Toolbars, BrowserDefender, HomeTab u.a.

schrauber · 05.07.2013, 07:25

Nö, kein Handlungsbedarf. MBAM immer nur QuickScans machen, wer nen Vollscan macht hat keine Ahnung von dem Tool

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Riddle · 05.07.2013, 16:31

Zitat:

Zitat von schrauber

MBAM immer nur QuickScans machen, wer nen Vollscan macht hat keine Ahnung von dem Tool

Na danke. Das hätte mir ja auch mal einer früher sagen können.

Die ursprünglichen Probleme sind weg, allerdings hängt sich der IE seit gestern immer wieder mal auf und läuft nicht so stabil wie davor. Event 1002 iexplore.exe
(Ist nicht mein Laptop; sonst würde ich einen alternativen Browser installieren.)

ESET meldet auch noch irgendwas oder false positive?

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fe6fb44e549c654ab47074d97b74910a
# engine=14280
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-05 02:19:52
# local_time=2013-07-05 04:19:52 (+0100, Westeuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=774 16777213 85 91 57758 149743864 0 0
# scanned=69121
# found=1
# cleaned=0
# scan_time=7404
sh=F1605E6D08D0470856784DB3DB715656A6BFE2BA ft=1 fh=e609454aa9cc4e00 vn="probably a variant of Win32/Agent.IUKDZWI trojan" ac=I fn="C:\T-Online\EMAIL4\mui.exe"

