|
Plagegeister aller Art und deren Bekämpfung: Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten SeitenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.07.2013, 19:36 | #1 |
| Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten Hallo zusammen, Ich habe seit kurzem in allen möglichen Browsern (Chrome, Mozilla Firefox, Internet Explorer) zusätzliche Werbebanner, die eindeutig nicht von den jeweiligen Seiten kommen, da es immer wieder die selben sind. Teilweise überlagern sie auch den Inhalt der Websiten. Ich benutze das avast! Antivirusprogramm und habe Bitdefender und Malewarebytes Anti-Malware einmal drüber laufen lassen, leider konnte keines der Programme einen Virus oä identifizieren. Kennt ihr evtl das Problem oder habt einen Lösungsvorschlag wie ich die Werbebanner entfernen kann? Vielen Dank für eure Hilfe. Grüße Ivo |
11.07.2013, 19:36 | #2 |
/// the machine /// TB-Ausbilder | Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
11.07.2013, 19:52 | #3 |
| Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten hallo Schrauber, hier die FRST.txt:
__________________Code:
ATTFilter ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (AVAST Software) D:\Programme\AVAST Software\Avast\AvastSvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Cisco Systems, Inc.) D:\Programme\VPN\cvpnd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Spotify Ltd) C:\Users\Julia-Ivo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (AVAST Software) D:\Programme\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Mozilla Corporation) D:\Programme\Mozilla\firefox.exe (Mozilla Corporation) D:\Programme\Mozilla\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12503184 2012-06-11] (Realtek Semiconductor) HKCU\...\Run: [Spotify Web Helper] - "C:\Users\Julia-Ivo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-07-11] (Spotify Ltd) HKCU\...\Run: [AdobeBridge] - [x] HKLM-x32\...\Run: [avast] - "D:\Programme\AVAST Software\Avast\avastUI.exe" /nogui [x] HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) Startup: C:\ProgramData\Start Menu\Programs\Startup\vpngui.exe.lnk ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKLM SearchScopes: DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKLM-x32 SearchScopes: DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 HKCU SearchScopes: DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programme\AVAST Software\Avast\aswWebRepIE64.dll No File BHO-x32: Plus-HD-2.3 - {11111111-1111-1111-1111-110311341126} - C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-bho.dll (Plus HD) BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programme\AVAST Software\Avast\aswWebRepIE.dll No File Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programme\AVAST Software\Avast\aswWebRepIE64.dll No File Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programme\AVAST Software\Avast\aswWebRepIE.dll No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default FF SelectedSearchEngine: Google FF Homepage: google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com FF Extension: Battlefield Play4Free - C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\Extensions\battlefieldplay4free@ea.com FF Extension: Bitdefender QuickScan - C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} FF Extension: No Name - C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] D:\Programme\AVAST Software\Avast\WebRep\FF FF Extension: avast! WebRep - D:\Programme\AVAST Software\Avast\WebRep\FF FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 Chrome: ======= CHR StartMenuInternet: Google Chrome - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 ==================== Services (Whitelisted) ================= R2 avast! Antivirus; D:\Programme\AVAST Software\Avast\AvastSvc.exe [45248 2013-03-07] (AVAST Software) R2 CVPND; D:\Programme\VPN\cvpnd.exe [1528616 2010-03-23] (Cisco Systems, Inc.) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-03-07] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-03-07] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [70992 2013-03-07] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-03-07] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-03-07] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [377920 2013-03-07] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [68920 2013-03-07] (AVAST Software) S3 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178624 2013-03-07] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-11 20:41 - 2013-07-11 20:41 - 00000000 ____D C:\FRST 2013-07-11 20:40 - 2013-07-11 20:41 - 01778065 ____A (Farbar) C:\Users\Julia-Ivo\Downloads\FRST64.exe 2013-07-11 15:39 - 2013-07-11 15:40 - 00009728 __ASH C:\Users\Julia-Ivo\Thumbs.db 2013-07-11 11:19 - 2013-07-11 11:19 - 00000736 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Malwarebytes 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-11 11:19 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-07-11 11:16 - 2013-07-11 11:18 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Julia-Ivo\Downloads\mbam-setup-1.75.0.1300.exe 2013-07-10 21:55 - 2013-07-10 21:55 - 00003056 ____A C:\Windows\System32\Tasks\{007025F1-C8CE-45F6-AD6A-3C83D98FDFE9} 2013-07-10 21:38 - 2013-07-10 23:58 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Skype 2013-07-10 21:38 - 2013-07-10 21:55 - 00000000 ____D C:\ProgramData\Skype 2013-07-10 21:38 - 2013-07-10 21:38 - 00002515 ____A