![]() |
|
Plagegeister aller Art und deren Bekämpfung: Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
![]() | #31 |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Habe ich was soll ich denn jetzt tun? |
![]() | #32 |
/// Malware-holic ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ ein neues frst log
__________________
__________________ |
![]() | #33 |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-08-2013 Ran by Daniel (administrator) on 08-08-2013 14:45:36 Running from H:\Users\Daniel\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AMD) H:\Windows\system32\atiesrxx.exe (Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieSvc.exe (AMD) H:\Windows\system32\atieclxx.exe (AVAST Software) H:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVM Berlin) H:\Program Files\avmwlanstick\WlanNetService.exe (Apple Inc.) H:\Program Files\Bonjour\mDNSResponder.exe (LogMeIn Inc.) H:\Program Files\LogMeIn Hamachi\hamachi-2.exe (Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Oracle Corporation) H:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) H:\Program Files\AVAST Software\Avast\AvastUI.exe (Valve Corporation) H:\Program Files\Steam\Steam.exe (Skype Technologies S.A.) H:\Program Files\Skype\Phone\Skype.exe (Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieCtrl.exe (Windows Net) H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe (Valve Corporation) H:\Program Files\Common Files\Steam\SteamService.exe (Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (AVAST Software) H:\Program Files\AVAST Software\Avast\setup\avast.setup (Google Inc.) H:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) H:\Windows\system32\wuauclt.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SunJavaUpdateSched] - H:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [avast] - H:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKCU\...\Run: [Google Update] - H:\Users\Daniel\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-02] (Google Inc.) HKCU\...\Run: [Steam] - H:\Program Files\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation) HKCU\...\Run: [Skype] - H:\Program Files\Skype\Phone\Skype.exe [19873896 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [SandboxieControl] - H:\Program Files\Sandboxie\SbieCtrl.exe [543320 2013-07-08] (Sandboxie Holdings, LLC) MountPoints2: {1841e9a7-f93e-11e2-b8a9-00248ce625ea} - I:\pushinst.exe MountPoints2: {2a6149da-501e-11e2-9cd9-001c4af6e8a4} - I:\HTC_Sync_Manager_PC.exe MountPoints2: {af38bbab-0724-11e2-a9e4-00248ce625ea} - I:\pushinst.exe MountPoints2: {cc807940-dce3-11e1-ae98-00248ce625ea} - I:\pushinst.exe MountPoints2: {e79bbbfa-dce2-11e1-8875-806e6f6e6963} - G:\Autorun.exe Startup: H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk ShortcutTarget: net.lnk -> H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe (Windows Net) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/ SearchScopes: HKLM - DefaultScope value is missing. BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - H:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) Handler: msdaipp - No CLSID Value - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Winsock: Catalog5 05 H:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR HomePage: hxxp://feed.snapdo.com/?publisher=Bundlore&dpid=Bundlore&co=DE&userid=1f5205d7-4b77-4c17-bb42-141a3005900f&searchtype=hp&installDate=21/04/2013 CHR RestoreOnStartup: "urls_to_restore_on_startup": [ CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - H:\Users\Daniel\AppData\Local\Google\Chrome\Application\21.0.1180.60\PepperFlash\pepflashplayer.dll No File CHR Extension: () - H:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - H:\Users\Daniel\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx ========================== Services (Whitelisted) ================= R2 avast! Antivirus; H:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R2 AVM WLAN Connection Service; H:\Program Files\avmwlanstick\WlanNetService.exe [364544 2008-02-25] (AVM Berlin) R2 Hamachi2Svc; H:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.) S2 HiPatchService; H:\Program Files\Hi-Rez Studios\HiPatchService.exe [8704 2012-08-30] (Hi-Rez Studios) R2 MBAMScheduler; H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 SbieSvc; H:\Program Files\Sandboxie\SbieSvc.exe [129112 2013-07-08] (Sandboxie Holdings, LLC) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; H:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software) R2 aswMonFlt; H:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software) R1 aswRdr; H:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software) R0 aswRvrt; H:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] () R1 aswSnx; H:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-08] (AVAST Software) R1 aswSP; H:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-08] (AVAST Software) R1 aswTdi; H:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software) R0 aswVmm; H:\Windows\System32\Drivers\aswVmm.sys [175176 2013-08-08] () R2 atksgt; H:\Windows\System32\DRIVERS\atksgt.sys [83872 2013-06-20] () S3 avmeject; H:\Windows\System32\drivers\avmeject.sys [4352 2007-11-07] (AVM Berlin) R3 FWLANUSB; H:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH) S3 fwlanusbn; H:\Windows\System32\DRIVERS\fwlanusbn.sys [401920 2007-12-19] (AVM GmbH) R3 hamachi; H:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R3 L1E; H:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-14] (Atheros Communications, Inc.) R2 lirsgt; H:\Windows\System32\DRIVERS\lirsgt.sys [25888 2013-06-20] () R3 MBAMProtector; H:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R3 MTsensor; H:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () R3 SbieDrv; H:\Program Files\Sandboxie\SbieDrv.sys [159208 2013-07-08] (Sandboxie Holdings, LLC) S3 catchme; \??\H:\Users\Daniel\AppData\Local\Temp\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST 2013-08-08 14:44 - 2013-08-08 14:45 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-07 23:02 - 2013-08-07 23:50 - 00003510 _____ H:\Windows\Sandboxie.ini 2013-08-07 23:02 - 2013-08-07 23:01 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk 2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie 2013-08-07 22:55 - 2013-08-08 14:43 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys 2013-08-07 22:55 - 2013-08-08 14:43 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys 2013-08-07 22:55 - 2013-08-08 14:43 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys 2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-07 22:55 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) H:\Windows\system32\Drivers\aswRdr2.sys 2013-08-07 22:55 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) H:\Windows\system32\Drivers\aswTdi.sys 2013-08-07 22:55 - 2013-05-09 10:59 - 00049376 _____ H:\Windows\system32\Drivers\aswRvrt.sys 2013-08-07 22:55 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) H:\Windows\system32\Drivers\aswFsBlk.sys 2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software 2013-08-07 22:54 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) H:\Windows\system32\Drivers\aswMonFlt.sys 2013-08-07 22:54 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) H:\Windows\system32\aswBoot.exe 2013-08-07 22:54 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) H:\Windows\avastSS.scr 2013-08-07 22:51 - 2013-08-07 22:54 - 00000000 ____D H:\ProgramData\AVAST Software 2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss 2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt 2013-08-07 19:12 - 2013-08-07 19:17 - 00000000 ____D H:\ProgramData\HitmanPro 2013-08-07 19:08 - 2013-08-07 22:17 - 00000000 ____D H:\Windows\ERUNT 2013-08-06 17:06 - 2013-08-07 22:13 - 00000000 ____D H:\Windows\erdnt 2013-08-04 21:21 - 2013-08-07 23:13 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme 2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware 2013-08-04 18:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) H:\Windows\system32\Drivers\mbam.sys 2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll 2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java 2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk 2013-08-03 11:20 - 2013-08-03 11:34 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe 2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM 2013-08-03 00:23 - 2013-08-03 