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.68  
 Windows XP Service Pack 3 x86   
 Internet Explorer 8 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
 avast! Free Antivirus    
 ESET Online Scanner v3   
`````````Anti-malware/Other Utilities Check:````````` 
 Out of date Spybot installed! 
 Spybot - Search & Destroy 1.4 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 CCleaner     
 Java 7 Update 25  
 Adobe Reader XI  
````````Process Check: objlist.exe by Laurent````````  
 T-Online WLAN-Access Finder ToWLaAcF.exe  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast avastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C::  
````````````````````End of Log``````````````````````

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-07-2013
Ran by *** (administrator) on 05-07-2013 17:04:06
Running from C:\Dokumente und Einstellungen\***\Desktop
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Programme\AVAST Software\Avast\AvastSvc.exe
(brother Industries Ltd) C:\WINDOWS\system32\brsvc01a.exe
(brother Industries Ltd) C:\WINDOWS\system32\brss01a.exe
(TOSHIBA CORPORATION) C:\Programme\TOSHIBA\ConfigFree\CFSvcs.exe
(Matsushita Electric Industrial Co., Ltd.) C:\WINDOWS\system32\DVDRAMSV.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Programme\EaseUS\Todo Backup\bin\Agent.exe
(Teruten) C:\WINDOWS\system32\FsUsbExService.Exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Programme\EaseUS\Todo Backup\bin\GuardAgent.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe
(Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Programme\Apoint2K\Apoint.exe
(TOSHIBA) C:\Programme\TOSHIBA\Touch and Launch\PadExe.exe
(Agere Systems) C:\WINDOWS\AGRSMMSG.exe
(COMPAL ELECTRONIC INC.) C:\Programme\TOSHIBA\E-KEY\CeEKey.exe
(COMPAL ELECTRONIC INC.) C:\Programme\TOSHIBA\TouchPad\TPTray.exe
(TOSHIBA Corporation) C:\Programme\TOSHIBA\Tvs\TvsTray.exe
(TOSHIBA) C:\WINDOWS\system32\ZoomingHook.exe
(TOSHIBA Corporation) C:\Programme\TOSHIBA\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe
(TOSHIBA CORPORATION) C:\Programme\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA) C:\Programme\TOSHIBA\Accessibility\FnKeyHook.exe
(Alps Electric Co., Ltd.) C:\Programme\Apoint2K\Apntex.exe
(TOSHIBA) C:\WINDOWS\system32\TCtrlIOHook.exe
(TOSHIBA Corporation) C:\Programme\TOSHIBA\TOSHIBA Controls\TFncKy.exe
(TOSHIBA Corporation) C:\WINDOWS\system32\TPSBattM.exe
() C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\avastUI.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Programme\EaseUS\Todo Backup\bin\EuWatch.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Programme\EaseUS\Todo Backup\bin\TrayNotify.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(TOSHIBA) C:\Programme\TOSHIBA\TOSCDSPD\toscdspd.exe
(Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\T-Online\WLAN-Access Finder\ToWLaAcF.exe
(Google Inc.) C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
() C:\Programme\TOSHIBA\Bluetooth Monitor\BtMon2.exe
(Matsushita Electric Industrial Co., Ltd.) C:\WINDOWS\system32\RAMASST.exe
(Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\Gemeinsame Dateien\Marmiko Shared\MWLaMaS.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] C:\Programme\Apoint2K\Apoint.exe [196608 2004-03-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [PadTouch] C:\Programme\TOSHIBA\Touch and Launch\PadExe.exe [1077326 2004-06-29] (TOSHIBA)
HKLM\...\Run: [AGRSMMSG] AGRSMMSG.exe [x]
HKLM\...\Run: [CeEKEY] C:\Programme\TOSHIBA\E-KEY\CeEKey.exe [667648 2004-11-29] (COMPAL ELECTRONIC INC.)
HKLM\...\Run: [TPNF] C:\Programme\TOSHIBA\TouchPad\TPTray.exe [53248 2004-11-29] (COMPAL ELECTRONIC INC.)
HKLM\...\Run: [Tvs] C:\Programme\TOSHIBA\Tvs\TvsTray.exe [73728 2004-11-12] (TOSHIBA Corporation)
HKLM\...\Run: [Zooming] ZoomingHook.exe [x]
HKLM\...\Run: [SmoothView] C:\Programme\TOSHIBA\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe [118784 2004-12-21] (TOSHIBA Corporation)
HKLM\...\Run: [HWSetup] C:\Programme\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP [28672 2004-12-23] (TOSHIBA CO.,LTD.)
HKLM\...\Run: [NDSTray.exe] NDSTray.exe [x]
