End Of File - - 327A23DE3BE577F0352B4EE41E4A77C4 A36C5E4F47E84449FF07ED3517B43A31 Anderes Thema Warum sind im OTL und den anderen logs, ordner/spiele/Explorer drin, die ich garnicht auf dem rechner habe? Firefox z.B., habe ich nie gehabt, den Ordner GAME gibt's auch nicht mehr Das war jetzt nur so am rande :/ ACHTUNG, EDITIERE VIA HANDY Nachdem ich die Antwort verfasst hatte,und ANTWORTEN geklickt hab, hat der Internetexprer nicht mehr reagiert. Wie ich aber über Handy sehe, hat er trotzdem gepostet Geändert von Ruhrpottler (15.06.2013 um 13:12 Uhr) |
![]() |
Themen zu "wssetup.exe Perion Network Ltd." bei PC start |
black, geklickt, gmer, guten, immer wieder, installiere, installieren, langsamer, logfiles, meldung, network, ordner, perion network, problem, pup.installbrain, scan, schließe, start, starte, startet, taucht, wissen, wssetup.exe, wssetup.exe perion network ltd., zip ordner |