C:\Users\Public\Desktop\Skype.lnk 2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-07-10 21:37 - 2013-07-11 20:36 - 00000304 ____A C:\Windows\Tasks\Dealply.job 2013-07-10 21:37 - 2013-07-11 15:42 - 00001838 ____A C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job 2013-07-10 21:37 - 2013-07-11 15:37 - 00001914 ____A C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job 2013-07-10 21:37 - 2013-07-11 15:37 - 00001206 ____A C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job 2013-07-10 21:37 - 2013-07-11 15:37 - 00001202 ____A C:\Windows\Tasks\Plus-HD-2.3-updater.job 2013-07-10 21:37 - 2013-07-11 15:37 - 00001106 ____A C:\Windows\Tasks\Plus-HD-2.3-enabler.job 2013-07-10 21:37 - 2013-07-11 00:42 - 00000000 ____D C:\Program Files (x86)\DealPlyLive 2013-07-10 21:37 - 2013-07-11 00:09 - 00000000 ____D C:\ProgramData\eSafe 2013-07-10 21:37 - 2013-07-10 21:58 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-07-10 21:37 - 2013-07-10 21:37 - 20586496 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup_6.3.0.105.msi 2013-07-10 21:37 - 2013-07-10 21:37 - 00004236 ____A C:\Windows\System32\Tasks\Plus-HD-2.3-codedownloader 2013-07-10 21:37 - 2013-07-10 21:37 - 00004232 ____A C:\Windows\System32\Tasks\Plus-HD-2.3-updater 2013-07-10 21:37 - 2013-07-10 21:37 - 00004136 ____A C:\Windows\System32\Tasks\Plus-HD-2.3-enabler 2013-07-10 21:37 - 2013-07-10 21:37 - 00003260 ____A C:\Windows\System32\Tasks\Dealply 2013-07-10 21:37 - 2013-07-10 21:37 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Local\DealPlyLive 2013-07-10 21:37 - 2013-07-10 21:37 - 00000000 ____D C:\ProgramData\DealPlyLive 2013-07-10 21:37 - 2013-07-10 21:37 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3 2013-07-10 21:36 - 2013-07-11 00:08 - 00000000 ____D C:\Program Files (x86)\DealPly 2013-07-10 21:36 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\eIntaller 2013-07-10 21:36 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Dealply 2013-07-10 21:34 - 2013-07-10 21:35 - 00607368 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 19233792 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 15404544 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02648064 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\system32\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\system32\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00053760 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-07-08 19:37 - 2013-07-08 19:47 - 00009534 ____A C:\Windows\IE10_main.log 2013-07-08 18:19 - 2013-07-08 18:38 - 00000000 ____D C:\Users\Julia-Ivo\Desktop\Master Themen 2013-06-13 21:37 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-06-13 21:37 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-06-13 21:37 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-13 21:36 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-06-13 21:36 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-06-13 21:36 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-06-13 21:36 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-06-13 21:36 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-13 21:36 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-13 21:36 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-13 21:36 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-06-13 21:36 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-13 21:36 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-13 21:36 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-06-13 21:36 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-13 21:36 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-13 21:36 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-13 21:36 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-06-13 21:36 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\system32\d3d11.dll ==================== One Month Modified Files and Folders ======= 2013-07-11 20:41 - 2013-07-11 20:41 - 00000000 ____D C:\FRST 2013-07-11 20:41 - 2013-07-11 20:40 - 01778065 ____A (Farbar) C:\Users\Julia-Ivo\Downloads\FRST64.exe 2013-07-11 20:36 - 2013-07-10 21:37 - 00000304 ____A C:\Windows\Tasks\Dealply.job 2013-07-11 20:35 - 2012-03-17 01:21 - 00001116 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-11 20:02 - 2012-04-19 10:49 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-11 19:35 - 2012-03-17 01:21 - 00001112 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-11 15:42 - 2013-07-10 21:37 - 00001838 ____A C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job 2013-07-11 15:40 - 2013-07-11 15:39 - 00009728 __ASH C:\Users\Julia-Ivo\Thumbs.db 2013-07-11 15:39 - 2012-03-17 00:43 - 00000000 ____D C:\Users\Julia-Ivo 2013-07-11 15:37 - 2013-07-10 21:37 - 00001914 ____A C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job 2013-07-11 15:37 - 2013-07-10 21:37 - 00001206 ____A C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job 2013-07-11 15:37 - 2013-07-10 21:37 - 00001202 ____A C:\Windows\Tasks\Plus-HD-2.3-updater.job 2013-07-11 15:37 - 2013-07-10 21:37 - 00001106 ____A C:\Windows\Tasks\Plus-HD-2.3-enabler.job 2013-07-11 13:08 - 2012-03-17 00:42 - 01277460 ____A C:\Windows\WindowsUpdate.log 2013-07-11 11:34 - 2009-07-14 06:45 - 00015280 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-11 11:34 - 2009-07-14 06:45 - 00015280 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-11 11:31 - 2009-07-14 19:58 - 00654400 ____A