![]() |
|
Log-Analyse und Auswertung: Windows 7 - Virenprogramm findet einige Viren + ComputerabsturzWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows 7 - Virenprogramm findet einige Viren + Computerabsturz Hallo, gestern abend habe ich mal wieder meinen Computer mit Avast, Malwarebytes Anit-Malware und OTL nach Viren untersuchen lassen. Avast hat nichts gefunden, aber MBAM und OTL haben ähnliche Viren gefunden. Also suche ich jetzt eure Hilfe. Ich habe die Checkliste bereits ausgeführt. Hier der Addition.txt-Log: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-08-2013 Ran by Vinc at 2013-08-13 10:56:55 Running from C:\Users\Vinc\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Update for Microsoft Office 2007 (KB2508958) (x32) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Acronis*True*Image*Home 2012 (x32 Version: 15.0.7119) Adobe AIR (x32 Version: 3.6.0.6090) Adobe Download Assistant (x32 Version: 1.2.2) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Photoshop CS6 (x32 Version: 13.0) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Adobe Shockwave Player 11.6 (x32 Version: 11.6.5.635) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) avast! Free Antivirus (x32 Version: 8.0.1489.0) AVM FRITZ!Box Dokumentation (x32) Bandicam (x32 Version: 1.8.6.321) Bandisoft MPEG-1 Decoder (x32) Bonjour (Version: 3.0.0.10) Camtasia Studio 7 (x32 Version: 7.1.1) Canon iP4700 series Printer Driver Canon Utilities Easy-PhotoPrint EX (x32) Canon Utilities Solution Menu (x32) CCleaner (Version: 3.28) CDBurnerXP (x32 Version: 4.5.1.3868) CD-LabelPrint (x32) Cheat Engine 6.2 (x32) D3DX10 (x32 Version: 15.4.2368.0902) Delta Chrome Toolbar (x32) Fotogalerie (x32 Version: 16.4.3503.0728) Freemake Video Converter Version 4.0.1 (x32 Version: 4.0.1) FreePDF (Remove only) (x32) Google Chrome (x32 Version: 28.0.1500.95) Google Earth (x32 Version: 6.2.2.6613) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4209.2358) Google Update Helper (x32 Version: 1.3.21.153) GPL Ghostscript 8.71 (x32) Hello World 0.1 (x32) iCloud (Version: 2.1.2.8) iTunes (Version: 11.0.4.4) James Cameron's AVATAR(tm): DAS SPIEL (x32 Version: 1.00.00) JDownloader 2 (x32 Version: 2) League of Legends (x32 Version: 1.3) LEGO® Star Wars™: Die Komplette Saga (x32 Version: 1.00.0000) LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) MorphVOX Pro (x32 Version: 4.3.21) MotioninJoy ds3 driver version 0.6.0003 (Version: 0.5.0001) Movie Maker (x32 Version: 16.4.3503.0728) Mozilla Maintenance Service (x32 Version: 17.0.6) Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6) Mp3tag v2.54 (x32 Version: v2.54) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT Redists (Version: 1.0) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1108.0727) nder (Version: 2.66a) Open Broadcaster Software (x32) OpenAL (x32) Opera 12.02 (x32 Version: 12.02.1578) Origin (x32 Version: 9.1.15.109) Pando Media Booster (x32 Version: 2.6.0.8) PDF Settings CS6 (x32 Version: 11.0) Photo Gallery (x32 Version: 16.4.3503.0728) PlanetSide 2 (HKCU Version: 1.0.3.183) Pokemon World Online version 1.83 (x32 Version: 1.83) Project 64 version 2.0.0.14 (x32 Version: 2.0.0.14) Python 2.5 Numeric-24.2 (x32) Python 2.5 PythonCard-0.8.2 (x32) Python 2.5.1 (x32 Version: 2.5.1150) QuickTime (x32 Version: 7.74.80.86) RarmaRadio 2.68.3 (x32) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5995) Recuva (Version: 1.43) RedMon - Redirection Port Monitor RegClean Pro (x32 Version: 6.21) Skype Click to Call (x32 Version: 6.3.11079) Skype™ 6.6 (x32 Version: 6.6.106) SPE (x32) Spybot - Search & Destroy (x32 Version: 2.0.12) Star Wars: The Old Republic (x32 Version: 1.00) Steam (x32 Version: 1.0.0.0) swMSM (x32 Version: 12.0.0.1) SystemDiagnostics (x32 Version: 2.04.0006) TeamSpeak 3 Client (Version: 3.0.10) Unlocker 1.9.1-x64 (Version: 1.9.1) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) VLC media player 2.0.7 (Version: 2.0.7) Wacom Tablett (Version: 6.3.5-3) WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.3) WebTablet FB Plugin 64 bit (Version: 2.1.0.3) Windows Live Communications Platform (x32 Version: 16.4.3503.0728) Windows Live Essentials (x32 Version: 16.4.3503.0728) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3503.0728) Windows Live Photo Common (x32 Version: 16.4.3503.0728) Windows Live PIMT Platform (x32 Version: 16.4.3503.0728) Windows Live SOXE (x32 Version: 16.4.3503.0728) Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728) Windows Live UX Platform (x32 Version: 16.4.3503.0728) Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728) WinDS PRO 2010.8 (Vinc) (HKCU Version: 2010.8.00.0) WinDS PRO 2013.4.5 (Version: 2013.4.5.0) WinDS PRO Apps 1.3 (Version: 1.3.0.0) World of Warcraft (x32 Version: 5.3.0.17055) wxPython 2.8.7.1 (unicode) for Python 2.5 (x32 Version: 2.8.7.1-unicode) ==================== Restore Points ========================= FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2013 Ran by Vinc (administrator) on 13-08-2013 10:56:20 Running from C:\Users\Vinc\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe (Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE (Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy\SDFSSvc.