|
Log-Analyse und Auswertung: Fehlermeldung "Server ist ausgelastet"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.07.2013, 09:35 | #16 |
/// the machine /// TB-Ausbilder | Fehlermeldung "Server ist ausgelastet" Hier posten, ich muss das sehen, dann den Rest obiger Anleitung
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.07.2013, 20:41 | #17 |
| Fehlermeldung "Server ist ausgelastet" Wo finde ich das Logfile zu dem MSE-Scan? Wenn ich unter C:\Programme (x86)\
__________________in allen Microsoft-Ordnern schaue, finde ich kein log. Oder reicht das hier: Trojan:JS/Seedabutor.A Code:
ATTFilter Kategorie: Trojaner Beschreibung: Dieses Programm ist gefährlich. Es führt Befehle eines Angreifers aus. Empfohlene Aktion: Entfernen Sie diese Software unverzüglich. Elemente: file:D:\TOBIAS-PC\Backup Set 2011-11-20 194625\Backup Files 2011-11-27 190001\Backup files 6.zip file:D:\TOBIAS-PC\Backup Set 2011-12-11 193338\Backup Files 2011-12-11 193338\Backup files 9.zip Code:
ATTFilter Kategorie: Wurm Beschreibung: Dieses Programm ist gefährlich. Es verbreitet sich selbst über eine Netzwerkverbindung. Empfohlene Aktion: Entfernen Sie diese Software unverzüglich. Elemente: file:D:\TOBIAS-PC\Backup Set 2011-10-05 182604\Backup Files 2011-10-09 190000\Backup files 1.zip Code:
ATTFilter Kategorie: Exploit Beschreibung: Dieses Programm ist gefährlich. Es nutzt die Sicherheitslücken eines Computers aus. Empfohlene Aktion: Entfernen Sie diese Software unverzüglich. Elemente: file:D:\TOBIAS-PC\Backup Set 2011-10-05 182604\Backup Files 2011-10-05 182604\Backup files 20.zip file:D:\TOBIAS-PC\Backup Set 2011-10-26 145844\Backup Files 2011-10-26 145844\Backup files 20.zip file:D:\TOBIAS-PC\Backup Set 2011-11-20 194625\Backup Files 2011-11-20 194625\Backup files 20.zip Code:
ATTFilter Kategorie: Exploit Beschreibung: Dieses Programm ist gefährlich. Es nutzt die Sicherheitslücken eines Computers aus. Empfohlene Aktion: Entfernen Sie diese Software unverzüglich. Elemente: file:D:\TOBIAS-PC\Backup Set 2011-10-05 182604\Backup Files 2011-10-05 182604\Backup files 19.zip file:D:\TOBIAS-PC\Backup Set 2011-10-26 145844\Backup Files 2011-10-26 145844\Backup files 19.zip file:D:\TOBIAS-PC\Backup Set 2011-11-20 194625\Backup Files 2011-11-20 194625\Backup files 19.zip Vielen Dank |
25.07.2013, 07:33 | #18 |
/// the machine /// TB-Ausbilder | Fehlermeldung "Server ist ausgelastet" Alles nur im Backup. Das Backup würd eich löschen.