C:\Windows\system32\perfh007.dat 2013-07-11 11:31 - 2009-07-14 19:58 - 00130240 ____A C:\Windows\system32\perfc007.dat 2013-07-11 11:31 - 2009-07-14 07:13 - 01498742 ____A C:\Windows\system32\PerfStringBackup.INI 2013-07-11 11:26 - 2012-03-19 17:49 - 00006616 ____A C:\Windows\PFRO.log 2013-07-11 11:26 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-11 11:26 - 2009-07-14 06:51 - 00062193 ____A C:\Windows\setupact.log 2013-07-11 11:19 - 2013-07-11 11:19 - 00000736 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Malwarebytes 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-11 11:18 - 2013-07-11 11:16 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Julia-Ivo\Downloads\mbam-setup-1.75.0.1300.exe 2013-07-11 00:42 - 2013-07-10 21:37 - 00000000 ____D C:\Program Files (x86)\DealPlyLive 2013-07-11 00:31 - 2012-03-19 14:27 - 00000000 ____D C:\Users\Julia-Ivo\Documents\StarCraft II 2013-07-11 00:30 - 2012-12-24 13:03 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Spotify 2013-07-11 00:23 - 2013-03-31 18:28 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\QuickScan 2013-07-11 00:12 - 2012-03-17 02:09 - 00000731 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-07-11 00:09 - 2013-07-10 21:37 - 00000000 ____D C:\ProgramData\eSafe 2013-07-11 00:08 - 2013-07-10 21:36 - 00000000 ____D C:\Program Files (x86)\DealPly 2013-07-10 23:58 - 2013-07-10 21:38 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Skype 2013-07-10 21:58 - 2013-07-10 21:37 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-07-10 21:55 - 2013-07-10 21:55 - 00003056 ____A C:\Windows\System32\Tasks\{007025F1-C8CE-45F6-AD6A-3C83D98FDFE9} 2013-07-10 21:55 - 2013-07-10 21:38 - 00000000 ____D C:\ProgramData\Skype 2013-07-10 21:38 - 2013-07-10 21:38 - 00002515 ____A C:\Users\Public\Desktop\Skype.lnk 2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-07-10 21:37 - 2013-07-10 21:37 - 20586496 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup_6.3.0.105.msi 2013-07-10 21:37 - 2013-07-10 21:37 - 00004236 ____A C:\Windows\System32\Tasks\Plus-HD-2.3-codedownloader 2013-07-10 21:37 - 2013-07-10 21:37 - 00004232 ____A C:\Windows\System32\Tasks\Plus-HD-2.3-updater 2013-07-10 21:37 - 2013-07-10 21:37 - 00004136 ____A C:\Windows\System32\Tasks\Plus-HD-2.3-enabler 2013-07-10 21:37 - 2013-07-10 21:37 - 00003260 ____A C:\Windows\System32\Tasks\Dealply 2013-07-10 21:37 - 2013-07-10 21:37 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Local\DealPlyLive 2013-07-10 21:37 - 2013-07-10 21:37 - 00000000 ____D C:\ProgramData\DealPlyLive 2013-07-10 21:37 - 2013-07-10 21:37 - 00000000 ____D C:\Program Files (x86)\Plus-HD-2.3 2013-07-10 21:37 - 2012-10-08 14:20 - 00002421 ____A C:\Users\Public\Desktop\Google Chrome.lnk 2013-07-10 21:37 - 2012-03-17 00:43 - 00001675 ____A C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-07-10 21:36 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\eIntaller 2013-07-10 21:36 - 2013-07-10 21:36 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Dealply 2013-07-10 21:35 - 2013-07-10 21:34 - 00607368 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup.exe 2013-07-09 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-07-09 13:09 - 2012-12-24 13:11 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Local\Spotify 2013-07-08 23:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-07-08 19:47 - 2013-07-08 19:37 - 00009534 ____A C:\Windows\IE10_main.log 2013-07-08 19:42 - 2013-07-08 19:42 - 19233792 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 15404544 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02648064 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\system32\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\system32\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00053760 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-07-08 19:30 - 2012-03-17 01:21 - 00004112 ____A C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-07-08 19:30 - 2012-03-17 01:21 - 00003860 ____A C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-07-08 18:38 - 2013-07-08 18:19 - 00000000 ____D C:\Users\Julia-Ivo\Desktop\Master Themen 2013-06-15 18:02 - 2012-04-19 10:49 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-15 18:02 - 2012-04-19 10:49 - 00003822 ____A C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-06-15 18:02 - 2012-03-17 00:57 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-13 22:57 - 2012-03-17 18:20 - 75825640 ____A (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-08 17:26 ==================== End Of Log ============================ Code:
ATTFilter ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe AIR (x32 Version: 3.6.0.5970) Adobe Download Assistant (x32 Version: 1.2.5) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Adobe Shockwave Player 11.6 (x32 Version: 11.6.7.637) Audacity 2.0.2 (x32 Version: 2.0.2) avast! Free Antivirus (x32 Version: 8.0.1483.0) Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7) Dropbox (HKCU Version: 1.6.16) GOM Player (x32 Version: 2.1.39.5101) GOMTV Streamer (x32 Version: 1.0.0.26) Google Chrome (x32 Version: 27.0.1453.116) Google Update Helper (x32 Version: 1.3.21.149) League of Legends (x32 Version: 1.3) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Mozilla Firefox 11.0 (x86 de) (x32 Version: 11.0) Mozilla Firefox 22.0 (x86 de) (HKCU Version: 22.0) Plus-HD-2.3 (x32 Version: 1.27.153.8) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662) rosoft .NET Framework 4 Client Profile (Version: 4.0.30319) Skype™ 6.3 (x32 Version: 6.3.105) Spotify (HKCU Version: 0.9.1.57.ge7405149) StarCraft II (x32 Version: 2.0.9.26147) swMSM (x32 Version: 12.0.0.1) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) World of Warcraft (x32 Version: 5.1.0.16357) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044E40A8-BD4D-4A16-8159-3E5689442FD0} - System32\Tasks\Plus-HD-2.3-codedownloader => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-07-10] (Plus HD) Task: {227894E7-5A2C-4757-A806-8879FBA16307} - System32\Tasks\Plus-HD-2.3-enabler => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-07-10] (Plus HD) Task: {27581416-32F6-4F3F-AF0B-3DF6E3A761CD} - System32\Tasks\Plus-HD-2.3-firefoxinstaller => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe [2013-07-10] (Plus HD) Task: {2FA33E02-F1D6-4ADA-AE05-C9E687F1E76F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-17] (Google Inc.) Task: {4A8E752A-999B-4FF5-A71B-02BA03A52F19} - System32\Tasks\Dealply => C:\Users\JULIA-~1\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE [2013-07-10] () Task: {4B98CBBA-00C3-4EF3-A198-B90869152DE8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-15] (Adobe Systems Incorporated) Task: {6A564415-7724-44DD-8077-C66A84E555B6} - System32\Tasks\Plus-HD-2.3-chromeinstaller => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe [2013-07-10] (Plus HD) Task: {98F0A5CF-7504-4283-9B2C-6BFC61617137} - System32\Tasks\{007025F1-C8CE-45F6-AD6A-3C83D98FDFE9} => C:\programme\mozilla\firefox.exe No File Task: {9D76D12B-92D2-4687-94E5-F982D52E6C38} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-17] (Google Inc.) Task: {BB0828F6-409A-4FAA-B2FE-C1B4323515A7} - System32\Tasks\avast! Emergency Update => C:\Programme\AVAST Software\Avast\AvastEmUpdate.exe No File Task: {D0EA8885-CA83-4B65-816E-728953B825B2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {DF810C23-3623-4525-9752-FB0763E7AFF2} - System32\Tasks\Plus-HD-2.3-updater => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-07-10] (Plus HD) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Dealply.job => ? Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe Task: C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe Task: C:\Windows\Tasks\Plus-HD-2.3-enabler.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe Task: C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe Task: C:\Windows\Tasks\Plus-HD-2.3-updater.job => C:\Program Files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (07/11/2013 00:09:12 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f Ausnahmecode: 0x80000003 Fehleroffset: 0x0005801d ID des fehlerhaften Prozesses: 0x12d0 Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0 Pfad der fehlerhaften Anwendung: LolClient.exe1 Pfad des fehlerhaften Moduls: LolClient.exe2 Berichtskennung: LolClient.exe3 Error: (07/10/2013 09:55:56 PM) (Source: MsiInstaller) (User: Julia-Ivo-PC) Description: Product: Skype™ 6.6 -- Error 1316. A network error occurred while attempting to read from the file: C:\ProgramData\Skype\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeSetup_6.3.0.105.msi Error: (07/10/2013 09:37:25 PM) (Source: MsiInstaller) (User: Julia-Ivo-PC) Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\GoogleUpdateHelper.msi Error: (04/07/2013 02:21:04 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 19.0.2.4814, Zeitstempel: 0x5138a1d3 Name des fehlerhaften Moduls: xul.dll, Version: 19.0.2.4814, Zeitstempel: 0x5138a0ed Ausnahmecode: 0xc0000005 Fehleroffset: 0x00172818 ID des fehlerhaften Prozesses: 0xea4 Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0 Pfad der fehlerhaften Anwendung: firefox.exe1 Pfad des fehlerhaften Moduls: firefox.exe2 Berichtskennung: firefox.exe3 Error: (04/05/2013 03:42:05 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (04/01/2013 00:02:41 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 19.0.2.4814, Zeitstempel: 0x5138a1d3 Name des fehlerhaften Moduls: xul.dll, Version: 19.0.2.4814, Zeitstempel: 0x5138a0ed Ausnahmecode: 0xc0000005 Fehleroffset: 0x00172818 ID des fehlerhaften Prozesses: 0x10ac Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0 Pfad der fehlerhaften Anwendung: firefox.exe1 Pfad des fehlerhaften Moduls: firefox.exe2 Berichtskennung: firefox.exe3 Error: (03/28/2013 05:44:37 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac Ausnahmecode: 0xc0000005 Fehleroffset: 0x00019362 ID des fehlerhaften Prozesses: 0x14e8 Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0 Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1 Pfad des fehlerhaften Moduls: rads_user_kernel.exe2 Berichtskennung: rads_user_kernel.exe3 Error: (03/28/2013 01:41:09 PM) (Source: Application Hang) (User: ) Description: Programm StarCraft II.exe, Version 2.1.2.2748 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 10ac Startzeit: 01ce2ba8cf063550 Endzeit: 0 Anwendungspfad: D:\Programme\StarCraft II\StarCraft II.exe Berichts-ID: 54b03a08-979c-11e2-82bf-b8ac6f5010f9 Error: (03/20/2013 03:04:56 PM) (Source: ESENT) (User: ) Description: WinMail (3016) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde. Error: (03/20/2013 03:04:48 PM) (Source: ESENT) (User: ) Description: WinMail (2544) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde. System errors: ============= Error: (07/11/2013 08:41:52 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (07/11/2013 