00:49 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore 2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core 2013-08-02 22:49 - 2013-08-02 22:50 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold 2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url 2013-08-02 21:10 - 2013-08-02 21:22 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z 2013-08-02 20:29 - 2013-08-04 16:04 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin 2013-08-02 20:24 - 2013-08-05 14:33 - 00000000 ____D H:\ProgramData\Origin 2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts 2013-08-02 19:35 - 2013-08-02 19:51 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods 2013-08-02 19:33 - 2013-08-03 07:20 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso 2013-08-02 19:29 - 2013-08-06 16:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent 2013-08-02 18:51 - 2013-08-04 17:42 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data 2013-08-02 18:50 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9 2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&-White-2 2013-07-31 09:26 - 2013-07-31 11:29 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold Crusader 2013-07-31 09:23 - 2013-07-31 09:23 - 00000000 ____D H:\Program Files\Firefly Studios 2013-07-30 19:39 - 2013-07-30 19:39 - 00015420 _____ H:\Windows\AVMInstall.Log 2013-07-30 19:38 - 2007-12-19 01:00 - 00401920 _____ (AVM GmbH) H:\Windows\system32\Drivers\fwlanusbn.sys 2013-07-30 19:38 - 2007-12-19 01:00 - 00077824 _____ (AVM Berlin) H:\Windows\system32\fwusbnci.dll 2013-07-30 19:38 - 2007-12-19 01:00 - 00015573 _____ H:\Windows\system32\Drivers\fwlanusbn.bin 2013-07-28 22:34 - 2013-07-30 20:04 - 00000000 ____D H:\Users\Daniel\Desktop\SDP 2013-07-25 20:15 - 2013-08-06 16:54 - 00000000 ____D H:\Program Files\Mozilla Firefox 2013-07-24 21:13 - 2013-07-24 21:13 - 00000000 ____D H:\Users\Daniel\dwhelper 2013-07-21 00:55 - 2012-07-26 05:39 - 00526952 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\Wdf01000.sys 2013-07-21 00:55 - 2012-07-26 05:39 - 00047720 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\WdfLdr.sys 2013-07-21 00:55 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) H:\Windows\system32\WUDFHost.exe 2013-07-21 00:55 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) H:\Windows\system32\WUDFx.dll 2013-07-21 00:55 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) H:\Windows\system32\WUDFPlatform.dll 2013-07-21 00:55 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) H:\Windows\system32\WUDFSvc.dll 2013-07-21 00:55 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) H:\Windows\system32\WUDFCoinstaller.dll 2013-07-21 00:55 - 2012-07-26 04:46 - 00009728 _____ (Microsoft Corporation) H:\Windows\system32\Wdfres.dll 2013-07-21 00:55 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\WUDFPf.sys 2013-07-21 00:55 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\WUDFRd.sys 2013-07-21 00:55 - 2012-06-02 16:57 - 00000003 _____ H:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2013-07-21 00:55 - 2012-06-02 16:34 - 00000003 _____ H:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2013-07-20 23:20 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) H:\Windows\system32\usp10.dll 2013-07-20 23:20 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\ndis.sys 2013-07-20 23:20 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\RNDISMP.sys 2013-07-20 23:20 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) H:\Windows\system32\spoolsv.exe 2013-07-20 23:20 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) H:\Windows\system32\xmllite.dll 2013-07-20 23:20 - 2011-03-25 04:58 - 00284672 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbport.sys 2013-07-20 23:20 - 2011-03-25 04:58 - 00258560 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbhub.sys 2013-07-20 23:20 - 2011-03-25 04:58 - 00075776 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbccgp.sys 2013-07-20 23:20 - 2011-03-25 04:57 - 00043008 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbehci.sys 2013-07-20 23:20 - 2011-03-25 04:57 - 00024064 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbuhci.sys 2013-07-20 23:20 - 2011-03-25 04:57 - 00020480 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbohci.sys 2013-07-20 23:20 - 2011-03-25 04:57 - 00005888 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\usbd.sys 2013-07-20 23:20 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) H:\Windows\system32\prevhost.exe 2013-07-20 23:19 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) H:\Windows\system32\cryptdlg.dll 2013-07-20 23:19 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) H:\Windows\system32\d3d11.dll 2013-07-20 23:19 - 2013-03-19 06:53 - 00186368 _____ (Microsoft Corporation) H:\Windows\system32\wwansvc.dll 2013-07-20 23:19 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) H:\Windows\system32\wwanprotdim.dll 2013-07-20 23:19 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\fvevol.sys 2013-07-20 23:19 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) H:\Windows\system32\OxpsConverter.exe 2013-07-20 23:19 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) H:\Windows\system32\timedate.cpl 2013-07-20 23:19 - 2011-03-11 07:39 - 00148864 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\storport.sys 2013-07-20 23:19 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) H:\Windows\system32\Drivers\nvstor.sys 2013-07-20 23:19 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) H:\Windows\system32\Drivers\nvraid.sys 2013-07-20 23:19 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) H:\Windows\system32\Drivers\iaStorV.sys 2013-07-20 23:19 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) H:\Windows\system32\Drivers\amdsata.sys 2013-07-20 23:19 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) H:\Windows\system32\Drivers\amdxata.sys 2013-07-20 23:19 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) H:\Windows\system32\esent.dll 2013-07-20 23:19 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) H:\Windows\system32\fsutil.exe 2013-07-20 23:19 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\USBSTOR.SYS 2013-07-20 23:18 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) H:\Windows\system32\Wpc.dll 2013-07-20 23:18 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) H:\Windows\system32\gameux.dll 2013-07-20 23:18 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) H:\Windows\system32\cero.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) H:\Windows\system32\esrb.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) H:\Windows\system32\fpb.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) H:\Windows\system32\oflc-nz.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) H:\Windows\system32\pegibbfc.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) H:\Windows\system32\csrr.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) H:\Windows\system32\cob-au.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) H:\Windows\system32\usk.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) H:\Windows\system32\oflc.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) H:\Windows\system32\grb.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) H:\Windows\system32\pegi-pt.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) H:\Windows\system32\pegi-fi.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) H:\Windows\system32\pegi.rs 2013-07-20 23:18 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) H:\Windows\system32\djctq.rs 2013-07-20 23:18 - 2012-11-30 06:47 - 00868352 _____ (Microsoft Corporation) H:\Windows\system32\kernel32.dll 2013-07-20 23:18 - 2012-11-30 06:47 - 00293376 _____ (Microsoft Corporation) H:\Windows\system32\KernelBase.