__________________Dann jetzt ein frisches FRST log bitte. Noch Probleme?
__________________ |
25.07.2013, 10:07 | #19 |
| Fehlermeldung "Server ist ausgelastet" Wo finde ich die alten Backups? Unter D:\ Finde ich nur das aktuellste Backup. |
25.07.2013, 12:26 | #20 | |
/// the machine /// TB-Ausbilder | Fehlermeldung "Server ist ausgelastet"Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
25.07.2013, 12:50 | #21 |
| Fehlermeldung "Server ist ausgelastet" Achso Ok, hab ich gemacht. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-07-2013 (ATTENTION: FRST version is 7 days old) Ran by Tobias (administrator) on 25-07-2013 13:45:23 Running from C:\Users\Tobias\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\AMSP_LogServer.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe () C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe (Absolute Software Corp.) C:\Windows\SysWOW64\rpcnet.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Google Inc.) C:\Users\Tobias\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tobias\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tobias\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tobias\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tobias\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tobias\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\system32\wbengine.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Farbar) C:\Users\Tobias\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-17] () HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-13] (ELAN Microelectronics Corp.) HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-13] (Trend Micro Inc.) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation) HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC) HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-07-13] () HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18679400 2013-05-09] (Skype Technologies S.A.) HKCU\...\Run: [KPeerNexonEU] - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-07-15] (NEXON Inc.) HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS) HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] () HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S [734544 2011-03-22] (ecareme) HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN [2621440 2010-02-09] (Brother Industries, Ltd.) HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-11-28] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152544 2012-12-12] (Apple Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [35736 2011-01-30] (Adobe Systems Incorporated) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [226920 2011-02-19] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [192616 2011-02-19] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe () Startup: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.facebook.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - !!{98889811-442D-49dd-99D7-DC866BE87DBC} - No File Toolbar: HKLM-x32 - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File Toolbar: HKLM-x32 - No Name - !!{98889811-442D-49dd-99D7-DC866BE87DBC} - No File DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\l91xn1wk.default FF SelectedSearchEngine: Google FF Homepage: hxxp://google.de/ FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_268.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Tobias\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Tobias\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Tobias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: electronicarts.com/GameFacePlugin - C:\Users\Tobias\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll (Electronic Arts) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} Chrome: ======= CHR RestoreOnStartup: "hxxp://www.facebook.com/" CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Users\Tobias\AppData\Local\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Tobias\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Tobias\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll () CHR Plugin: (SweetIM GC Helper) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\mgHelperGCFB.dll No File CHR Plugin: (Skype Click to Call) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\npSkypeChromePlugin.dll No File CHR Plugin: (SweetIM GC Helper) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.0.0.1_0\mgHelperGC.