02:09:15 PM) (Source: NetBT) (User: ) Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.2.100 registriert werden. Der Computer mit IP-Adresse 192.168.2.1 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (07/11/2013 02:08:54 PM) (Source: atikmdag) (User: ) Description: Display is not active Error: (07/11/2013 11:26:39 AM) (Source: atikmdag) (User: ) Description: Display is not active Error: (07/11/2013 11:26:39 AM) (Source: atikmdag) (User: ) Description: CPLIB :: General - Invalid Parameter Error: (07/11/2013 11:10:11 AM) (Source: atikmdag) (User: ) Description: Display is not active Error: (07/11/2013 11:10:11 AM) (Source: atikmdag) (User: ) Description: CPLIB :: General - Invalid Parameter Error: (07/11/2013 01:13:03 AM) (Source: Microsoft-Windows-Kernel-Power) (User: NT-AUTORITÄT) Description: Das System wurde aufgrund eines kritischen thermischen Ereignisses heruntergefahren. Zeit für das Herunterfahren = 2013-07-10T23:13:03.385184800Z ACPI-Thermozone = ACPI\ThermalZone\TZ00 _CRT = 373K Error: (07/11/2013 01:13:03 AM) (Source: Microsoft-Windows-Kernel-Power) (User: NT-AUTORITÄT) Description: Das System wurde aufgrund eines kritischen thermischen Ereignisses heruntergefahren. Zeit für das Herunterfahren = 2013-07-10T23:13:03.385184800Z ACPI-Thermozone = ACPI\ThermalZone\TZ00 _CRT = 373K Error: (07/11/2013 01:12:21 AM) (Source: atikmdag) (User: ) Description: Display is not active Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 49% Total physical RAM: 3956.54 MB Available physical RAM: 2004.16 MB Total Pagefile: 7911.26 MB Available Pagefile: 5780.41 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:58.59 GB) (Free:11.08 GB) NTFS (Disk=0 Partition=3) Drive d: () (Fixed) (Total:229.63 GB) (Free:178.72 GB) NTFS (Disk=0 Partition=4) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 2DA43A6F) Partition 1: (Not Active) - (Size=100 MB) - (Type=DE) Partition 2: (Active) - (Size=10 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=59 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=230 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
12.07.2013, 09:37 | #4 |
/// the machine /// TB-Ausbilder | Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 10:50 | #5 |
| Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten ok, hier sind jetzt die Textdatei von AdwCleaner: Code:
ATTFilter **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk Datei Desinfiziert : C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Datei Desinfiziert : C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Datei Desinfiziert : C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk Datei Desinfiziert : C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Datei Desinfiziert : C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Datei Desinfiziert : C:\Users\Public\Desktop\Google Chrome.lnk Datei Gelöscht : C:\Windows\Tasks\Dealply.job Datei Gelöscht : C:\Windows\tasks\Plus-HD-2.3-chromeinstaller.job Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-enabler.job Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.3-updater.job Ordner Gelöscht : C:\Program Files (x86)\DealPly Ordner Gelöscht : C:\Program Files (x86)\DealPlyLive Ordner Gelöscht : C:\Program Files (x86)\optimizer pro Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-2.3 Ordner Gelöscht : C:\ProgramData\DealPlyLive Ordner Gelöscht : C:\ProgramData\eSafe Ordner Gelöscht : C:\Users\Julia-Ivo\AppData\Local\DealPlyLive Ordner Gelöscht : C:\Users\Julia-Ivo\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec Ordner Gelöscht : C:\Users\Julia-Ivo\AppData\Roaming\DealPly Ordner Gelöscht : C:\Users\Julia-Ivo\AppData\Roaming\eIntaller ***** [Registrierungsdatenbank] ***** Daten Gelöscht : HKLM\...\StartMenuInternet\FIREFOX.EXE [(Default)] = D:\Programme\Mozilla\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 Daten Gelöscht : HKLM\...\StartMenuInternet\Google Chrome [(Default)] = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 Daten Gelöscht : HKLM\...\StartMenuInternet\IEXPLORE.EXE [(Default)] = C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.BHO Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.BHO.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0033426.Sandbox.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344344426} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341126} Schlüssel Gelöscht : HKLM\Software\qvo6Software Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110311341126} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220322342226} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550355345526} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660366346626} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341126} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345526} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346626} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16618 Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 --> hxxp://www.google.com Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD3200BEVT-75ZCT2_WD-WXL0AC92017120171&ts=1373485026 --> hxxp://www.google.com -\\ Mozilla Firefox v11.0 (de) Datei : C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\prefs.js Gelöscht : user_pref("browser.search.defaultenginename", "qvo6"); Gelöscht : user_pref("browser.search.order.1", "qvo6"); -\\ Google Chrome v27.0.1453.116 Datei : C:\Users\Julia-Ivo\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[S1].txt - [6735 octets] - [12/07/2013 11:24:13] ########## EOF - C:\AdwCleaner[S1].txt - [6795 octets] ########## Code:
ATTFilter ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dealplylive Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dealplylive Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\windows nt\currentversion\image file execution options\dealplylive.exe ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 12.07.2013 at 11:42:36,91 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (AVAST Software) D:\Programme\AVAST Software\Avast\AvastSvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Cisco Systems, Inc.) D:\Programme\VPN\cvpnd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Spotify Ltd) C:\Users\Julia-Ivo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (AVAST Software) D:\Programme\AVAST Software\Avast\AvastUI.exe (Mozilla Corporation) D:\Programme\Mozilla\firefox.exe (Mozilla Corporation) D:\Programme\Mozilla\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12503184 2012-06-11] (Realtek Semiconductor) HKCU\...\Run: [Spotify Web Helper] - "C:\Users\Julia-Ivo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-07-11] (Spotify Ltd) HKCU\...\Run: [AdobeBridge] - [x] HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 HKLM-x32\...\Run: [avast] - "D:\Programme\AVAST Software\Avast\avastUI.exe" /nogui [x] HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) Startup: C:\ProgramData\Start Menu\Programs\Startup\vpngui.exe.lnk ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe" BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programme\AVAST Software\Avast\aswWebRepIE64.dll No File BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programme\AVAST Software\Avast\aswWebRepIE.dll No File Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programme\AVAST Software\Avast\aswWebRepIE64.dll No File Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programme\AVAST Software\Avast\aswWebRepIE.dll No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default FF SelectedSearchEngine: Google FF Homepage: google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Battlefield Play4Free - C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\Extensions\battlefieldplay4free@ea.com FF Extension: Bitdefender QuickScan - C:\Users\Julia-Ivo\AppData\Roaming\Mozilla\Firefox\Profiles\95odnhuu.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] D:\Programme\AVAST Software\Avast\WebRep\FF FF Extension: avast! WebRep - D:\Programme\AVAST Software\Avast\WebRep\FF FF StartMenuInternet: FIREFOX.EXE - "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" Chrome: ======= ==================== Services (Whitelisted) ================= R2 avast! Antivirus; D:\Programme\AVAST Software\Avast\AvastSvc.exe [45248 2013-03-07] (AVAST Software) R2 CVPND; D:\Programme\VPN\cvpnd.exe [1528616 2010-03-23] (Cisco Systems, Inc.) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-03-07] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-03-07] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [70992 2013-03-07] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-03-07] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-03-07] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [377920 2013-03-07] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [68920 2013-03-07] (AVAST Software) S3 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178624 2013-03-07] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-12 11:42 - 2013-07-12 11:42 - 00000933 ____A C:\Users\Julia-Ivo\Desktop\JRT.txt 2013-07-12 11:30 - 2013-07-12 11:30 - 00000000 ____D C:\Windows\ERUNT 2013-07-12 11:29 - 2013-07-12 11:29 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\Julia-Ivo\Downloads\JRT.exe 2013-07-12 11:24 - 2013-07-12 11:24 - 00006852 ____A C:\AdwCleaner[S1].txt 2013-07-12 11:22 - 2013-07-12 11:23 - 00662345 ____A C:\Users\Julia-Ivo\Downloads\adwcleaner.exe 2013-07-11 20:46 - 2013-07-11 20:46 - 00043511 ____A C:\Users\Julia-Ivo\Desktop\FRST.txt 2013-07-11 20:46 - 2013-07-11 20:46 - 00016108 ____A C:\Users\Julia-Ivo\Desktop\Addition.txt 2013-07-11 20:44 - 2013-07-11 20:45 - 00016108 ____A C:\Users\Julia-Ivo\Downloads\Addition.txt 2013-07-11 20:41 - 2013-07-11 20:41 - 00000000 ____D C:\FRST 2013-07-11 20:40 - 2013-07-11 20:41 - 01778065 ____A (Farbar) C:\Users\Julia-Ivo\Downloads\FRST64.exe 2013-07-11 15:39 - 2013-07-11 15:40 - 00009728 __ASH C:\Users\Julia-Ivo\Thumbs.db 2013-07-11 11:19 - 2013-07-11 11:19 - 00000736 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Malwarebytes 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-11 11:19 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-07-11 11:16 - 2013-07-11 11:18 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Julia-Ivo\Downloads\mbam-setup-1.75.0.1300.exe 2013-07-10 21:55 - 2013-07-10 21:55 - 00003056 ____A C:\Windows\System32\Tasks\{007025F1-C8CE-45F6-AD6A-3C83D98FDFE9} 2013-07-10 21:38 - 2013-07-10 23:58 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Skype 2013-07-10 21:38 - 2013-07-10 21:55 - 00000000 ____D C:\ProgramData\Skype 2013-07-10 21:38 - 2013-07-10 21:38 - 00002515 ____A C:\Users\Public\Desktop\Skype.lnk 2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-07-10 21:37 - 2013-07-10 21:37 - 20586496 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup_6.3.0.105.msi 2013-07-10 21:34 - 2013-07-10 21:35 - 00607368 