| |
| |||||||
Log-Analyse und Auswertung: Rechner befallen nach Video "14 year old girl did in front of public"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.08.2013, 15:51
| #1 |
 |  Rechner befallen nach Video "14 year old girl did in front of public" Hallo zusammen, habe ein Problem nach klick auf oberes Video. Rechner ist sehr langsam und malewarebytes findet Dateien, kann diese aber nicht löschen. defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 16:36 on 04/08/2013 (Dennis)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-04 16:45:29
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AJ1 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Dennis\AppData\Local\Temp\pwdirpog.sys
---- Threads - GMER 2.1 ----
Thread C:\Windows\System32\svchost.exe [828:3548] 000007fefd972098
Thread C:\Windows\system32\svchost.exe [456:1160] 000007fefbd88274
Thread C:\Windows\system32\svchost.exe [456:1692] 000007fefbd88274
Thread C:\Windows\system32\svchost.exe [1116:2216] 000007fef8aa35c0
Thread C:\Windows\system32\svchost.exe [1116:4508] 000007fef8aa5600
Thread C:\Windows\system32\svchost.exe [1116:4652] 000007fef7692888
Thread C:\Windows\system32\svchost.exe [1116:4656] 000007fef7682940
Thread C:\Windows\system32\svchost.exe [1116:3344] 000007fef7692a40
Thread C:\Windows\System32\spoolsv.exe [1380:1900] 000007fef99610c8
Thread C:\Windows\System32\spoolsv.exe [1380:1940] 000007fef98c6144
Thread C:\Windows\System32\spoolsv.exe [1380:1952] 000007fef9455fd0
Thread C:\Windows\System32\spoolsv.exe [1380:1956] 000007fef9443438
Thread C:\Windows\System32\spoolsv.exe [1380:1960] 000007fef94563ec
Thread C:\Windows\System32\spoolsv.exe [1380:1224] 000007fef9cb5e5c
Thread C:\Windows\System32\spoolsv.exe [1380:1264] 000007fef9ce5074
Thread C:\Windows\System32\spoolsv.exe [1380:2448] 000007fef9d52288
Thread C:\Windows\system32\taskhost.exe [1716:1936] 000007fef9492740
Thread C:\Windows\system32\taskhost.exe [1716:1992] 000007fef9421f38
Thread C:\Windows\system32\taskhost.exe [1716:1444] 000007fef8d31010
Thread C:\Windows\system32\taskhost.exe [1716:3996] 000007fef8fa5170
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [4996:2160] 000007fefba22a7c
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [4996:3372] 000007fef125d618
---- EOF - GMER 2.1 ----
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013
Ran by Dennis (administrator) on 04-08-2013 16:37:45
Running from C:\Users\Dennis\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Dropbox, Inc.) C:\Users\Dennis\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\srspremiumpanel_64.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel Corporation) C:\Windows\system32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxtray.exe
(Intel Corporation) C:\Windows\system32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\Dennis\Desktop\Defogger.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE
(Microsoft Corporation) C:\Windows\sysWow64\SearchProtocolHost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe [45568 2009-07-14] (Microsoft Corporation)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2817872 2012-04-25] (ELAN Microelectronics Corp.)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
Startup: C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Dennis\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {AFA8C324-C3FE-4E17-9EEF-F7F264EE64FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=A0CA8805-CA76-4B44-BA25-9CC9F49C5ECA&apn_sauid=55A98BC5-E01C-4763-BC3C-CD1BE68A2B3E
SearchScopes: HKCU - {AFA8C324-C3FE-4E17-9EEF-F7F264EE64FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=A0CA8805-CA76-4B44-BA25-9CC9F49C5ECA&apn_sauid=55A98BC5-E01C-4763-BC3C-CD1BE68A2B3E
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{177BEB8A-FE68-4DA3-B29A-15B7438D4351}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{343157AD-EE1E-47FF-BE63-C34BAD3E4BC2}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{44237ED6-4043-4B5B-BA86-E0AF28C91C19}: [NameServer]193.189.244.206 193.189.244.225
FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\ly0anwrd.default
FF user.js: detected! => C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\ly0anwrd.default\user.js
FF Homepage: hxxp://www.swr.de/landesschau-aktuell/bw/-/id=1622/16hixw/index.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\ly0anwrd.default\searchplugins\Firefox.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF HKCU\...\Firefox\Extensions: [{184AA5E6-741D-464a-820E-94B3ABC2F3B4}] C:\Users\Dennis\AppData\Roaming\10016