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Unity Player) - C:\Users\Tobias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll () CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Drive) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.2_0 CHR Extension: (Google Search) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2010-11-13] (CyberLink) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation) R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2565632 2011-10-24] (Deutsche Telekom AG) S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [x] ==================== Drivers (Whitelisted) ==================== R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( ) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation) S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.) S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] () S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-24 11:28 - 2013-07-24 11:28 - 00000466 _____ C:\Users\Tobias\Downloads\DATA (D) - Verknüpfung.lnk 2013-07-21 16:11 - 2013-07-21 16:11 - 02347384 _____ (ESET) C:\Users\Tobias\Downloads\esetsmartinstaller_enu.exe 2013-07-20 09:33 - 2013-07-20 09:33 - 00007598 _____ C:\Users\Tobias\AppData\Local\Resmon.ResmonCfg 2013-07-19 13:45 - 2013-07-19 13:45 - 00000000 ____D C:\Program Files (x86)\ESET 2013-07-19 12:43 - 2013-07-19 12:43 - 00046102 _____ C:\Users\Tobias\Desktop\FRST2.txt 2013-07-19 12:38 - 2013-07-19 12:39 - 01778207 _____ (Farbar) C:\Users\Tobias\Downloads\FRST64 (1).exe 2013-07-19 12:36 - 2013-07-19 12:36 - 00003899 _____ C:\Users\Tobias\Downloads\JRT.txt 2013-07-19 12:32 - 2013-07-19 12:32 - 00003899 _____ C:\Users\Tobias\Desktop\JRT.txt 2013-07-19 12:15 - 2013-07-19 12:15 - 00003122 _____ C:\Windows\System32\Tasks\{E6A3D7A6-36BA-4720-8641-2B10AA0A972E} 2013-07-19 12:14 - 2013-07-19 12:14 - 00000000 ____D C:\Windows\ERUNT 2013-07-19 12:13 - 2013-07-19 12:13 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Tobias\Downloads\JRT.exe 2013-07-19 12:03 - 2013-07-19 12:05 - 00021866 _____ C:\Users\Tobias\Desktop\AdwCleaner[S1].txt 2013-07-19 12:03 - 2013-07-19 12:05 - 00000092 _____ C:\Windows\DeleteOnReboot.bat 2013-07-19 12:01 - 2013-07-19 12:02 - 00662345 _____ C:\Users\Tobias\Downloads\adwcleaner.exe 2013-07-18 19:03 - 2013-07-18 19:03 - 00026897 _____ C:\Users\Tobias\Desktop\ComboFix.txt 2013-07-18 18:41 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-07-18 18:41 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-07-18 18:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-07-18 18:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-07-18 18:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-07-18 18:41 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-07-18 18:41 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-07-18 18:41 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-07-18 18:33 - 2013-07-18 19:03 - 00000000 ____D C:\Qoobox 2013-07-18 18:33 - 2013-07-18 19:00 - 00000000 ____D C:\Windows\erdnt 2013-07-18 17:16 - 2013-07-18 17:20 - 05089814 ____R (Swearware) C:\Users\Tobias\Downloads\ComboFix.exe 2013-07-17 20:24 - 2013-07-17 20:25 - 00049190 _____ C:\Users\Tobias\Desktop\FRST.txt 2013-07-17 20:24 - 2013-07-17 20:25 - 00020212 _____ C:\Users\Tobias\Desktop\Addition.txt 2013-07-17 20:20 - 2013-07-17 20:20 - 00000000 ____D C:\FRST 2013-07-17 20:19 - 2013-07-17 20:19 - 01778209 _____ (Farbar) C:\Users\Tobias\Downloads\FRST64.exe 2013-07-17 17:57 - 2013-07-17 17:57 - 00079946 _____ C:\Users\Tobias\Downloads\Gmer (1).zip 2013-07-17 17:47 - 2013-07-17 17:47 - 00079946 _____ C:\Users\Tobias\Downloads\Gmer.zip 2013-07-17 17:46 - 2013-07-17 17:47 - 00079946 _____ C:\Users\Tobias\Desktop\Gmer.zip 2013-07-17 17:44 - 2013-07-17 17:44 - 01110476 _____ C:\Users\Tobias\Downloads\7z920.exe 2013-07-17 17:44 - 2013-07-17 17:44 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-07-17 17:39 - 2013-07-17 17:39 - 00099534 _____ C:\Users\Tobias\Downloads\Extras (1).Txt 2013-07-17 17:38 - 2013-07-17 17:38 - 00099534 _____ C:\Users\Tobias\Downloads\Extras.Txt 2013-07-17 17:27 - 2013-07-17 17:27 - 00935329 _____ C:\Users\Tobias\Desktop\Gmer.txt 2013-07-17 16:31 - 2013-07-17 16:32 - 00377856 _____ C:\Users\Tobias\Downloads\gmer_2.1.19163.exe 2013-07-17 16:28 - 2013-07-17 16:29 - 00099534 _____ C:\Users\Tobias\Desktop\Extras.Txt 2013-07-17 16:23 - 2013-07-17 16:28 - 00121972 _____ C:\Users\Tobias\Desktop\OTL.Txt 2013-07-17 16:02 - 2013-07-17 16:03 - 00602112 _____ (OldTimer Tools) C:\Users\Tobias\Downloads\OTL.exe 2013-07-17 16:02 - 2013-07-17 16:02 - 00000474 _____ C:\Users\Tobias\Downloads\defogger_disable.log 2013-07-17 15:49 - 2013-07-17 15:49 - 00050477 _____ C:\Users\Tobias\Downloads\Defogger (1).exe 2013-07-17 15:48 - 2013-07-17 15:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Tobias\Downloads\mbam-setup-1.75.0.1300.exe 2013-07-17 15:42 - 2013-07-17 15:48 - 00000474 _____ C:\Windows\SysWOW64\defogger_disable.log 2013-07-17 15:41 - 2013-07-17 15:53 - 00000476 _____ C:\Users\Tobias\Desktop\defogger_disable.log 2013-07-17 15:41 - 2013-07-17 15:41 - 00050477 _____ C:\Users\Tobias\Downloads\Defogger.exe 2013-07-17 15:41 - 2013-07-17 15:41 - 00000000 _____ C:\Users\Tobias\defogger_reenable 2013-07-17 15:35 - 2013-07-17 15:35 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Unity 2013-07-15 20:43 - 2013-07-15 20:52 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Riot Games 2013-07-15 20:43 - 2013-07-15 20:43 - 34888568 _____ (Riot Games) C:\Users\Tobias\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-07-15 19:50 - 2013-07-15 19:50 - 00000000 ____D C:\ProgramData\NexonEU 2013-07-15 19:26 - 2013-07-15 19:50 - 00000000 ____D C:\Nexon 2013-07-15 19:26 - 2013-07-15 19:50 - 00000000 ____D C:\Download 2013-07-15 19:26 - 2013-07-15 19:26 - 00524288 _____ (Nexon) C:\Users\Tobias\Downloads\CAE_Downloader.exe 2013-07-15 19:26 - 2013-07-15 19:26 - 00446464 _____ (NEXON Inc.) C:\Windows\NEXON_EU_DownloaderUpdater.exe 2013-07-15 19:26 - 2013-07-15 19:26 - 00000235 _____ C:\Windows\SysWOW64\nxEuUninstall.bat 2013-07-11 19:53 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-11 19:53 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-11 19:53 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-11 19:53 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-11 19:53 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-11 19:53 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-11 19:53 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-11 19:53 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-11 19:53 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-11 19:53 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-11 19:53 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-11 19:53 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-11 19:53 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-11 19:53 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-11 19:53 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-11 19:53 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-11 19:53 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-11 19:53 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-11 