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\DeskViewBasic\DeskViewBasicService.exe (Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy\SDUpdSvc.exe (Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy\SDWSCSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Sysinternals - www.sysinternals.com) D:\Programme\Microsofts Desktops\Desktops.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Valve Corporation) D:\Programme\Steam\Steam.exe (www.motioninjoy.com) D:\Programme\MotioninJoy\ds3\DS3_Tool.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (Acronis) D:\Programme\Acronis True Image\TrueImageHome\TrueImageMonitor.exe (Acronis) D:\Programme\Acronis True Image\TrueImageHome\TimounterMonitor.exe (Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe (AVAST Software) D:\Programme\Avast\AvastUI.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (AVAST Software) D:\Programme\Avast\AvastSvc.exe (Safer-Networking Ltd.) D:\Programme\Spybot - Search & Destroy\SDTray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-03] (Realtek Semiconductor) HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.) HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403656 2012-04-27] (Acronis) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKCU\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe [59240 2012-02-23] (Apple Inc.) HKCU\...\Run: [Sysinternals Desktops] - D:\Programme\Microsofts Desktops\Desktops.exe [116088 2010-01-18] (Sysinternals - www.sysinternals.com) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKCU\...\Run: [Steam] - D:\Programme\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation) HKCU\...\Run: [DS3 Tool] - D:\Programme\MotioninJoy\ds3\DS3_Tool.exe [110352 2011-01-01] (www.motioninjoy.com) HKCU\...\Run: [Spybot-S&D Cleaning] - D:\Programme\Spybot - Search & Destroy\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.) HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-27] (Google Inc.) MountPoints2: {9d9bb841-9814-11df-b407-806e6f6e6963} - H:\Autorun.exe HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de) HKLM-x32\...\Run: [TrueImageMonitor.exe] - D:\Programme\Acronis True Image\TrueImageHome\TrueImageMonitor.exe [5993136 2012-04-27] (Acronis) HKLM-x32\...\Run: [AcronisTimounterMonitor] - D:\Programme\Acronis True Image\TrueImageHome\TimounterMonitor.exe [1173680 2012-04-27] (Acronis) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - D:\Programme\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.) HKLM-x32\...\Run: [avast] - D:\Programme\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) HKLM-x32\...\Run: [UnlockerAssistant] - "D:\Programme\Unlocker\UnlockerAssistant.exe" [x] HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [SDTray] - D:\Programme\Spybot - Search & Destroy\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.) HKU\Admin\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe [59240 2012-02-23] (Apple Inc.) HKU\Admin\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-27] (Google Inc.) HKU\Admin\...\Run: [Sysinternals Desktops] - D:\Programme\Microsofts Desktops\Desktops.exe [116088 2010-01-18] (Sysinternals - www.sysinternals.com) HKU\Admin\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-03-01] () HKU\Gast1\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-27] (Google Inc.) HKU\Vinc2\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-27] (Google Inc.) HKU\Vinc2\...