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00005120 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00004608 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00004096 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 06:45 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 04:55 - 00271360 _____ (Microsoft Corporation) H:\Windows\system32\conhost.exe 2013-07-20 23:18 - 2012-11-30 04:38 - 00006144 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 04:38 - 00004608 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 04:38 - 00003584 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 04:38 - 00003072 ____H (Microsoft Corporation) H:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-07-20 23:18 - 2012-11-30 01:17 - 00420064 _____ H:\Windows\system32\locale.nls 2013-07-20 23:18 - 2012-10-03 18:42 - 00242176 _____ (Microsoft Corporation) H:\Windows\system32\nlasvc.dll 2013-07-20 23:18 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) H:\Windows\system32\netcorehc.dll 2013-07-20 23:18 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) H:\Windows\system32\ncsi.dll 2013-07-20 23:18 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) H:\Windows\system32\nlaapi.dll 2013-07-20 23:18 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) H:\Windows\system32\netevent.dll 2013-07-20 23:18 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) H:\Windows\system32\iphlpsvc.dll 2013-07-20 23:18 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\tcpipreg.sys 2013-07-20 23:18 - 2012-05-05 09:46 - 00400896 _____ (Microsoft Corporation) H:\Windows\system32\srcore.dll 2013-07-20 23:18 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) H:\Windows\system32\msi.dll 2013-07-20 23:18 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) H:\Windows\system32\tquery.dll 2013-07-20 23:18 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) H:\Windows\system32\mssrch.dll 2013-07-20 23:18 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) H:\Windows\system32\mssvp.dll 2013-07-20 23:18 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) H:\Windows\system32\mssph.dll 2013-07-20 23:18 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) H:\Windows\system32\mssphtb.dll 2013-07-20 23:18 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) H:\Windows\system32\msscntrs.dll 2013-07-20 23:18 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) H:\Windows\system32\SearchIndexer.exe 2013-07-20 23:18 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) H:\Windows\system32\SearchProtocolHost.exe 2013-07-20 23:18 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) H:\Windows\system32\SearchFilterHost.exe 2013-07-20 23:18 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) H:\Windows\explorer.exe 2013-07-20 23:12 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) H:\Windows\system32\dhcpcore6.dll 2013-07-20 23:12 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) H:\Windows\system32\dhcpcsvc6.dll 2013-07-20 23:12 - 2012-05-01 06:44 - 00164352 _____ (Microsoft Corporation) H:\Windows\system32\profsvc.dll 2013-07-20 23:12 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) H:\Windows\system32\ntshrui.dll 2013-07-20 23:12 - 2011-04-22 21:14 - 00027008 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\Diskdump.sys 2013-07-20 17:23 - 2013-07-20 17:23 - 00000020 _____ H:\Windows\ðó} 2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Windows\de 2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Program Files\Microsoft SQL Server Compact Edition 2013-07-20 17:22 - 2013-07-20 17:23 - 00000000 ____D H:\Program Files\Windows Live 2013-07-20 17:22 - 2013-07-20 17:22 - 00000000 ____D H:\Windows\PCHEALTH 2013-07-20 17:19 - 2013-07-31 21:57 - 00000000 ____D H:\Users\Daniel\AppData\Local\Windows Live 2013-07-20 17:19 - 2013-07-20 17:19 - 00000000 ____D H:\Program Files\Common Files\Windows Live 2013-07-17 17:46 - 2013-07-17 17:46 - 00000906 _____ H:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-07-17 17:46 - 2013-07-17 17:46 - 00000000 ____D H:\Program Files\LogMeIn Hamachi 2013-07-17 12:50 - 2013-07-17 12:50 - 00143856 _____ H:\Windows\Minidump\071713-19484-01.dmp 2013-07-14 00:46 - 2013-07-14 00:46 - 00675988 _____ H:\Users\Daniel\Desktop\Minecraft (1).exe 2013-07-12 22:43 - 2013-07-12 22:43 - 00001072 _____ H:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4056296316-973622430-28050819-1000Core1ce7f40846d64cd.job 2013-07-10 23:02 - 2013-07-10 23:02 - 00001935 _____ H:\Users\Daniel\Desktop\Skype.lnk 2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ___RD H:\Program Files\Skype 2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ____D H:\Program Files\Common Files\Skype 2013-07-10 22:50 - 2013-08-08 14:44 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype 2013-07-10 22:50 - 2013-07-10 23:02 - 00000000 ____D H:\ProgramData\Skype 2013-07-10 22:13 - 2013-07-10 22:13 - 00000030 _____ H:\Users\Daniel\Desktop\skype-temp-clean.bat 2013-07-10 21:09 - 2013-07-10 22:23 - 00000000 ____D H:\Users\Daniel\Desktop\daniel.23570 2013-07-10 21:02 - 2013-07-17 17:48 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype-alt 2013-07-10 20:08 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) H:\Windows\system32\WMVDECOD.DLL 2013-07-10 20:07 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) H:\Windows\system32\win32k.sys 2013-07-10 20:07 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) H:\Windows\system32\qedit.dll ==================== One Month Modified Files and Folders ======= 2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST 2013-08-08 14:45 - 2013-08-08 14:44 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe 2013-08-08 14:45 - 2012-08-02 22:47 - 02086009 _____ H:\Windows\WindowsUpdate.log 2013-08-08 14:44 - 2013-07-10 22:50 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-08 14:43 - 2013-08-07 22:55 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys 2013-08-08 14:43 - 2013-08-07 22:55 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys 2013-08-08 14:43 - 2013-08-07 22:55 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys 2013-08-08 14:42 - 2013-05-10 20:00 - 00000000 ____D H:\Program Files\Steam 2013-08-08 14:41 - 2013-06-29 00:06 - 00000434 _____ H:\Windows\system32\Drivers\etc\hosts.ics 2013-08-08 14:40 - 2009-07-14 06:53 - 00000006 ____H H:\Windows\Tasks\SA.DAT 2013-08-08 14:40 - 2009-07-14 06:39 - 00122888 _____ H:\Windows\setupact.log 2013-08-07 23:53 - 2013-06-02 00:57 - 00070874 _____ H:\Windows\IE10_main.log 2013-08-07 23:50 - 2013-08-07 23:02 - 00003510 _____ H:\Windows\Sandboxie.ini 2013-08-07 23:36 - 2012-08-02 23:02 - 00001124 _____ H:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4056296316-973622430-28050819-1000UA.job 2013-08-07 23:16 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-07 23:16 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-07 23:13 - 2013-08-04 21:21 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme 2013-08-07 23:08 - 2012-08-06 13:47 - 00280548 _____ H:\Windows\PFRO.log 2013-08-07 23:01 - 2013-08-07 23:02 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk 2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie 2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software 2013-08-07 22:54 - 2013-08-07 22:51 - 00000000 ____D H:\ProgramData\AVAST Software 2013-08-07 22:54 - 2009-07-14 04:04 - 00002577 _____ H:\Windows\system32\config.nt 2013-08-07 22:49 - 2012-08-19 22:06 - 00000000 ____D H:\ProgramData\Avira 2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss 2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt 2013-08-07 22:17 - 2013-08-07 19:08 - 00000000 ____D H:\Windows\ERUNT 2013-08-07 22:14 - 2013-01-12 20:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\LogMeIn Hamachi 2013-08-07 22:13 - 2013-08-06 17:06 - 00000000 ____D H:\Windows\erdnt 2013-08-07 19:17 - 2013-08-07 19:12 - 00000000 ____D H:\ProgramData\HitmanPro 2013-08-06 17:45 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\rescache 2013-08-06 16:56 - 2012-09-11 12:34 - 00000000 ____D H:\Users\Daniel\AppData\Local\Unity 2013-08-06 16:54 - 2013-07-25 20:15 - 00000000 ____D H:\Program Files\Mozilla Firefox 2013-08-06 16:54 - 2013-05-11 22:18 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-08-06 16:51 - 2013-08-02 19:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent 2013-08-06 16:06 - 2013-06-30 21:58 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\vlc 2013-08-06 14:45 - 2013-06-30 21:11 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Orbit 2013-08-06 14:23 - 2012-08-03 00:04 - 00000000 ____D H:\Users\Daniel\AppData\Local\PMB Files 2013-08-06 14:23 - 2012-08-03 00:04 - 00000000 ____D H:\ProgramData\PMB Files 2013-08-05 14:42 - 2012-08-02 22:56 - 00024556 _____ H:\Windows\avmfwlanci.log 2013-08-05 14:33 - 2013-08-02 20:24 - 00000000 ____D H:\ProgramData\Origin 2013-08-05 14:02 - 2012-08-02 22:56 - 01498506 _____ H:\Windows\system32\PerfStringBackup.INI 2013-08-04 21:22 - 2012-08-28 14:26 - 00000000 ____D