19:53 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-11 19:53 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-11 19:53 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-11 19:52 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-10 22:01 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-10 22:01 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-10 22:01 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-10 22:01 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-10 22:01 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-10 22:00 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-10 22:00 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-07 00:31 - 2013-07-07 00:31 - 00008355 _____ C:\Users\Tobias\Documents\Unbenannt 1.ods 2013-07-05 22:10 - 2013-07-05 22:10 - 00159535 _____ C:\Users\Tobias\Downloads\proxtube_1.2.2 (1).crx 2013-07-05 22:09 - 2013-07-05 22:09 - 00159535 _____ C:\Users\Tobias\Downloads\proxtube_1.2.2.crx 2013-07-05 22:09 - 2013-07-05 22:09 - 00159343 _____ C:\Users\Tobias\Downloads\proxtube (1) (2).crx 2013-07-05 22:06 - 2013-07-05 22:06 - 00159343 _____ C:\Users\Tobias\Downloads\proxtube (1).crx 2013-07-05 22:06 - 2013-07-05 22:06 - 00159343 _____ C:\Users\Tobias\Downloads\proxtube (1) (1).crx 2013-07-05 21:57 - 2013-07-05 21:57 - 00148730 _____ C:\Users\Tobias\Downloads\proxtube121.zip 2013-07-04 21:23 - 2013-07-04 21:23 - 00001721 _____ C:\Users\Tobias\Documents\Neue Datenbank1.odb 2013-07-04 21:15 - 2013-07-04 21:15 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-07-04 21:15 - 2013-07-04 21:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-07-04 21:15 - 2013-07-04 21:15 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-07-04 21:15 - 2013-07-04 21:15 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-07-04 21:15 - 2013-07-04 21:15 - 00000000 ____D C:\Program Files\Java 2013-07-04 21:13 - 2013-07-04 21:13 - 33150376 _____ (Oracle Corporation) C:\Users\Tobias\Downloads\jre-7u25-windows-x64.exe 2013-07-04 21:11 - 2013-07-04 21:11 - 00001721 _____ C:\Users\Tobias\Documents\Neue Datenbank.odb 2013-07-04 21:10 - 2013-07-04 21:10 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\OpenOffice.org 2013-07-04 21:03 - 2013-07-04 21:03 - 00001244 _____ C:\Users\Tobias\Desktop\OpenOffice.org 3.4.1.lnk 2013-07-04 21:03 - 2013-07-04 21:03 - 00000000 ___SD C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1 2013-07-04 21:01 - 2013-07-04 21:09 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3 2013-07-04 20:56 - 2013-07-04 20:58 - 152249762 _____ C:\Users\Tobias\Downloads\Apache_OpenOffice_incubating_3.4.1_Win_x86_install_de.exe 2013-07-04 16:35 - 2013-07-04 16:35 - 00038043 _____ C:\Users\Tobias\Downloads\Physik-Wasserkraft.pptx 2013-07-01 23:07 - 2013-07-01 23:07 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Tobias\Downloads\KillBox.exe 2013-07-01 23:07 - 2013-07-01 23:07 - 00000000 ____D C:\!KillBox 2013-07-01 23:04 - 2013-07-01 23:05 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\Tobias\Downloads\spybot-2.1.exe 2013-06-27 20:18 - 2013-06-27 20:18 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-06-27 20:18 - 2013-06-27 20:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-06-26 16:44 - 2013-06-26 16:49 - 00038043 _____ C:\Users\Tobias\Documents\Physik-Wasserkraft.pptx ==================== One Month Modified Files and Folders ======= 2013-07-25 13:18 - 2012-05-04 20:51 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-25 13:12 - 2011-02-23 03:23 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-25 12:53 - 2012-12-16 13:15 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1757420857-2183359055-886952040-1001UA.job 2013-07-25 10:52 - 2012-12-16 13:15 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1757420857-2183359055-886952040-1001Core.job 2013-07-25 10:47 - 2012-08-01 22:45 - 