FF Extension: Java String Helper - C:\Users\Dennis\AppData\Roaming\10016
FF HKCU\...\Firefox\Extensions: [Tubesaver@istqt.co] C:\Program Files (x86)\TubeSaver\125.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [246112 2012-04-05] ()
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-09-25] (Sony Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-07-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-07-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2012-10-08] (Siemens Home and Office Communication Devices GmbH & Co. KG)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [32768 2012-04-05] (Huawei Tech. Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [1001472 2012-04-05] (DiBcom SA)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-01-19] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-01-19] (Windows (R) 2003 DDK 3790 provider)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
83
2013-08-04 16:36 - 2013-08-04 16:36 - 00000474 _____ C:\Users\Dennis\Desktop\defogger_disable.log
2013-08-04 16:36 - 2013-08-03 17:59 - 00050477 _____ C:\Users\Dennis\Desktop\Defogger.exe
2013-08-03 18:08 - 2013-08-03 18:08 - 00377856 _____ C:\Users\Dennis\Downloads\gmer_2.1.19163.exe
2013-08-03 17:59 - 2013-08-03 18:00 - 00000474 _____ C:\Users\Dennis\Downloads\defogger_disable.log
2013-08-03 17:28 - 2013-08-03 17:28 - 00031820 _____ C:\Users\Dennis\Downloads\Addition.txt
2013-08-03 17:27 - 2013-08-03 17:27 - 00000000 ____D C:\FRST
2013-08-03 17:26 - 2013-08-03 17:26 - 01781485 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-08-03 17:16 - 2013-08-04 12:05 - 00000168 _____ C:\Windows\setupact.log
2013-08-03 17:16 - 2013-08-03 17:16 - 00000828 _____ C:\Windows\PFRO.log
2013-08-03 17:16 - 2013-08-03 17:16 - 00000000 _____ C:\Windows\setuperr.log
2013-08-02 19:43 - 2013-08-02 19:43 - 04429440 _____ (Piriform Ltd) C:\Users\Dennis\Downloads\ccsetup404.exe
2013-08-02 19:43 - 2013-08-02 19:43 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-02 19:43 - 2013-08-02 19:43 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-08-02 19:43 - 2013-08-02 19:43 - 00000000 ____D C:\Program Files\CCleaner
2013-07-30 00:30 - 2013-07-30 00:33 - 00000000 ____D C:\Users\Dennis\Desktop\Neuer Ordner (3)
2013-07-28 21:39 - 2013-07-28 21:45 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-28 21:39 - 2013-07-28 21:39 - 00001339 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-28 21:39 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-07-28 21:38 - 2013-07-28 21:38 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\Dennis\Downloads\spybot-2.1.exe
2013-07-28 21:18 - 2013-07-28 21:18 - 00002172 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-28 08:44 - 2013-07-28 08:44 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Avira
2013-07-28 08:29 - 2013-07-28 08:29 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-07-28 08:28 - 2013-07-28 08:28 - 00000000 ____D C:\ProgramData\APN
2013-07-28 08:27 - 2013-07-28 08:27 - 00002026 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-28 08:27 - 2013-07-28 08:27 - 00000000 ____D C:\ProgramData\Avira
2013-07-28 08:27 - 2013-07-28 08:27 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-28 08:27 - 2013-07-18 08:02 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-28 08:27 - 2013-07-18 08:02 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-07-28 08:27 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-28 08:25 - 2013-07-28 08:26 - 108422648 _____ C:\Users\Dennis\Downloads\avira_free_antivirus884_de.exe
2013-07-26 17:19 - 2009-08-19 23:50 - 00052568 ____R (Adobe Systems Inc) C:\Windows\system32\AdobePDF.dll
2013-07-26 17:19 - 2009-08-19 23:50 - 00024416 ____R (Adobe Systems Inc.) C:\Windows\system32\AdobePDFUI.dll
2013-07-24 21:08 - 2013-07-24 21:08 - 00000000 ____D C:\Users\Dennis\Desktop\NLR-3JTHHH9R
2013-07-20 14:25 - 2013-07-20 14:28 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 22:02 - 2013-07-11 22:02 - 00001358 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-07-11 22:02 - 2013-07-11 22:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-11 22:01 - 2013-07-11 22:01 - 25326592 _____ (DVDVideoSoft Ltd. ) C:\Users\Dennis\Downloads\FreeYouTubeToMP3Converter.exe
2013-07-11 22:01 - 2013-07-11 22:01 - 00000000 ____D C:\Users\Dennis\AppData\Local\{1E74FE46-2F28-47C2-B2E6-9F6D1F3851D6}