H:\Users\Daniel\Desktop\spiele 2013-08-04 21:22 - 2012-08-28 14:25 - 00000000 ____D H:\Users\Daniel\Desktop\bilder 2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\ProgramData\Freemake 2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\Program Files\Freemake 2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware 2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll 2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java 2013-08-04 18:06 - 2012-08-02 23:36 - 00867240 _____ (Oracle Corporation) H:\Windows\system32\npDeployJava1.dll 2013-08-04 18:06 - 2012-08-02 23:36 - 00789416 _____ (Oracle Corporation) H:\Windows\system32\deployJava1.dll 2013-08-04 17:54 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\de-DE 2013-08-04 17:42 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data 2013-08-04 17:08 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\NDF 2013-08-04 16:50 - 2013-06-07 17:27 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\.minecraft 2013-08-04 16:04 - 2013-08-02 20:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin 2013-08-03 13:37 - 2012-08-10 21:16 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk 2013-08-03 13:31 - 2012-08-10 21:10 - 00325977 _____ H:\Windows\DirectX.log 2013-08-03 13:25 - 2013-05-17 17:29 - 00000000 ____D H:\Program Files\Electronic Arts 2013-08-03 11:34 - 2013-08-03 11:20 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe 2013-08-03 07:20 - 2013-08-02 19:33 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso 2013-08-03 00:49 - 2013-08-03 00:23 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore 2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM 2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core 2013-08-02 22:50 - 2013-08-02 22:49 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold 2013-08-02 22:48 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel\AppData\Local\VirtualStore 2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url 2013-08-02 21:22 - 2013-08-02 21:10 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z 2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts 2013-08-02 19:51 - 2013-08-02 19:35 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods 2013-08-02 19:38 - 2012-08-02 23:55 - 00000000 ___HD H:\Program Files\InstallShield Installation Information 2013-08-02 18:51 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9 2013-08-02 18:50 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel 2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&-White-2 2013-08-01 19:15 - 2013-02-06 18:07 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\TS3Client 2013-08-01 14:41 - 2012-08-02 23:26 - 00002375 _____ H:\Users\Daniel\Desktop\Google Chrome.lnk 2013-07-31 21:57 - 2013-07-20 17:19 - 00000000 ____D H:\Users\Daniel\AppData\Local\Windows Live 2013-07-31 19:56 - 2013-02-06 18:04 - 00000000 ____D H:\Program Files\TeamSpeak 3 Client 2013-07-31 19:45 - 2009-07-14 06:53 - 00032632 _____ H:\Windows\Tasks\SCHEDLGU.TXT 2013-07-31 11:29 - 2013-07-31 09:26 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold Crusader 2013-07-31 09:23 - 2013-07-31 09:23 - 00000000 ____D H:\Program Files\Firefly Studios 2013-07-31 09:12 - 2013-05-10 20:00 - 00000000 ____D H:\Program Files\Common Files\Steam 2013-07-30 20:04 - 2013-07-28 22:34 - 00000000 ____D H:\Users\Daniel\Desktop\SDP 2013-07-30 19:39 - 2013-07-30 19:39 - 00015420 _____ H:\Windows\AVMInstall.Log 2013-07-30 19:39 - 2012-08-02 22:56 - 00000000 ____D H:\Program Files\avmwlanstick 2013-07-29 17:28 - 2012-11-24 16:50 - 00000000 ____D H:\Users\Daniel\Desktop\musik 2013-07-24 21:32 - 2013-06-16 21:03 - 00000000 ___RD H:\Users\Daniel\Desktop\Alles mit MC 2013-07-24 21:13 - 2013-07-24 21:13 - 00000000 ____D H:\Users\Daniel\dwhelper 2013-07-24 13:52 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\Microsoft.NET 2013-07-23 21:05 - 2013-04-26 17:00 - 00000000 ____D H:\Users\Daniel\AppData\Local\Microsoft Games 2013-07-23 21:02 - 2012-08-02 23:00 - 00062776 _____ H:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT 2013-07-21 23:06 - 2009-07-14 06:33 - 00286536 _____ H:\Windows\system32\FNTCACHE.DAT 2013-07-21 23:05 - 2012-08-03 08:43 - 00000000 ____D H:\Windows\system32\Drivers\de-DE 2013-07-20 17:23 - 2013-07-20 17:23 - 00000020 _____ H:\Windows\ðó} 2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Windows\de 2013-07-20 17:23 - 2013-07-20 17:23 - 00000000 ____D H:\Program Files\Microsoft SQL Server Compact Edition 2013-07-20 17:23 - 2013-07-20 17:22 - 00000000 ____D H:\Program Files\Windows Live 2013-07-20 17:22 - 2013-07-20 17:22 - 00000000 ____D H:\Windows\PCHEALTH 2013-07-20 17:22 - 2009-07-14 04:37 - 00000000 ____D H:\Program Files\Common Files\microsoft shared 2013-07-20 17:19 - 2013-07-20 17:19 - 00000000 ____D H:\Program Files\Common Files\Windows Live 2013-07-17 17:48 - 2013-07-10 21:02 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype-alt 2013-07-17 17:46 - 2013-07-17 17:46 - 00000906 _____ H:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-07-17 17:46 - 2013-07-17 17:46 - 00000000 ____D H:\Program Files\LogMeIn Hamachi 2013-07-17 12:50 - 2013-07-17 12:50 - 00143856 _____ H:\Windows\Minidump\071713-19484-01.dmp 2013-07-17 12:50 - 2013-05-05 12:54 - 232415028 _____ H:\Windows\MEMORY.DMP 2013-07-17 12:50 - 2013-05-05 12:54 - 00000000 ____D H:\Windows\Minidump 2013-07-14 00:46 - 2013-07-14 00:46 - 00675988 _____ H:\Users\Daniel\Desktop\Minecraft (1).exe 2013-07-12 22:43 - 2013-07-12 22:43 - 00001072 _____ H:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4056296316-973622430-28050819-1000Core1ce7f40846d64cd.job 2013-07-11 18:27 - 2009-07-14 09:49 - 00000000 ____D H:\Program Files\Windows Journal 2013-07-11 18:27 - 2009-07-14 06:52 - 00000000 ____D H:\Program Files\Windows Defender 2013-07-10 23:02 - 2013-07-10 23:02 - 00001935 _____ H:\Users\Daniel\Desktop\Skype.lnk 2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ___RD H:\Program Files\Skype 2013-07-10 23:02 - 2013-07-10 23:02 - 00000000 ____D H:\Program Files\Common Files\Skype 2013-07-10 23:02 - 2013-07-10 22:50 - 00000000 ____D H:\ProgramData\Skype 2013-07-10 22:29 - 2012-08-02 23:26 - 00000000 ____D H:\ProgramData\Skype-alt 2013-07-10 22:23 - 2013-07-10 21:09 - 00000000 ____D H:\Users\Daniel\Desktop\daniel.23570 2013-07-10 22:13 - 2013-07-10 22:13 - 00000030 _____ H:\Users\Daniel\Desktop\skype-temp-clean.bat 2013-07-10 20:59 - 2012-08-02 23:26 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Old_Skype ==================== Bamital & volsnap Check ================= H:\Windows\explorer.exe => MD5 is legit H:\Windows\System32\winlogon.exe => MD5 is legit H:\Windows\System32\wininit.exe => MD5 is legit H:\Windows\System32\svchost.exe => MD5 is legit H:\Windows\System32\services.exe => MD5 is legit H:\Windows\System32\User32.dll => MD5 is legit H:\Windows\System32\userinit.exe => MD5 is legit H:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-03 00:09 ==================== End Of Log ============================ hier... |
![]() | #34 |
/// Malware-holic ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Hi, ändere mal die Google Startseite momentan noch snapdo.com. starte dann neu, teste ob jetzt der Chrome vernünftig läuft. das ie Problem besteht noch?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
![]() | #35 |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ ja es besteht immer noch. Ich hab jetzt google als startseite |
![]() | #36 |
/// Malware-holic ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Du hast in chrome die Startseite geendert? haben die Anderen Browser noch probleme
__________________ --> Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ |
![]() | #37 |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ ja habe ich. Nein eigentlich nicht nur das mit dem getwindowinfo noch |
![]() | #38 |
/// Malware-holic ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ HI, ESET Online Scanner
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
![]() | #39 |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ So ich habe den Scan durchgeführt aber ich finde unter dem ausführ link den log nicht was kann ich tun? Sry war ein paar tage nicht |
![]() | #40 |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Hallo und entschuldige bitte die Verspätung. Brauchst du weiterhin noch Hilfe? Falls ja: Hat ESET denn etwas gefunden? Starte noch einmal FRST.