00053578 _____ C:\Windows\setupact.log 2013-07-25 10:41 - 2009-08-04 11:51 - 00771568 _____ C:\Windows\system32\perfh007.dat 2013-07-25 10:41 - 2009-08-04 11:51 - 00173236 _____ C:\Windows\system32\perfc007.dat 2013-07-25 10:41 - 2009-07-14 07:13 - 01799108 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-25 10:39 - 2011-02-23 02:48 - 00017920 _____ C:\Windows\system32\rpcnetp.exe 2013-07-25 00:46 - 2011-02-23 02:54 - 01340116 _____ C:\Windows\WindowsUpdate.log 2013-07-24 20:12 - 2011-02-23 03:23 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-24 11:34 - 2011-11-05 11:20 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Skype 2013-07-24 11:28 - 2013-07-24 11:28 - 00000466 _____ C:\Users\Tobias\Downloads\DATA (D) - Verknüpfung.lnk 2013-07-24 11:15 - 2011-07-13 13:58 - 00000000 ____D C:\Users\Tobias\AppData\Local\PMB Files 2013-07-24 10:53 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-24 10:53 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-24 10:44 - 2011-04-13 20:13 - 00069792 _____ (Absolute Software Corp.) C:\Windows\SysWOW64\rpcnet.dll 2013-07-24 10:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-22 13:42 - 2012-08-16 13:23 - 00114166 _____ C:\Windows\PFRO.log 2013-07-22 13:41 - 2012-07-05 08:06 - 00000000 ____D C:\ProgramData\Avira 2013-07-21 16:11 - 2013-07-21 16:11 - 02347384 _____ (ESET) C:\Users\Tobias\Downloads\esetsmartinstaller_enu.exe 2013-07-20 09:33 - 2013-07-20 09:33 - 00007598 _____ C:\Users\Tobias\AppData\Local\Resmon.ResmonCfg 2013-07-19 13:45 - 2013-07-19 13:45 - 00000000 ____D C:\Program Files (x86)\ESET 2013-07-19 12:43 - 2013-07-19 12:43 - 00046102 _____ C:\Users\Tobias\Desktop\FRST2.txt 2013-07-19 12:39 - 2013-07-19 12:38 - 01778207 _____ (Farbar) C:\Users\Tobias\Downloads\FRST64 (1).exe 2013-07-19 12:36 - 2013-07-19 12:36 - 00003899 _____ C:\Users\Tobias\Downloads\JRT.txt 2013-07-19 12:32 - 2013-07-19 12:32 - 00003899 _____ C:\Users\Tobias\Desktop\JRT.txt 2013-07-19 12:15 - 2013-07-19 12:15 - 00003122 _____ C:\Windows\System32\Tasks\{E6A3D7A6-36BA-4720-8641-2B10AA0A972E} 2013-07-19 12:14 - 2013-07-19 12:14 - 00000000 ____D C:\Windows\ERUNT 2013-07-19 12:13 - 2013-07-19 12:13 - 00559341 _____ (Oleg N. Scherbakov) C:\Users\Tobias\Downloads\JRT.exe 2013-07-19 12:05 - 2013-07-19 12:03 - 00021866 _____ C:\Users\Tobias\Desktop\AdwCleaner[S1].txt 2013-07-19 12:05 - 2013-07-19 12:03 - 00000092 _____ C:\Windows\DeleteOnReboot.bat 2013-07-19 12:02 - 2013-07-19 12:01 - 00662345 _____ C:\Users\Tobias\Downloads\adwcleaner.exe 2013-07-18 19:03 - 2013-07-18 19:03 - 00026897 _____ C:\Users\Tobias\Desktop\ComboFix.txt 2013-07-18 19:03 - 2013-07-18 18:33 - 00000000 ____D C:\Qoobox 2013-07-18 19:03 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-07-18 19:00 - 2013-07-18 18:33 - 00000000 ____D C:\Windows\erdnt 2013-07-18 18:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-07-18 18:56 - 2011-04-13 17:46 - 00000000 ____D C:\Users\Tobias 2013-07-18 17:20 - 2013-07-18 17:16 - 05089814 ____R (Swearware) C:\Users\Tobias\Downloads\ComboFix.exe 2013-07-18 13:12 - 2011-04-13 17:47 - 00045056 _____ C:\Windows\system32\acovcnt.exe 2013-07-17 20:25 - 2013-07-17 20:24 - 00049190 _____ C:\Users\Tobias\Desktop\FRST.txt 2013-07-17 20:25 - 2013-07-17 20:24 - 00020212 _____ C:\Users\Tobias\Desktop\Addition.txt 2013-07-17 20:20 - 2013-07-17 20:20 - 00000000 ____D C:\FRST 2013-07-17 20:19 - 2013-07-17 20:19 - 01778209 _____ (Farbar) C:\Users\Tobias\Downloads\FRST64.exe 2013-07-17 17:57 - 2013-07-17 17:57 - 00079946 _____ C:\Users\Tobias\Downloads\Gmer (1).zip 2013-07-17 17:47 - 2013-07-17 17:47 - 00079946 _____ C:\Users\Tobias\Downloads\Gmer.zip 2013-07-17 17:47 - 2013-07-17 17:46 - 00079946 _____ C:\Users\Tobias\Desktop\Gmer.zip 2013-07-17 17:44 - 2013-07-17 17:44 - 01110476 _____ C:\Users\Tobias\Downloads\7z920.exe 2013-07-17 17:44 - 2013-07-17 17:44 