HKLM\...\Run: [TOSHIBA Accessibility] C:\Programme\TOSHIBA\Accessibility\FnKeyHook.exe [24576 2004-12-07] (TOSHIBA)
HKLM\...\Run: [TPSMain] TPSMain.exe [x]
HKLM\...\Run: [TCtryIOHook] TCtrlIOHook.exe [x]
HKLM\...\Run: [TFncKy] TFncKy.exe [x]
HKLM\...\Run: [SVPWUTIL] C:\Programme\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL [61440 2004-12-27] (TOSHIBA)
HKLM\...\Run: [SetDefPrt] C:\Programme\Brother\Brmfl05a\BrStDvPt.exe [49152 2005-01-26] (Brother Industories, Ltd.)
HKLM\...\Run: [ControlCenter2.0] C:\Programme\Brother\ControlCenter2\brctrcen.exe /autorun [61440 2006-04-10] (Brother Industries, Ltd.)
HKLM\...\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe [406016 2003-11-10] ()
HKLM\...\Run: [BrMfcWnd] C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [622592 2006-03-28] ()
HKLM\...\Run: [SetDefPrt2] C:\Programme\Brother\Brmfl06a\BrStDvPt.exe [49152 2005-01-26] (Brother Industories, Ltd.)
HKLM\...\Run: [ControlCenter3] C:\Programme\Brother\ControlCenter3\brctrcen.exe /autorun [61440 2006-04-10] (Brother Industries, Ltd.)
HKLM\...\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] "C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [avast] "C:\Programme\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [EaseUs Watch] "C:\Programme\EaseUS\Todo Backup\bin\EuWatch.exe" [70728 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM\...\Run: [EaseUs Tray] "C:\Programme\EaseUS\Todo Backup\bin\TrayNotify.exe" [1372232 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM\...\Run: [SunJavaUpdateSched] "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] "C:\Programme\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [NPSStartup]  [x]
HKLM\...\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k [x]
Winlogon\Notify\igfxcui: igfxsrvc.dll (Intel Corporation)
Winlogon\Notify\WgaLogon: WgaLogon.dll (Microsoft Corporation)
HKCU\...\Run: [TOSCDSPD] C:\Programme\TOSHIBA\TOSCDSPD\toscdspd.exe [65536 2003-09-15] (TOSHIBA)
HKCU\...\Run: [T-Online_Software_6\WLAN-Access Finder] C:\Programme\T-Online\WLAN-Access Finder\ToWLaAcF.exe /StartMinimized [671796 2008-04-08] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH)
HKCU\...\Run: [swg] "C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [68856 2007-06-25] (Google Inc.)
HKCU\...\Run: [AutoStartNPSAgent] C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKCU\...\Policies\system: [disableregistrytools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dsl-start.computerbild.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -&Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} -  No File
Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1362583177625
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: ipp - No CLSID Value - 
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msdaipp - No CLSID Value - 
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Programme\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 Brother XP spl Service; C:\WINDOWS\system32\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)
R2 CFSvcs; C:\Programme\TOSHIBA\ConfigFree\CFSvcs.exe [36864 2004-11-10] (TOSHIBA CORPORATION)
R2 DVD-RAM_Service; C:\WINDOWS\system32\DVDRAMSV.exe [106496 2003-05-23] (Matsushita Electric Industrial Co., Ltd.)
R2 EaseUS Agent; C:\Programme\EaseUS\Todo Backup\bin\Agent.exe [68168 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Programme\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2012-08-26] (Google)
S4 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation)
R2 MZCCntrl; C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe [61440 2007-01-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [441136 2006-10-26] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S4 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S3 AppMgmt; %SystemRoot%\System32\appmgmts.dll [x]
S4 HidServ; %SystemRoot%\System32\hidserv.dll [x]
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" [x]

==================== Drivers (Whitelisted) ====================

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [48128 2008-04-13] (Microsoft Corporation)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [2284864 2004-10-27] (Realtek Semiconductor Corp.)