__________________ cheers, Leo |
![]() | #41 |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Hier FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-08-2013 (ATTENTION: ====> FRST version is 24 days old and could be outdated) Ran by Daniel (administrator) on 01-09-2013 20:00:20 Running from H:\Users\Daniel\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AMD) H:\Windows\system32\atiesrxx.exe (Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieSvc.exe (AMD) H:\Windows\system32\atieclxx.exe (AVAST Software) H:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVM Berlin) H:\Program Files\avmwlanstick\WlanNetService.exe (Apple Inc.) H:\Program Files\Bonjour\mDNSResponder.exe (LogMeIn Inc.) H:\Program Files\LogMeIn Hamachi\hamachi-2.exe (Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Malwarebytes Corporation) H:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corp.) H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Google Inc.) H:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe (Microsoft Corporation) H:\Program Files\Windows Media Player\WMPSideShowGadget.exe (Microsoft Corporation) H:\Program Files\Windows Media Player\wmplayer.exe (Oracle Corporation) H:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) H:\Program Files\AVAST Software\Avast\AvastUI.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\LCD Manager\lcdmon.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe (Valve Corporation) H:\Program Files\Steam\Steam.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe (Sandboxie Holdings, LLC) H:\Program Files\Sandboxie\SbieCtrl.exe (Windows Net) H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe (Logitech Inc.) H:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe (Microsoft Corporation) H:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) H:\Program Files\Internet Explorer\iexplore.exe (Valve Corporation) H:\Program Files\Common Files\Steam\SteamService.exe (Microsoft Corporation) H:\Windows\system32\wuauclt.exe (Skype Technologies S.A.) H:\Program Files\Skype\Phone\Skype.exe (Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe () H:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () H:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.177\deploy\LoLLauncher.exe () H:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.38\deploy\LolClient.exe (DVDVideoSoft Ltd.) H:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe (Apple Inc.) H:\Program Files\iTunes\iTunes.exe (Apple Inc.) H:\Program Files\iPod\bin\iPodService.exe (Apple Inc.) H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe (Apple Inc.) H:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe (Apple Inc.) H:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Google Inc.) H:\Program Files\Google\Chrome\Application\chrome.exe (DVDVideoSoft Ltd.) H:\Program Files\Common Files\DVDVideoSoft\bin\DvsService.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SunJavaUpdateSched] - H:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [avast] - H:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKLM\...\Run: [Launch LgDeviceAgent] - H:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [358472 2010-06-11] (Logitech Inc.) HKLM\...\Run: [Launch LCDMon] - H:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [1809992 2010-06-11] (Logitech Inc.) HKLM\...\Run: [Launch LGDCore] - H:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [3649096 2010-06-11] (Logitech Inc.) HKCU\...\Run: [Steam] - H:\Program Files\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation) HKCU\...\Run: [Skype] - H:\Program Files\Skype\Phone\Skype.exe [19873896 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [SandboxieControl] - H:\Program Files\Sandboxie\SbieCtrl.exe [543320 2013-07-08] (Sandboxie Holdings, LLC) MountPoints2: {1841e9a7-f93e-11e2-b8a9-00248ce625ea} - I:\pushinst.exe MountPoints2: {2a6149da-501e-11e2-9cd9-001c4af6e8a4} - I:\HTC_Sync_Manager_PC.exe MountPoints2: {af38bbab-0724-11e2-a9e4-00248ce625ea} - I:\pushinst.exe MountPoints2: {cc807940-dce3-11e1-ae98-00248ce625ea} - I:\pushinst.exe Startup: H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk ShortcutTarget: net.lnk -> H:\Users\Daniel\AppData\Roaming\Windows Net Data\net.exe (Windows Net) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. SearchScopes: HKLM - DefaultScope value is missing. BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - H:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Handler: msdaipp - No CLSID Value - Winsock: Catalog5 05 H:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Chrome: ======= CHR Extension: () - H:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab\background.html CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - H:\Users\Daniel\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx CHR StartMenuInternet: Google Chrome - H:\Program Files\Google\Chrome\Application\chrome.exe ========================== Services (Whitelisted) ================= R2 avast! Antivirus; H:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R2 AVM WLAN Connection Service; H:\Program Files\avmwlanstick\WlanNetService.exe [364544 2008-02-25] (AVM Berlin) R2 Hamachi2Svc; H:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.) S2 HiPatchService; H:\Program Files\Hi-Rez Studios\HiPatchService.exe [8704 2012-08-30] (Hi-Rez Studios) R2 MBAMScheduler; H:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; H:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 SbieSvc; H:\Program Files\Sandboxie\SbieSvc.exe [129112 2013-07-08] (Sandboxie Holdings, LLC) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; H:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software) R2 aswMonFlt; H:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software) R1 aswRdr; H:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software) R0 aswRvrt; H:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] () R1 aswSnx; H:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-08] (AVAST Software) R1 aswSP; H:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-08] (AVAST Software) R1 aswTdi; H:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software) R0 aswVmm; H:\Windows\System32\Drivers\aswVmm.sys [175176 2013-08-08] () R2 atksgt; H:\Windows\System32\DRIVERS\atksgt.sys [83872 2013-06-20] () S3 avmeject; H:\Windows\System32\drivers\avmeject.sys [4352 2007-11-07] (AVM Berlin) R3 FWLANUSB; H:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH) S3 fwlanusbn; H:\Windows\System32\DRIVERS\fwlanusbn.sys [401920 2007-12-19] (AVM GmbH) R3 hamachi; H:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R3 L1E; H:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-14] (Atheros Communications, Inc.) R3 LGBusEnum; H:\Windows\System32\drivers\LGBusEnum.sys [19720 2009-11-23] (Logitech Inc.) R3 LGVirHid; H:\Windows\System32\drivers\LGVirHid.sys [14856 2009-11-23] (Logitech Inc.) R2 lirsgt; H:\Windows\System32\DRIVERS\lirsgt.sys [25888 2013-06-20] () R3 MBAMProtector; H:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R3 MTsensor; H:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] () R3 SbieDrv; H:\Program Files\Sandboxie\SbieDrv.sys [159208 2013-07-08] (Sandboxie Holdings, LLC) S3 catchme; \??