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-07-17 17:39 - 2013-07-17 17:39 - 00099534 _____ C:\Users\Tobias\Downloads\Extras (1).Txt 2013-07-17 17:38 - 2013-07-17 17:38 - 00099534 _____ C:\Users\Tobias\Downloads\Extras.Txt 2013-07-17 17:27 - 2013-07-17 17:27 - 00935329 _____ C:\Users\Tobias\Desktop\Gmer.txt 2013-07-17 16:32 - 2013-07-17 16:31 - 00377856 _____ C:\Users\Tobias\Downloads\gmer_2.1.19163.exe 2013-07-17 16:29 - 2013-07-17 16:28 - 00099534 _____ C:\Users\Tobias\Desktop\Extras.Txt 2013-07-17 16:28 - 2013-07-17 16:23 - 00121972 _____ C:\Users\Tobias\Desktop\OTL.Txt 2013-07-17 16:03 - 2013-07-17 16:02 - 00602112 _____ (OldTimer Tools) C:\Users\Tobias\Downloads\OTL.exe 2013-07-17 16:02 - 2013-07-17 16:02 - 00000474 _____ C:\Users\Tobias\Downloads\defogger_disable.log 2013-07-17 15:53 - 2013-07-17 15:41 - 00000476 _____ C:\Users\Tobias\Desktop\defogger_disable.log 2013-07-17 15:49 - 2013-07-17 15:49 - 00050477 _____ C:\Users\Tobias\Downloads\Defogger (1).exe 2013-07-17 15:48 - 2013-07-17 15:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Tobias\Downloads\mbam-setup-1.75.0.1300.exe 2013-07-17 15:48 - 2013-07-17 15:42 - 00000474 _____ C:\Windows\SysWOW64\defogger_disable.log 2013-07-17 15:41 - 2013-07-17 15:41 - 00050477 _____ C:\Users\Tobias\Downloads\Defogger.exe 2013-07-17 15:41 - 2013-07-17 15:41 - 00000000 _____ C:\Users\Tobias\defogger_reenable 2013-07-17 15:35 - 2013-07-17 15:35 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Unity 2013-07-16 18:31 - 2011-02-23 04:04 - 00002510 _____ C:\Windows\system32\AutoRunFilter.ini 2013-07-15 20:52 - 2013-07-15 20:43 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Riot Games 2013-07-15 20:43 - 2013-07-15 20:43 - 34888568 _____ (Riot Games) C:\Users\Tobias\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-07-15 19:50 - 2013-07-15 19:50 - 00000000 ____D C:\ProgramData\NexonEU 2013-07-15 19:50 - 2013-07-15 19:26 - 00000000 ____D C:\Nexon 2013-07-15 19:50 - 2013-07-15 19:26 - 00000000 ____D C:\Download 2013-07-15 19:26 - 2013-07-15 19:26 - 00524288 _____ (Nexon) C:\Users\Tobias\Downloads\CAE_Downloader.exe 2013-07-15 19:26 - 2013-07-15 19:26 - 00446464 _____ (NEXON Inc.) C:\Windows\NEXON_EU_DownloaderUpdater.exe 2013-07-15 19:26 - 2013-07-15 19:26 - 00000235 _____ C:\Windows\SysWOW64\nxEuUninstall.bat 2013-07-13 16:02 - 2013-06-01 17:06 - 00002374 _____ C:\Users\Tobias\Desktop\Google Chrome.lnk 2013-07-13 10:48 - 2012-12-16 13:15 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1757420857-2183359055-886952040-1001UA 2013-07-13 10:47 - 2012-12-16 13:15 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1757420857-2183359055-886952040-1001Core 2013-07-11 20:32 - 2009-07-14 06:45 - 00431552 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-11 20:30 - 2013-03-14 21:23 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 20:30 - 2013-03-14 21:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-11 20:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-11 20:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-11 20:28 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-11 19:56 - 2011-04-16 16:43 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-07-07 13:54 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-07 00:31 - 2013-07-07 00:31 - 00008355 _____ C:\Users\Tobias\Documents\Unbenannt 1.ods 2013-07-06 00:18 - 2011-04-13 20:39 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\SoftGrid Client 2013-07-05 22:10 - 2013-07-05 22:10 - 00159535 _____ C:\Users\Tobias\Downloads\proxtube_1.2.2 (1).crx 2013-07-05 22:09 - 2013-07-05 22:09 - 00159535 _____ C:\Users\Tobias\Downloads\proxtube_1.2.2.crx 2013-07-05 22:09 - 2013-07-05 22:09 - 00159343 _____ C:\Users\Tobias\Downloads\proxtube (1) (2).crx 2013-07-05 22:06 - 2013-07-05 22:06 - 00159343 _____ C:\Users\Tobias\Downloads\proxtube (1).crx 2013-07-05 22:06 - 2013-07-05 22:06 - 