S3 AR5211; C:\Windows\System32\DRIVERS\ar5211.sys [393600 2004-12-22] (Atheros Communications, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-07-03] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-07-03] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-07-03] ()
S3 BrScnUsb; C:\Windows\System32\Drivers\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R1 EKECioCtl; C:\Programme\TOSHIBA\E-KEY\EKECioCtl.sys [6144 2004-12-10] (TOAHIBA, )
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [50248 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [40648 2013-01-26] ()
R1 EUDSKACS; C:\WINDOWS\system32\drivers\eudskacs.sys [14920 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\WINDOWS\system32\drivers\EuFdDisk.sys [185672 2013-01-26] (CHENGDU YIWO Tech Development Co., Ltd)
R3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [7296 2003-09-23] (GARMIN Corp.)
R1 HWSCtrl; C:\Programme\TOSHIBA\TOSHIBA Applet\HWS_IoDispatch.sys [6144 2004-12-11] ()
R3 ialm; C:\Windows\System32\DRIVERS\ialmnt5.sys [773565 2004-11-02] (Intel Corporation)
R3 MACNDIS5; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MACNDIS5.SYS [17280 2006-10-04] (Marmiko IT-Solutions GmbH)
R1 meiudf; C:\Windows\System32\Drivers\meiudf.sys [90480 2004-01-30] (Matsushita Electric Industrial Co.,Ltd.)
S3 MIINPazX; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH)
S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [19200 2010-08-27] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 Netdevio; C:\Windows\System32\DRIVERS\netdevio.sys [12032 2003-01-29] (TOSHIBA Corporation.)
S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation)
R3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
S3 rt2500usb; C:\Windows\System32\DRIVERS\rt2500usb.sys [243456 2005-03-12] (Ralink Technology Inc.)
R1 SerTVOutCtlr; C:\Windows\System32\drivers\EPIOMngr.sys [6400 2004-07-30] (COMPAL ELECTRONIC INC.)
S3 SLIP; C:\Windows\System32\DRIVERS\SLIP.sys [11136 2008-04-13] (Microsoft Corporation)
S3 SMCIRDA; C:\Windows\System32\DRIVERS\smcirda.sys [46080 2004-06-16] (SMSC)
R1 SPCtl; C:\Programme\Toshiba\Windows Utilities\spDispatch.sys [6144 2004-12-11] (TOSHIBA )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [639224 2006-12-20] ()
R1 SrvcEKIOMngr; C:\Programme\TOSHIBA\E-KEY\EKIoMngr.sys [6400 2004-07-30] (COMPAL ELECTRONIC INC.)
R1 SrvcSSIOMngr; C:\Programme\TOSHIBA\E-KEY\SSIoMngr.sys [6400 2004-07-30] (COMPAL ELECTRONIC INC.)
R1 StickyMesger; C:\Programme\TOSHIBA\Accessibility\StickyMesger.sys [6144 2004-12-10] (TOSHIBA)
R0 TCtrlIO; C:\Windows\System32\drivers\TCtrlIO.sys [6144 2004-12-11] (TOSHIBA )
R1 TPECioCtl; C:\Programme\TOSHIBA\TouchPad\TPECioCtl.sys [6144 2004-12-10] (TOAHIBA, )
R0 TPwSav; C:\Windows\System32\DRIVERS\TPwSav.sys [16128 2004-12-14] (TOSHIBA )
R3 Tvs; C:\Windows\System32\DRIVERS\Tvs.sys [29056 2004-11-26] (TOSHIBA Corporation)
S3 USTOR; C:\Windows\System32\DRIVERS\UStork.sys [21146 2004-11-09] (USB Mass Storage.)
R3 w29n51; C:\Windows\System32\DRIVERS\w29n51.sys [3222784 2004-10-29] (Intel® Corporation)
S3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [224000 2004-11-26] (Marvell)
S3 catchme; \??\C:\DOKUME~1\JOSEFC~1\LOKALE~1\Temp\catchme.sys [x]
U3 TlntSvr; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-04 23:33 - 2013-07-04 23:33 - 00000000 ____D C:\Windows\ERUNT
2013-07-04 23:32 - 2013-07-04 23:32 - 00000000 ____D C:\JRT
2013-07-04 23:25 - 2013-07-05 00:27 - 00000706 ____A C:\AdwCleaner[S2].txt
2013-07-04 16:17 - 2013-07-03 19:59 - 00000210 ____A C:\Boot.bak
2013-07-04 16:16 - 2013-07-04 16:17 - 00000000 RASHD C:\cmdcons
2013-07-04 16:16 - 2004-08-03 23:00 - 00262448 _RASH C:\cmldr
2013-07-04 15:59 - 2013-07-04 16:44 - 00000000 ___SD C:\ComboFix
2013-07-04 15:59 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-04 15:59 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-04 15:59 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-04 15:59 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-04 15:59 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-04 15:59 - 2000-08-31 02:00 - 00212480 ____A (SteelWerX) C:\Windows\SWXCACLS.exe