2013-07-10 07:02 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-10 07:02 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-10 07:02 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-10 07:02 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-10 07:02 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-10 07:02 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 07:02 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-10 07:02 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-10 07:02 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-10 07:02 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-10 07:02 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-10 07:02 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-10 07:02 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-10 07:02 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 07:02 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 07:02 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 07:02 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-10 07:02 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-10 07:02 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-10 07:02 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-10 07:02 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-10 07:02 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-10 06:52 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 06:52 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 06:52 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 06:52 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 06:52 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 06:50 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 06:50 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
==================== One Month Modified Files and Folders =======
2013-08-04 16:37 - 2010-12-31 03:57 - 00657910 _____ C:\Windows\system32\perfh007.dat
2013-08-04 16:37 - 2010-12-31 03:57 - 00131250 _____ C:\Windows\system32\perfc007.dat
2013-08-04 16:37 - 2009-07-14 07:13 - 01507342 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-04 16:36 - 2013-08-04 16:36 - 00000474 _____ C:\Users\Dennis\Desktop\defogger_disable.log
2013-08-04 16:29 - 2012-07-30 22:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-04 16:29 - 2011-05-27 15:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-04 12:13 - 2009-07-14 06:45 - 00014144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-04 12:13 - 2009-07-14 06:45 - 00014144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-04 12:07 - 2013-03-10 16:30 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Dropbox
2013-08-04 12:06 - 2013-03-17 01:09 - 00000000 ___RD C:\Users\Dennis\Dropbox
2013-08-04 12:05 - 2013-08-03 17:16 - 00000168 _____ C:\Windows\setupact.log
2013-08-04 12:05 - 2011-05-27 15:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-04 12:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-04 12:04 - 2010-12-30 20:57 - 01800832 _____ C:\Windows\WindowsUpdate.log
2013-08-03 18:08 - 2013-08-03 18:08 - 00377856 _____ C:\Users\Dennis\Downloads\gmer_2.1.19163.exe
2013-08-03 18:00 - 2013-08-03 17:59 - 00000474 _____ C:\Users\Dennis\Downloads\defogger_disable.log
2013-08-03 17:59 - 2013-08-04 16:36 - 00050477 _____ C:\Users\Dennis\Desktop\Defogger.exe
2013-08-03 17:28 - 2013-08-03 17:28 - 00031820 _____ C:\Users\Dennis\Downloads\Addition.txt
2013-08-03 17:27 - 2013-08-03 17:27 - 00000000 ____D C:\FRST
2013-08-03 17:26 - 2013-08-03 17:26 - 01781485 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-08-03 17:16 - 2013-08-03 17:16 - 00000828 _____ C:\Windows\PFRO.log
2013-08-03 17:16 - 2013-08-03 17:16 - 00000000 _____ C:\Windows\setuperr.log
2013-08-03 02:25 - 2009-08-02 04:27 - 00000000 ____D C:\Windows\Panther
2013-08-02 19:43 - 2013-08-02 19:43 - 04429440 _____ (Piriform Ltd) C:\Users\Dennis\Downloads\ccsetup404.exe
2013-08-02 19:43 - 2013-08-02 19:43 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-08-02 19:43 - 2013-08-02 19:43 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-08-02 19:43 - 2013-08-02 19:43 - 00000000 ____D C:\Program Files\CCleaner
2013-08-02 17:16 - 2012-12-05 23:12 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\FileZilla
2013-08-02 17:14 - 2011-05-19 22:52 - 00000000 ____D C:\Program Files (x86)\phase5
2013-08-02 10:45 - 2013-06-03 00:38 - 00000000 ____D C:\Users\Dennis\Desktop\Neuer Ordner (2)