00159343 _____ C:\Users\Tobias\Downloads\proxtube (1) (1).crx 2013-07-05 21:57 - 2013-07-05 21:57 - 00148730 _____ C:\Users\Tobias\Downloads\proxtube121.zip 2013-07-05 17:43 - 2011-04-13 17:48 - 00113272 _____ C:\Users\Tobias\AppData\Local\GDIPFONTCACHEV1.DAT 2013-07-04 21:23 - 2013-07-04 21:23 - 00001721 _____ C:\Users\Tobias\Documents\Neue Datenbank1.odb 2013-07-04 21:15 - 2013-07-04 21:15 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-07-04 21:15 - 2013-07-04 21:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-07-04 21:15 - 2013-07-04 21:15 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-07-04 21:15 - 2013-07-04 21:15 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-07-04 21:15 - 2013-07-04 21:15 - 00000000 ____D C:\Program Files\Java 2013-07-04 21:15 - 2012-07-13 18:09 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-07-04 21:15 - 2012-07-13 18:09 - 00972712 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-07-04 21:13 - 2013-07-04 21:13 - 33150376 _____ (Oracle Corporation) C:\Users\Tobias\Downloads\jre-7u25-windows-x64.exe 2013-07-04 21:11 - 2013-07-04 21:11 - 00001721 _____ C:\Users\Tobias\Documents\Neue Datenbank.odb 2013-07-04 21:10 - 2013-07-04 21:10 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\OpenOffice.org 2013-07-04 21:10 - 2011-04-13 17:47 - 00000000 ___RD C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-04 21:09 - 2013-07-04 21:01 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3 2013-07-04 21:09 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-07-04 21:03 - 2013-07-04 21:03 - 00001244 _____ C:\Users\Tobias\Desktop\OpenOffice.org 3.4.1.lnk 2013-07-04 21:03 - 2013-07-04 21:03 - 00000000 ___SD C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1 2013-07-04 20:58 - 2013-07-04 20:56 - 152249762 _____ C:\Users\Tobias\Downloads\Apache_OpenOffice_incubating_3.4.1_Win_x86_install_de.exe 2013-07-04 16:36 - 2012-06-20 13:11 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-07-04 16:35 - 2013-07-04 16:35 - 00038043 _____ C:\Users\Tobias\Downloads\Physik-Wasserkraft.pptx 2013-07-04 16:33 - 2011-02-23 03:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-07-04 16:31 - 2009-07-14 09:45 - 00000000 ____D C:\Windows\ShellNew 2013-07-04 16:27 - 2009-07-14 04:34 - 00000387 _____ C:\Windows\win.ini 2013-07-01 23:07 - 2013-07-01 23:07 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Tobias\Downloads\KillBox.exe 2013-07-01 23:07 - 2013-07-01 23:07 - 00000000 ____D C:\!KillBox 2013-07-01 23:05 - 2013-07-01 23:04 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\Tobias\Downloads\spybot-2.1.exe 2013-06-28 17:58 - 2011-04-13 20:24 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2013-06-28 17:58 - 2011-04-13 20:22 - 00000000 ____D C:\ProgramData\Adobe 2013-06-27 20:18 - 2013-06-27 20:18 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-06-27 20:18 - 2013-06-27 20:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-06-26 16:49 - 2013-06-26 16:44 - 00038043 _____ C:\Users\Tobias\Documents\Physik-Wasserkraft.pptx ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-04 18:22 ==================== End Of Log ============================ |
25.07.2013, 14:45 | #22 |
/// the machine /// TB-Ausbilder | Fehlermeldung "Server ist ausgelastet" Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.07.2013, 17:48 | #23 |
| Fehlermeldung "Server ist ausgelastet" Ok, alles wieder in Ordnung Vielen, vielen Dank!! |
29.07.2013, 07:16 | #24 |
/// the machine /// TB-Ausbilder | Fehlermeldung "Server ist ausgelastet" Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Fehlermeldung "Server ist ausgelastet" |
aktiv, andere, anderen, anhang, anleitung, anwendung, ausgeführt, ausgelastet, bilder, bildern, fehlermeldung, funktioniert, hochgefahren, hoffe, klicke, klicken, laptop, leitung, pcs, problem, richtig, server, wechsel, wechseln, wegbekomme |