2013-07-04 15:59 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-04 15:59 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-04 15:59 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-04 15:49 - 2013-07-04 15:59 - 00000000 ____D C:\Qoobox
2013-07-04 15:48 - 2013-07-04 15:48 - 00000000 ____D C:\Windows\erdnt
2013-07-04 13:31 - 2010-07-04 19:07 - 00238952 ____A (Teruten) C:\Windows\System32\FsUsbExService.Exe
2013-07-04 13:31 - 2010-06-14 09:32 - 00110592 ____A () C:\Windows\System32\FsUsbExDevice.Dll
2013-07-04 13:31 - 2010-06-14 09:32 - 00036608 ____A C:\Windows\System32\FsUsbExDisk.Sys
2013-07-04 12:21 - 2013-07-04 12:21 - 00000276 ____A C:\Windows\Tasks\AppleSoftwareUpdate.job
2013-07-04 12:10 - 2013-07-04 12:09 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-07-04 12:10 - 2013-07-04 12:09 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-07-04 12:10 - 2013-07-04 12:09 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-07-04 12:10 - 2013-07-04 12:09 - 00144896 ____A (Oracle Corporation) C:\Windows\System32\javacpl.cpl
2013-07-04 12:10 - 2013-07-04 12:09 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-07-04 11:54 - 2013-07-04 11:54 - 00000000 __HDC C:\Windows\$NtUninstallKB2808679$
2013-07-04 00:18 - 2013-07-04 00:18 - 00000000 ____D C:\_OTL
2013-07-03 22:29 - 2013-07-03 22:29 - 00000000 ____D C:\FRST
2013-07-03 22:09 - 2013-07-03 22:09 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-03 22:09 - 2013-07-03 22:09 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-03 22:09 - 2013-07-03 22:09 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-03 20:09 - 2013-04-04 14:50 - 00022856 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-07-01 21:36 - 2013-07-01 21:30 - 00078848 ____A C:\1031.MST
2013-07-01 21:36 - 2013-07-01 21:30 - 00015904 ____A C:\0x0407.ini
2013-07-01 20:49 - 2013-05-13 05:52 - 00023624 ____A C:\Windows\Launcher.exe
2013-07-01 19:35 - 2013-07-01 19:35 - 00000000 ____D C:\Windows\System32\searchplugins
2013-07-01 19:35 - 2013-07-01 19:35 - 00000000 ____D C:\Windows\System32\Extensions
2013-06-26 10:35 - 2013-06-26 10:35 - 00000000 __HDC C:\Windows\$NtUninstallKB2839229$
2013-06-26 10:25 - 2013-06-26 10:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2820197$
2013-06-26 10:23 - 2013-06-26 10:23 - 00000000 __HDC C:\Windows\$NtUninstallKB2829361$

==================== One Month Modified Files and Folders ========

2013-07-05 17:05 - 2013-03-05 16:03 - 00000432 ___AH C:\Windows\Tasks\User_Feed_Synchronization-{FD17DFBD-04D6-4F8D-92D8-41CA67B86C93}.job
2013-07-05 17:03 - 2010-09-27 13:19 - 00000432 ___AH C:\Windows\Tasks\User_Feed_Synchronization-{FF16EB21-4D3E-4D40-A9B7-20C03EBABCCB}.job
2013-07-05 16:55 - 2004-12-27 14:03 - 00031970 ____A C:\Windows\SchedLgU.Txt
2013-07-05 16:08 - 2013-03-05 22:48 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-05 15:42 - 2009-03-26 18:46 - 00001014 ____A C:\Windows\Tasks\Google Software Updater.job
2013-07-05 14:09 - 2004-12-27 13:52 - 00000000 ____D C:\Programme
2013-07-05 13:34 - 2004-12-27 13:58 - 01230758 ____A C:\Windows\WindowsUpdate.log
2013-07-05 13:29 - 2013-03-09 15:15 - 00000308 ___AH C:\Windows\Tasks\avast! Emergency Update.job
2013-07-05 13:29 - 2004-12-27 13:55 - 00000257 ____A C:\Windows\wiadebug.log
2013-07-05 13:28 - 2004-12-27 13:45 - 00001158 ____A C:\Windows\System32\wpa.dbl
2013-07-05 13:26 - 2004-12-27 14:03 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-05 13:26 - 2004-12-27 13:55 - 00000050 ____A C:\Windows\wiaservc.log
2013-07-05 00:43 - 2005-12-13 20:45 - 00000000 ____D C:\Windows\Minidump
2013-07-05 00:27 - 2013-07-04 23:25 - 00000706 ____A C:\AdwCleaner[S2].txt
2013-07-04 23:33 - 2013-07-04 23:33 - 00000000 ____D C:\Windows\ERUNT
2013-07-04 23:32 - 2013-07-04 23:32 - 00000000 ____D C:\JRT
2013-07-04 16:44 - 2013-07-04 15:59 - 00000000 ___SD C:\ComboFix
2013-07-04 16:17 - 2013-07-04 16:16 - 00000000 RASHD C:\cmdcons
2013-07-04 16:17 - 2004-12-27 13:45 - 00000327 _RASH C:\boot.ini
2013-07-04 15:59 - 2013-07-04 15:49 - 00000000 ____D C:\Qoobox
2013-07-04 15:48 - 2013-07-04 15:48 - 00000000 ____D C:\Windows\erdnt
2013-07-04 15:40 - 2010-09-27 12:53 - 00000000 ____D C:\Windows\System32\NtmsData