\H:\Users\Daniel\AppData\Local\Temp\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-01 19:10 - 2013-09-01 19:17 - 00000000 ____D H:\Ommods 2013-09-01 18:42 - 2013-09-01 18:42 - 00000000 ____D H:\Users\Daniel\Desktop\naked mod 2013-08-29 17:52 - 2013-08-29 18:20 - 00000000 ____D H:\Program Files\GSkype 2013-08-29 17:52 - 2013-08-29 17:52 - 00249856 ____N (Microsoft Corporation) H:\Windows\Setup1.exe 2013-08-29 17:52 - 2013-08-29 17:52 - 00073216 _____ (Microsoft Corporation) H:\Windows\ST6UNST.EXE 2013-08-29 16:12 - 2013-08-29 16:14 - 00000000 ____D H:\Users\Daniel\AppData\Local\Logitech 2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSQVGA_01_00_00.Wdf 2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSBW_01_00_00.Wdf 2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\ProgramData\Logitech 2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\Program Files\Logitech 2013-08-18 17:00 - 2013-08-30 17:11 - 00002139 _____ H:\Users\Public\Desktop\Google Chrome.lnk 2013-08-18 16:59 - 2013-09-01 19:04 - 00001098 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-18 16:59 - 2013-09-01 17:04 - 00001094 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-18 16:59 - 2013-08-18 17:00 - 00000000 ____D H:\Program Files\Google 2013-08-18 16:58 - 2013-08-18 17:00 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Google 2013-08-18 16:58 - 2013-08-18 16:58 - 00062776 _____ H:\Users\TORFdaniel\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Deployment 2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Apps\2.0 2013-08-18 16:57 - 2013-08-18 16:57 - 00000000 ____D H:\Users\TORFdaniel\AppData\Roaming\Adobe 2013-08-18 16:55 - 2013-08-18 16:55 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\LogMeIn Hamachi 2013-08-15 22:45 - 2013-08-15 22:45 - 00000000 ___RD H:\Sandbox 2013-08-14 20:29 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) H:\Windows\system32\WMVDECOD.DLL 2013-08-14 20:29 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) H:\Windows\system32\tzres.dll 2013-08-14 20:29 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) H:\Windows\system32\ntkrnlpa.exe 2013-08-14 20:29 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) H:\Windows\system32\ntoskrnl.exe 2013-08-14 20:29 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) H:\Windows\system32\ntdll.dll 2013-08-14 20:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) H:\Windows\system32\wintrust.dll 2013-08-14 20:29 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) H:\Windows\system32\rpcrt4.dll 2013-08-14 20:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) H:\Windows\system32\crypt32.dll 2013-08-14 20:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) H:\Windows\system32\cryptsvc.dll 2013-08-14 20:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) H:\Windows\system32\cryptnet.dll 2013-08-14 20:29 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\tcpip.sys 2013-08-14 20:29 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) H:\Windows\system32\Drivers\tssecsrv.sys 2013-08-14 20:20 - 2013-08-18 17:04 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\VirtualStore 2013-08-14 20:19 - 2013-08-14 20:21 - 00000000 ____D H:\Users\TORFdaniel 2013-08-14 20:19 - 2013-08-14 20:19 - 00000020 ___SH H:\Users\TORFdaniel\ntuser.ini 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Startmenü 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Netzwerkumgebung 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Druckumgebung 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Musik 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Bilder 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\AppData\Local\Verlauf 2013-08-11 21:22 - 2013-08-11 21:23 - 00000000 ____D H:\Users\Daniel\Desktop\beats 2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU 2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\AVS4YOU 2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\ProgramData\AVS4YOU 2013-08-11 20:39 - 2013-08-11 20:40 - 00000000 ____D H:\Program Files\Common Files\AVSMedia 2013-08-11 20:39 - 2013-08-11 20:40 - 00000000 ____D H:\Program Files\AVS4YOU 2013-08-11 20:39 - 2013-08-11 20:39 - 00001165 _____ H:\Users\Daniel\Desktop\AVS Audio Editor.lnk 2013-08-11 20:39 - 2012-12-18 12:55 - 01700352 _____ (Microsoft Corporation) H:\Windows\system32\GdiPlus.dll 2013-08-11 20:39 - 2012-12-18 12:55 - 00024576 _____ (Microsoft Corporation) H:\Windows\system32\msxml3a.dll 2013-08-11 20:28 - 2013-08-11 20:28 - 00392056 _____ (Softonic ) H:\Users\Daniel\Desktop\SoftonicDownloader_fuer_free-mp3-cutter-and-editor.exe 2013-08-08 22:25 - 2013-08-14 22:30 - 00000000 ____D H:\Windows\system32\MRT 2013-08-08 17:05 - 2013-08-08 17:05 - 00000000 ____D H:\Program Files\ESET 2013-08-08 17:04 - 2013-08-08 17:04 - 02347384 _____ (ESET) H:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe 2013-08-08 14:47 - 2013-08-14 22:29 - 75778376 _____ (Microsoft Corporation) H:\Windows\system32\MRT.exe 2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST 2013-08-08 14:44 - 2013-08-08 14:45 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-07 23:02 - 2013-08-31 18:12 - 00003600 _____ H:\Windows\Sandboxie.ini 2013-08-07 23:02 - 2013-08-07 23:01 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk 2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie 2013-08-07 22:55 - 2013-08-08 14:43 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys 2013-08-07 22:55 - 2013-08-08 14:43 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys 2013-08-07 22:55 - 2013-08-08 14:43 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys 2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-07 22:55 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) H:\Windows\system32\Drivers\aswRdr2.sys 2013-08-07 22:55 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) H:\Windows\system32\Drivers\aswTdi.sys 2013-08-07 22:55 - 2013-05-09 10:59 - 00049376 _____ H:\Windows\system32\Drivers\aswRvrt.sys 2013-08-07 22:55 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) H:\Windows\system32\Drivers\aswFsBlk.sys 2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software 2013-08-07 22:54 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) H:\Windows\system32\Drivers\aswMonFlt.sys 2013-08-07 22:54 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) H:\Windows\system32\aswBoot.exe 2013-08-07 22:54 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) H:\Windows\avastSS.scr 2013-08-07 22:51 - 2013-08-07 22:54 - 00000000 ____D H:\ProgramData\AVAST Software 2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss 2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt 2013-08-07 19:12 - 2013-08-07 19:17 - 00000000 ____D H:\ProgramData\HitmanPro 2013-08-07 19:08 - 2013-08-07 22:17 - 00000000 ____D H:\Windows\ERUNT 2013-08-06 17:06 - 2013-08-07 22:13 - 00000000 ____D H:\Windows\erdnt 2013-08-04 21:21 - 2013-08-07 23:13 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme 2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware 2013-08-04 18:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) H:\Windows\system32\Drivers\mbam.sys 2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll 2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java 2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk 2013-08-03 11:20 - 2013-08-03 11:34 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe 2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM 2013-08-03 00:23 - 2013-08-03 00:49 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore 2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core 