2013-08-02 10:43 - 2013-04-18 13:29 - 00000000 ____D C:\Users\Dennis\Desktop\HUE
2013-08-01 16:37 - 2011-05-21 22:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-07-30 00:33 - 2013-07-30 00:30 - 00000000 ____D C:\Users\Dennis\Desktop\Neuer Ordner (3)
2013-07-28 22:30 - 2013-06-09 21:41 - 00004250 _____ C:\Windows\wininit.ini
2013-07-28 21:45 - 2013-07-28 21:39 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-07-28 21:39 - 2013-07-28 21:39 - 00001339 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-07-28 21:38 - 2013-07-28 21:38 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\Dennis\Downloads\spybot-2.1.exe
2013-07-28 21:18 - 2013-07-28 21:18 - 00002172 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-28 21:18 - 2011-05-27 15:55 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-28 08:44 - 2013-07-28 08:44 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Avira
2013-07-28 08:29 - 2013-07-28 08:29 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-07-28 08:28 - 2013-07-28 08:28 - 00000000 ____D C:\ProgramData\APN
2013-07-28 08:27 - 2013-07-28 08:27 - 00002026 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-28 08:27 - 2013-07-28 08:27 - 00000000 ____D C:\ProgramData\Avira
2013-07-28 08:27 - 2013-07-28 08:27 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-28 08:26 - 2013-07-28 08:25 - 108422648 _____ C:\Users\Dennis\Downloads\avira_free_antivirus884_de.exe
2013-07-27 22:56 - 2012-12-14 09:54 - 00000600 _____ C:\Users\Dennis\AppData\Local\PUTTY.RND
2013-07-24 21:08 - 2013-07-24 21:08 - 00000000 ____D C:\Users\Dennis\Desktop\NLR-3JTHHH9R
2013-07-21 23:34 - 2012-07-30 22:34 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-21 23:34 - 2012-07-30 22:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-21 23:34 - 2011-05-20 23:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-21 23:34 - 2011-05-19 20:23 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-20 14:28 - 2013-07-20 14:25 - 00000000 ____D C:\Windows\system32\MRT
2013-07-18 08:02 - 2013-07-28 08:27 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-18 08:02 - 2013-07-28 08:27 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-07-14 18:12 - 2011-05-27 15:55 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-14 18:12 - 2011-05-27 15:55 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 22:03 - 2013-07-03 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-11 22:02 - 2013-07-11 22:02 - 00001358 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-07-11 22:02 - 2013-07-11 22:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-11 22:02 - 2013-03-12 23:18 - 00001199 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-07-11 22:02 - 2013-03-12 23:18 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\OpenCandy
2013-07-11 22:02 - 2012-11-08 12:02 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\DVDVideoSoft
2013-07-11 22:01 - 2013-07-11 22:01 - 25326592 _____ (DVDVideoSoft Ltd. ) C:\Users\Dennis\Downloads\FreeYouTubeToMP3Converter.exe
2013-07-11 22:01 - 2013-07-11 22:01 - 00000000 ____D C:\Users\Dennis\AppData\Local\{1E74FE46-2F28-47C2-B2E6-9F6D1F3851D6}
2013-07-11 22:01 - 2012-11-04 21:30 - 00000000 ____D C:\Users\Dennis\AppData\Local\Windows Live
2013-07-10 16:25 - 2009-07-14 06:45 - 03110328 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-10 16:24 - 2012-05-18 11:15 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-10 16:24 - 2012-05-18 11:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-10 16:23 - 2010-12-31 03:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 16:23 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-10 16:23 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 07:03 - 2011-05-19 20:48 - 00000000 ____D C:\ProgramData\Microsoft Help
ZeroAccess:
C:\Users\Dennis\AppData\Local\{d9b7be4d-08fe-b0c7-5880-0ac0a4e2af8d}
C:\Users\Dennis\AppData\Local\{d9b7be4d-08fe-b0c7-5880-0ac0a4e2af8d}\@
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-02 00:41
==================== End Of Log ================
|
| Themen zu Rechner befallen nach Video "14 year old girl did in front of public" |
| adobe, antivir, antivirus, avira, browser, ccsetup, combofix, dvdvideosoft ltd., explorer, farbar, farbar recovery scan tool, firefox, flash player, google, home, homepage, langsam, mozilla, mp3, plug-in, problem, registry, rundll, safer networking, scan, sehr langsam, services.exe, software, svchost.exe, system, taskhost.exe, temp, tubesaver, winlogon.exe |
Baum-Darstellung