2013-07-04 15:39 - 2004-12-27 13:57 - 00000000 ____D C:\Windows\Registration
2013-07-04 12:21 - 2013-07-04 12:21 - 00000276 ____A C:\Windows\Tasks\AppleSoftwareUpdate.job
2013-07-04 12:09 - 2013-07-04 12:10 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-07-04 12:09 - 2013-07-04 12:10 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-07-04 12:09 - 2013-07-04 12:10 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-07-04 12:09 - 2013-07-04 12:10 - 00144896 ____A (Oracle Corporation) C:\Windows\System32\javacpl.cpl
2013-07-04 12:09 - 2013-07-04 12:10 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-07-04 12:09 - 2013-03-05 23:44 - 00867240 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-07-04 12:09 - 2013-03-05 23:44 - 00789416 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-07-04 11:54 - 2013-07-04 11:54 - 00000000 __HDC C:\Windows\$NtUninstallKB2808679$
2013-07-04 00:18 - 2013-07-04 00:18 - 00000000 ____D C:\_OTL
2013-07-03 22:29 - 2013-07-03 22:29 - 00000000 ____D C:\FRST
2013-07-03 22:09 - 2013-07-03 22:09 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-07-03 22:09 - 2013-07-03 22:09 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-07-03 22:09 - 2013-07-03 22:09 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-07-03 22:09 - 2013-03-09 15:15 - 00770344 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-07-03 22:09 - 2013-03-09 15:15 - 00369584 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-07-03 22:09 - 2013-03-09 15:15 - 00175176 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-07-03 22:08 - 2004-12-27 13:59 - 00002951 ___AC C:\Windows\System32\CONFIG.NT
2013-07-03 21:26 - 2009-11-25 13:11 - 00000000 __HDC C:\Windows\$NtUninstallKB976098-v2$
2013-07-03 19:59 - 2013-07-04 16:17 - 00000210 ____A C:\Boot.bak
2013-07-03 19:59 - 2004-12-27 13:45 - 00001091 ____A C:\Windows\win.ini
2013-07-03 19:59 - 2004-12-27 13:45 - 00000227 ____A C:\Windows\system.ini
2013-07-01 21:30 - 2013-07-01 21:36 - 00078848 ____A C:\1031.MST
2013-07-01 21:30 - 2013-07-01 21:36 - 00015904 ____A C:\0x0407.ini
2013-07-01 19:35 - 2013-07-01 19:35 - 00000000 ____D C:\Windows\System32\searchplugins
2013-07-01 19:35 - 2013-07-01 19:35 - 00000000 ____D C:\Windows\System32\Extensions
2013-06-26 15:18 - 2004-12-27 14:08 - 00000000 ____D C:\Windows\Microsoft.NET
2013-06-26 14:53 - 2004-12-27 13:51 - 00233576 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-26 10:45 - 2004-12-27 13:52 - 01141412 ___AC C:\Windows\System32\PerfStringBackup.INI
2013-06-26 10:35 - 2013-06-26 10:35 - 00000000 __HDC C:\Windows\$NtUninstallKB2839229$
2013-06-26 10:25 - 2013-06-26 10:25 - 00000000 __HDC C:\Windows\$NtUninstallKB2820197$
2013-06-26 10:25 - 2004-12-27 14:07 - 00000000 ___HD C:\Windows\$hf_mig$
2013-06-26 10:24 - 2010-09-27 16:25 - 00000000 ____D C:\Windows\ie8updates
2013-06-26 10:23 - 2013-06-26 10:23 - 00000000 __HDC C:\Windows\$NtUninstallKB2829361$
2013-06-20 09:15 - 2013-03-05 22:48 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-20 09:15 - 2013-03-05 22:48 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-12-27 13:44] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e 

C:\Windows\System32\winlogon.exe
[2004-12-27 13:45] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a 

C:\Windows\System32\svchost.exe
[2004-12-27 13:45] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 

C:\Windows\System32\services.exe
[2004-12-27 13:44] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc 

C:\Windows\System32\User32.dll
[2004-12-27 13:45] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd 

C:\Windows\System32\userinit.exe
[2004-12-27 13:45] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 

C:\Windows\System32\Drivers\volsnap.sys
[2004-12-27 13:45] - [2008-04-14 03:52] - 0053760 ___AC (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d 


==================== End Of Log ============================

--- --- ---

Toolbars, BrowserDefender, HomeTab u.a.

Log-Analyse und Auswertung: Toolbars, BrowserDefender, HomeTab u.a.

Toolbars, BrowserDefender, HomeTab u.a.

Toolbars, BrowserDefender, HomeTab u.a.

Ähnliche Themen: Toolbars, BrowserDefender, HomeTab u.a.