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 19233792 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 15404544 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02648064 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\system32\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\system32\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00053760 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-07-08 19:37 - 2013-07-08 19:47 - 00009534 ____A C:\Windows\IE10_main.log 2013-07-08 18:19 - 2013-07-08 18:38 - 00000000 ____D C:\Users\Julia-Ivo\Desktop\Master Themen 2013-06-13 21:37 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-06-13 21:37 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2013-06-13 21:37 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-13 21:36 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-06-13 21:36 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-06-13 21:36 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-06-13 21:36 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\certenc.dll 2013-06-13 21:36 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-13 21:36 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-13 21:36 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-13 21:36 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\system32\certutil.exe 2013-06-13 21:36 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-13 21:36 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-13 21:36 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-06-13 21:36 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-13 21:36 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-13 21:36 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-13 21:36 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-06-13 21:36 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\system32\d3d11.dll ==================== One Month Modified Files and Folders ======= 2013-07-12 11:44 - 2012-10-08 14:20 - 00002183 ____A C:\Users\Public\Desktop\Google Chrome.lnk 2013-07-12 11:44 - 2012-03-17 01:21 - 00001116 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-12 11:42 - 2013-07-12 11:42 - 00000933 ____A C:\Users\Julia-Ivo\Desktop\JRT.txt 2013-07-12 11:40 - 2012-03-17 00:42 - 01633798 ____A C:\Windows\WindowsUpdate.log 2013-07-12 11:33 - 2009-07-14 06:45 - 00015280 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-12 11:33 - 2009-07-14 06:45 - 00015280 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-12 11:32 - 2009-07-14 19:58 - 00654400 ____A C:\Windows\system32\perfh007.dat 2013-07-12 11:32 - 2009-07-14 19:58 - 00130240 ____A C:\Windows\system32\perfc007.dat 2013-07-12 11:32 - 2009-07-14 07:13 - 01498742 ____A C:\Windows\system32\PerfStringBackup.INI 2013-07-12 11:30 - 2013-07-12 11:30 - 00000000 ____D C:\Windows\ERUNT 2013-07-12 11:29 - 2013-07-12 11:29 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\Julia-Ivo\Downloads\JRT.exe 2013-07-12 11:26 - 2012-03-17 01:21 - 00001112 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-12 11:26 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-12 11:26 - 2009-07-14 06:51 - 00062305 ____A C:\Windows\setupact.log 2013-07-12 11:24 - 2013-07-12 11:24 - 00006852 ____A C:\AdwCleaner[S1].txt 2013-07-12 11:24 - 2012-03-17 00:43 - 00001003 ____A C:\Users\Julia-Ivo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-07-12 11:23 - 2013-07-12 11:22 - 00662345 ____A C:\Users\Julia-Ivo\Downloads\adwcleaner.exe 2013-07-11 22:02 - 2012-04-19 10:49 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-11 20:46 - 2013-07-11 20:46 - 00043511 ____A C:\Users\Julia-Ivo\Desktop\FRST.txt 2013-07-11 20:46 - 2013-07-11 20:46 - 00016108 ____A C:\Users\Julia-Ivo\Desktop\Addition.txt 2013-07-11 20:45 - 2013-07-11 20:44 - 00016108 ____A C:\Users\Julia-Ivo\Downloads\Addition.txt 2013-07-11 20:41 - 2013-07-11 20:41 - 00000000 ____D C:\FRST 2013-07-11 20:41 - 2013-07-11 20:40 - 01778065 ____A (Farbar) C:\Users\Julia-Ivo\Downloads\FRST64.exe 2013-07-11 15:40 - 2013-07-11 15:39 - 00009728 __ASH C:\Users\Julia-Ivo\Thumbs.db 2013-07-11 15:39 - 2012-03-17 00:43 - 00000000 ____D C:\Users\Julia-Ivo 2013-07-11 11:26 - 2012-03-19 17:49 - 00006616 ____A C:\Windows\PFRO.log 2013-07-11 11:19 - 2013-07-11 11:19 - 00000736 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Malwarebytes 2013-07-11 11:19 - 2013-07-11 11:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-11 11:18 - 2013-07-11 11:16 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\Julia-Ivo\Downloads\mbam-setup-1.75.0.1300.exe 2013-07-11 00:31 - 2012-03-19 14:27 - 00000000 ____D C:\Users\Julia-Ivo\Documents\StarCraft II 2013-07-11 00:30 - 2012-12-24 13:03 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Spotify 2013-07-11 00:23 - 2013-03-31 18:28 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\QuickScan 2013-07-11 00:12 - 2012-03-17 02:09 - 00000731 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-07-10 23:58 - 2013-07-10 21:38 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Roaming\Skype 2013-07-10 21:55 - 2013-07-10 21:55 - 00003056 ____A C:\Windows\System32\Tasks\{007025F1-C8CE-45F6-AD6A-3C83D98FDFE9} 2013-07-10 21:55 - 2013-07-10 21:38 - 00000000 ____D C:\ProgramData\Skype 2013-07-10 21:38 - 2013-07-10 21:38 - 00002515 ____A C:\Users\Public\Desktop\Skype.lnk 2013-07-10 21:38 - 2013-07-10 21:38 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-07-10 21:37 - 2013-07-10 21:37 - 20586496 