2013-08-02 22:49 - 2013-08-02 22:50 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold 2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url 2013-08-02 21:10 - 2013-08-02 21:22 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z 2013-08-02 20:29 - 2013-08-04 16:04 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin 2013-08-02 20:24 - 2013-08-05 14:33 - 00000000 ____D H:\ProgramData\Origin 2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts 2013-08-02 19:35 - 2013-08-02 19:51 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods 2013-08-02 19:33 - 2013-08-03 07:20 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso 2013-08-02 19:29 - 2013-08-06 16:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent 2013-08-02 18:51 - 2013-08-04 17:42 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data 2013-08-02 18:50 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9 2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&-White-2 ==================== One Month Modified Files and Folders ======= 2013-09-01 19:55 - 2013-07-10 22:50 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Skype 2013-09-01 19:53 - 2012-08-03 00:04 - 00000000 ____D H:\Users\Daniel\AppData\Local\PMB Files 2013-09-01 19:17 - 2013-09-01 19:10 - 00000000 ____D H:\Ommods 2013-09-01 19:04 - 2013-08-18 16:59 - 00001098 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-01 18:42 - 2013-09-01 18:42 - 00000000 ____D H:\Users\Daniel\Desktop\naked mod 2013-09-01 18:25 - 2012-08-25 22:31 - 00000000 ____D H:\Users\Daniel\AppData\Local\Oblivion 2013-09-01 17:19 - 2012-08-02 22:47 - 01299723 _____ H:\Windows\WindowsUpdate.log 2013-09-01 17:04 - 2013-08-18 16:59 - 00001094 _____ H:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-01 16:39 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-01 16:39 - 2009-07-14 06:34 - 00018928 ____H H:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-01 16:36 - 2013-05-10 20:00 - 00000000 ____D H:\Program Files\Steam 2013-09-01 16:32 - 2013-06-29 00:06 - 00000435 _____ H:\Windows\system32\Drivers\etc\hosts.ics 2013-09-01 16:32 - 2009-07-14 06:53 - 00000006 ____H H:\Windows\Tasks\SA.DAT 2013-09-01 16:32 - 2009-07-14 06:39 - 00132023 _____ H:\Windows\setupact.log 2013-09-01 01:00 - 2013-06-02 00:57 - 00105108 _____ H:\Windows\IE10_main.log 2013-08-31 23:17 - 2012-08-03 00:04 - 00000000 ____D H:\ProgramData\PMB Files 2013-08-31 21:01 - 2013-06-07 17:27 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\.minecraft 2013-08-31 18:12 - 2013-08-07 23:02 - 00003600 _____ H:\Windows\Sandboxie.ini 2013-08-30 21:44 - 2013-02-06 18:07 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\TS3Client 2013-08-30 17:11 - 2013-08-18 17:00 - 00002139 _____ H:\Users\Public\Desktop\Google Chrome.lnk 2013-08-29 18:20 - 2013-08-29 17:52 - 00000000 ____D H:\Program Files\GSkype 2013-08-29 17:52 - 2013-08-29 17:52 - 00249856 ____N (Microsoft Corporation) H:\Windows\Setup1.exe 2013-08-29 17:52 - 2013-08-29 17:52 - 00073216 _____ (Microsoft Corporation) H:\Windows\ST6UNST.EXE 2013-08-29 16:14 - 2013-08-29 16:12 - 00000000 ____D H:\Users\Daniel\AppData\Local\Logitech 2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSQVGA_01_00_00.Wdf 2013-08-29 16:11 - 2013-08-29 16:11 - 00000000 ____H H:\Windows\system32\Drivers\Msft_User_lgSSBW_01_00_00.Wdf 2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\ProgramData\Logitech 2013-08-29 16:09 - 2013-08-29 16:09 - 00000000 ____D H:\Program Files\Logitech 2013-08-28 19:49 - 2013-01-12 20:51 - 00000000 ____D H:\Users\Daniel\AppData\Local\LogMeIn Hamachi 2013-08-26 17:42 - 2012-08-02 22:56 - 01498506 _____ H:\Windows\system32\PerfStringBackup.INI 2013-08-22 17:50 - 2013-02-06 18:04 - 00000000 ____D H:\Program Files\TeamSpeak 3 Client 2013-08-21 18:08 - 2012-08-28 14:26 - 00000000 ____D H:\Users\Daniel\Desktop\spiele 2013-08-18 20:06 - 2012-08-06 13:47 - 00280852 _____ H:\Windows\PFRO.log 2013-08-18 17:08 - 2012-08-02 23:02 - 00000000 ____D H:\Users\Daniel\AppData\Local\Google 2013-08-18 17:04 - 2013-08-14 20:20 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\VirtualStore 2013-08-18 17:00 - 2013-08-18 16:59 - 00000000 ____D H:\Program Files\Google 2013-08-18 17:00 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Google 2013-08-18 16:58 - 2013-08-18 16:58 - 00062776 _____ H:\Users\TORFdaniel\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Deployment 2013-08-18 16:58 - 2013-08-18 16:58 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\Apps\2.0 2013-08-18 16:57 - 2013-08-18 16:57 - 00000000 ____D H:\Users\TORFdaniel\AppData\Roaming\Adobe 2013-08-18 16:55 - 2013-08-18 16:55 - 00000000 ____D H:\Users\TORFdaniel\AppData\Local\LogMeIn Hamachi 2013-08-18 03:02 - 2013-06-30 21:58 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\vlc 2013-08-17 18:48 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\rescache 2013-08-15 22:45 - 2013-08-15 22:45 - 00000000 ___RD H:\Sandbox 2013-08-15 20:08 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\Microsoft.NET 2013-08-15 14:21 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\de-DE 2013-08-14 22:30 - 2013-08-08 22:25 - 00000000 ____D H:\Windows\system32\MRT 2013-08-14 22:29 - 2013-08-08 14:47 - 75778376 _____ (Microsoft Corporation) H:\Windows\system32\MRT.exe 2013-08-14 20:21 - 2013-08-14 20:19 - 00000000 ____D H:\Users\TORFdaniel 2013-08-14 20:19 - 2013-08-14 20:19 - 00000020 ___SH H:\Users\TORFdaniel\ntuser.ini 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Startmenü 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Netzwerkumgebung 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Druckumgebung 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Musik 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\Documents\Eigene Bilder 2013-08-14 20:19 - 2013-08-14 20:19 - 00000000 _SHDL H:\Users\TORFdaniel\AppData\Local\Verlauf 2013-08-12 22:02 - 2009-07-14 04:37 - 00000000 ____D H:\Program Files\Common Files\microsoft shared 2013-08-12 22:02 - 2009-07-14 04:04 - 00000499 _____ H:\Windows\win.ini 2013-08-11 22:21 - 2009-07-14 06:33 - 00287896 _____ H:\Windows\system32\FNTCACHE.DAT 2013-08-11 21:23 - 2013-08-11 21:22 - 00000000 ____D H:\Users\Daniel\Desktop\beats 2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU 2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\AVS4YOU 2013-08-11 20:40 - 2013-08-11 20:40 - 00000000 ____D H:\ProgramData\AVS4YOU 2013-08-11 20:40 - 2013-08-11 20:39 - 00000000 ____D H:\Program Files\Common Files\AVSMedia 2013-08-11 20:40 - 2013-08-11 20:39 - 00000000 ____D H:\Program Files\AVS4YOU 2013-08-11 20:40 - 2012-08-02 23:00 - 00062776 _____ H:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT 2013-08-11 20:39 - 2013-08-11 20:39 - 00001165 _____ H:\Users\Daniel\Desktop\AVS Audio Editor.lnk 2013-08-11 20:29 - 2009-07-14 04:37 - 00000000 ___RD H:\Users\Public 2013-08-11 20:28 - 2013-08-11 20:28 - 00392056 _____ (Softonic ) H:\Users\Daniel\Desktop\SoftonicDownloader_fuer_free-mp3-cutter-and-editor.exe 2013-08-08 17:05 - 2013-08-08 17:05 - 00000000 ____D H:\Program Files\ESET 2013-08-08 17:04 - 2013-08-08 17:04 - 02347384 _____ (ESET) H:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe 2013-08-08 14:45 - 2013-08-08 14:45 - 00000000 ____D H:\FRST 2013-08-08 14:45 - 2013-08-08 14:44 - 01229980 _____ (Farbar) H:\Users\Daniel\Desktop\FRST.exe 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswVmm.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSP.sys.sum 2013-08-08 14:43 - 2013-08-08 14:43 - 00000175 _____ H:\Windows\system32\Drivers\aswSnx.sys.sum 2013-08-08 14:43 - 2013-08-07 22:55 - 00770344 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSnx.sys 2013-08-08 14:43 - 2013-08-07 22:55 - 00369584 _____ (AVAST Software) H:\Windows\system32\Drivers\aswSP.sys 2013-08-08 14:43 - 2013-08-07 22:55 - 00175176 _____ H:\Windows\system32\Drivers\aswVmm.sys 2013-08-07 23:13 - 2013-08-04 21:21 - 00000000 ____D H:\Users\Daniel\Desktop\Virenprogramme 2013-08-07 23:01 - 2013-08-07 23:02 - 00001073 _____ H:\Users\Daniel\Desktop\Sandboxed Web Browser.lnk 2013-08-07 23:01 - 2013-08-07 23:01 - 00000000 ____D H:\Program Files\Sandboxie 2013-08-07 22:55 - 2013-08-07 22:55 - 00002081 _____ H:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-08-07 22:54 - 2013-08-07 22:54 - 00000000 ____D H:\Program Files\AVAST Software 2013-08-07 22:54 - 2013-08-07 22:51 - 00000000 ____D H:\ProgramData\AVAST Software 2013-08-07 22:54 - 2009-07-14 04:04 - 00002577 _____ H:\Windows\system32\config.nt 2013-08-07 22:49 - 2012-08-19 22:06 - 00000000 ____D H:\ProgramData\Avira 2013-08-07 22:23 - 2013-08-07 22:23 - 00000000 ____D H:\Windows\pss 2013-08-07 22:17 - 2013-08-07 22:17 - 00001648 _____ H:\DelFix.txt 2013-08-07 22:17 - 2013-08-07 19:08 - 00000000 ____D H:\Windows\ERUNT 2013-08-07 22:13 - 2013-08-06 17:06 - 00000000 ____D H:\Windows\erdnt 2013-08-07 19:17 - 2013-08-07 19:12 - 00000000 ____D H:\ProgramData\HitmanPro 2013-08-06 16:56 - 2012-09-11 12:34 - 00000000 ____D H:\Users\Daniel\AppData\Local\Unity 2013-08-06 16:54 - 2013-07-25 20:15 - 00000000 ____D H:\Program Files\Mozilla Firefox 2013-08-06 16:54 - 2013-05-11 22:18 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-08-06 16:51 - 2013-08-02 19:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\uTorrent 2013-08-06 14:45 - 2013-06-30 21:11 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Orbit 2013-08-05 14:42 - 2012-08-02 22:56 - 00024556 _____ H:\Windows\avmfwlanci.log 2013-08-05 14:33 - 2013-08-02 20:24 - 00000000 ____D H:\ProgramData\Origin 2013-08-04 21:22 - 2012-08-28 14:25 - 00000000 ____D H:\Users\Daniel\Desktop\bilder 2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\ProgramData\Freemake 2013-08-04 18:38 - 2013-06-30 20:21 - 00000000 ____D H:\Program Files\Freemake 2013-08-04 18:33 - 2013-08-04 18:33 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\ProgramData\Malwarebytes 2013-08-04 18:32 - 2013-08-04 18:32 - 00000000 ____D H:\Program Files\Malwarebytes' Anti-Malware 2013-08-04 18:06 - 2013-08-04 18:06 - 00263592 _____ (Oracle Corporation) H:\Windows\system32\javaws.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\javaw.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00175016 _____ (Oracle Corporation) H:\Windows\system32\java.exe 2013-08-04 18:06 - 2013-08-04 18:06 - 00094632 _____ (Oracle Corporation) H:\Windows\system32\WindowsAccessBridge.dll 2013-08-04 18:06 - 2013-08-04 18:06 - 00000000 ____D H:\Program Files\Common Files\Java 2013-08-04 18:06 - 2012-08-02 23:36 - 00867240 _____ (Oracle Corporation) H:\Windows\system32\npDeployJava1.dll 2013-08-04 18:06 - 2012-08-02 23:36 - 00789416 _____ (Oracle Corporation) H:\Windows\system32\deployJava1.dll 2013-08-04 17:42 - 2013-08-02 18:51 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Windows Net Data 2013-08-04 17:08 - 2009-07-14 04:37 - 00000000 ____D H:\Windows\system32\NDF 2013-08-04 16:04 - 2013-08-02 20:29 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Origin 2013-08-03 13:37 - 2012-08-10 21:16 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-08-03 13:31 - 2013-08-03 13:31 - 00002243 _____ H:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk 2013-08-03 13:31 - 2012-08-10 21:10 - 00325977 _____ H:\Windows\DirectX.log 2013-08-03 13:25 - 2013-05-17 17:29 - 00000000 ____D H:\Program Files\Electronic Arts 2013-08-03 11:34 - 2013-08-03 11:20 - 00000000 ____D H:\Users\Daniel\Desktop\Herr der Ringe 2013-08-03 07:20 - 2013-08-02 19:33 - 1658341376 ____R H:\Users\Daniel\Downloads\rld-bme2.iso 2013-08-03 00:49 - 2013-08-03 00:23 - 00000000 ____D H:\Users\Daniel\AppData\Roaming\Spore 2013-08-03 00:48 - 2013-08-03 00:48 - 00000000 ____D H:\Users\Daniel\Desktop\SporeRegFixforSTEAM 2013-08-02 23:12 - 2013-08-02 23:12 - 00000000 ____D H:\ProgramData\EA Core 2013-08-02 22:50 - 2013-08-02 22:49 - 00000000 ____D H:\Users\Daniel\Documents\Stronghold 2013-08-02 22:48 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel\AppData\Local\VirtualStore 2013-08-02 21:29 - 2013-08-02 21:29 - 00000215 _____ H:\Users\Daniel\Desktop\Spore.url 2013-08-02 21:22 - 2013-08-02 21:10 - 3106712552 _____ H:\Users\Daniel\Downloads\Spore.7z 2013-08-02 20:23 - 2013-08-02 20:23 - 00000000 ____D H:\ProgramData\Electronic Arts 2013-08-02 19:51 - 2013-08-02 19:35 - 00000000 ____D H:\Users\Daniel\Downloads\Black And White 2 + Battle Of The Gods 2013-08-02 19:38 - 2012-08-02 23:55 - 00000000 ___HD H:\Program Files\InstallShield Installation Information 2013-08-02 18:51 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp8a15093bda63fc0edbae9b584075dce7 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\ChromeExtensions 2013-08-02 18:50 - 2013-08-02 18:50 - 00000000 ____D H:\Users\Daniel\AppData\Local\Temp1b7d8e286b222587f57dc450d3fd9af9 2013-08-02 18:50 - 2012-08-02 22:54 - 00000000 ____D H:\Users\Daniel 2013-08-02 18:36 - 2013-08-02 18:36 - 00000000 ____D H:\Users\Daniel\Downloads\Black-&-White-2 ==================== Bamital & volsnap Check ================= H:\Windows\explorer.exe => MD5 is legit H:\Windows\System32\winlogon.exe => MD5 is legit H:\Windows\System32\wininit.exe => MD5 is legit H:\Windows\System32\svchost.exe => MD5 is legit H:\Windows\System32\services.exe => MD5 is legit H:\Windows\System32\User32.dll => MD5 is legit H:\Windows\System32\userinit.exe => MD5 is legit H:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 17:30 ==================== End Of Log ============================ |
![]() | #42 |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Hi, ist das getwindowinfo-Zeugs nach diesem Fix verschwunden? Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter H:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk H:\Users\Daniel\AppData\Roaming\Windows Net Data Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ cheers, Leo |
![]() | #43 | |
![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Ok wie es aussieht öffnet der sich nicht mehr! Zitat:
|
![]() | #44 |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Ok, bestehen noch Probleme oder ist jetzt alles in Ordnung?
__________________ cheers, Leo |
![]() | #45 |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ Hi, ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe? Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.
__________________ cheers, Leo |
![]() |
Themen zu Internet Explorer öffnet sich immer wieder mit http://www_getwindowinfo/ |
adware.gameplaylabs, adware.gamespyarcade, fehlermeldung, http://www_getwindowinfo/, pup.babylon.a, pup.bundleinstaller.vg, pup.dealply, pup.installbrain, pup.optional.babylon.a, pup.optional.dealply.a, pup.optional.defaulttab, pup.optional.delta.a, pup.optional.optchrome.a, pup.optional.optimizepro.a, pup.optional.sweetim, pup.optional.sweetpacks, pup.optional.tarma.a, pup.optional.wajam, pup.optional.wajam.a, schließe, trojan.fakevlc, trojan.mwf.gen |