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup_6.3.0.105.msi 2013-07-10 21:35 - 2013-07-10 21:34 - 00607368 ____A C:\Users\Julia-Ivo\Downloads\SkypeSetup.exe 2013-07-09 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-07-09 13:09 - 2012-12-24 13:11 - 00000000 ____D C:\Users\Julia-Ivo\AppData\Local\Spotify 2013-07-08 23:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-07-08 19:47 - 2013-07-08 19:37 - 00009534 ____A C:\Windows\IE10_main.log 2013-07-08 19:42 - 2013-07-08 19:42 - 19233792 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 15404544 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 03958784 ____A (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-08 19:42 - 2013-07-08 19:42 - 02648064 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02241024 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01509376 ____A (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01400416 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-07-08 19:42 - 2013-07-08 19:42 - 01365504 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 01054720 ____A (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00905728 ____A (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00855552 ____A (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00762368 ____A (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00603136 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00599552 ____A (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00526336 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00452096 ____A (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00441856 ____A (Microsoft Corporation) C:\Windows\system32\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-07-08 19:42 - 2013-07-08 19:42 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00281600 ____A (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00270848 ____A (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00247296 ____A (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00235008 ____A (Microsoft Corporation) C:\Windows\system32\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00226304 ____A (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00216064 ____A (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00197120 ____A (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00173568 ____A (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00167424 ____A (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00149504 ____A (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00144896 ____A (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00136704 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00136192 ____A (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00135680 ____A (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00102912 ____A (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00097280 ____A (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00092160 ____A (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00089600 ____A (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00081408 ____A (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00077312 ____A (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00062976 ____A (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-07-08 19:42 - 2013-07-08 19:42 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00053760 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00052224 ____A (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00051712 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00051200 ____A (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00048640 ____A (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00039936 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00027648 ____A (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-07-08 19:42 - 2013-07-08 19:42 - 00013824 ____A (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00012800 ____A (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-07-08 19:42 - 2013-07-08 19:42 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-07-08 19:30 - 2012-03-17 01:21 - 00004112 ____A C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-07-08 19:30 - 2012-03-17 01:21 - 00003860 ____A C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-07-08 18:38 - 2013-07-08 18:19 - 00000000 ____D C:\Users\Julia-Ivo\Desktop\Master Themen 2013-06-15 18:02 - 2012-04-19 10:49 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-15 18:02 - 2012-04-19 10:49 - 00003822 ____A C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-06-15 18:02 - 2012-03-17 00:57 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-13 22:57 - 2012-03-17 18:20 - 75825640 ____A (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-08 17:26 ==================== End Of Log ============================ |
12.07.2013, 11:26 | #6 |
/// the machine /// TB-Ausbilder | Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten Supi, achte bitte drauf, du postest die FRST.txt immer ohne Kopf. ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten |
Themen zu Virus(?) schaltet zusätzliche Werbung im Browser auf den meisten Seiten |
anti-malware, avast, bitdefender, browser, defender, entfernen, explorer, firefox, hallo zusammen, inhalt, interne, internet, internet explorer, mozilla, mögliche, problem, programme, schaltet, seite, seiten, virus, website, werbung, werbung im browser, zusammen, zusätzliche |