\Run: [Sysinternals Desktops] - D:\Programme\Microsofts Desktops\Desktops.exe [116088 2010-01-18] (Sysinternals - www.sysinternals.com) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions) Startup: C:\Users\Vinc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ts.fujitsu.com/index2 HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://bluevinc.jimdo.com/ hxxp://youtube.com/user/bluevinc hxxp://facebook.de/ hxxp://twitter.com/ SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {951CC197-18C5-4940-B16B-38C50F803073} URL = BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer-Networking Ltd.) BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programme\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programme\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.4 - D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.5 - D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.6 - D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Extension: No Name - C:\Users\Vinc\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} FF Extension: m2k - C:\Users\Vinc\AppData\Roaming\Mozilla\Firefox\profiles\extensions\m2k@m2kdownloader.com.xpi Chrome: ======= CHR HomePage: hxxp://google.de/ CHR RestoreOnStartup: "hxxp://google.de/" CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) CHR Extension: (avast! Online Security) - C:\Users\Vinc\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0 CHR Extension: (Skype Click to Call) - C:\Users\Vinc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Vinc\AppData\Roaming\BabSolution\CR\delta2.crx CHR HKLM-x32\...\Chrome\Extension: [lbbbdmbjkgojacipgefbifkiebpcdjhn] - C:\Program Files (x86)\Movie2KDownloader.com\m2kDownloader10.crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R2 DeskViewBasicService; C:\Program Files (x86)\Fujitsu\DeskViewBasic\DeskViewBasicService.exe [34816 2009-08-19] (Fujitsu Technology Solutions) R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-04-29] (Freemake) R2 SDScannerService; D:\Programme\Spybot - Search & Destroy\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.) R2 SDUpdateService; D:\Programme\Spybot - Search & Destroy\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.) R2 SDWSCService; D:\Programme\Spybot - Search & Destroy\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.) R2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions) R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [613688 2013-02-08] (Wacom Technology, Corp.) S2 AntiVirSchedulerService; "C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe" [x] S2 AntiVirService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe" [x] ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-04-25] (Avira GmbH) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-04-27] (Avira GmbH) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-05-02] (Avira GmbH) S3 libusb0; C:\Windows\SysWow64\drivers\libusb0.sys [33792 2005-03-09] () S3 libusb0; system32\drivers\libusb0.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-13 10:54 - 2013-08-13 10:54 - 01575190 _____ (Farbar) C:\Users\Vinc\Desktop\FRST64.exe 2013-08-13 10:53 - 2013-08-13 10:53 - 00050477 _____ C:\Users\Vinc\Desktop\Defogger.exe 2013-08-13 10:53 - 2013-08-13 10:53 - 00000470 _____ C:\Users\Vinc\Desktop\defogger_disable.log 2013-08-13 10:53 - 2013-08-13 10:53 - 00000000 _____ C:\Users\Vinc\defogger_reenable 2013-08-11 17:37 - 2013-08-11 17:37 - 75161460 _____ C:\Users\Vinc\Downloads\Madcon - Glow.mp4 2013-08-11 13:23 - 2013-08-11 13:24 - 00000000 ____D C:\Users\Vinc\Downloads\One Piece 2013-08-11 12:16 - 2013-08-11 12:16 - 00001218 _____ C:\Users\Vinc\Desktop\Mc Affe Labs Stinger.lnk 2013-08-02 17:04 - 2013-08-13 10:42 - 00001008 _____ C:\Windows\setupact.log 2013-08-01 13:01 - 2013-08-01 13:01 - 00000619 _____ C:\Users\Public\Desktop\VLC media player.lnk ==================== One Month Modified Files and Folders ======= 2013-08-13 10:55 - 2013-08-13 10:55 - 00000000 ____D C:\FRST 2013-08-13 10:54 - 2013-08-13 10:54 - 01575190 _____ (Farbar) C:\Users\Vinc\Desktop\FRST64.exe 2013-08-13 10:53 - 2013-08-13 10:53 - 00050477 _____ C:\Users\Vinc\Desktop\Defogger.exe 2013-08-13 10:53 - 2013-08-13 10:53 - 00000470 _____ C:\Users\Vinc\Desktop\defogger_disable.log 2013-08-13 10:53 - 2013-08-13 10:53 - 00000000 _____ C:\Users\Vinc\defogger_reenable 2013-08-13 10:53 - 2010-07-25 12:08 - 00000000 ____D C:\Users\Vinc 2013-08-13 10:50 - 2009-07-14 06:45 - 00009712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-13 10:50 - 2009-07-14 06:45 - 00009712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-13 10:47 - 2010-07-25 19:50 - 01352017 _____ C:\Windows\WindowsUpdate.log 2013-08-13 10:46 - 2012-05-12 10:19 - 00000000 ____D F:\Eigene Dateien\Eigene Dokumente\Wichtig 2013-08-13 10:44 - 2012-09-09 22:26 - 00000000 ____D C:\Users\Vinc\AppData\Roaming\Skype 2013-08-13 10:43 - 2012-09-13 13:53 - 00004144 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-08-13 10:42 - 2013-08-02 17:04 - 00001008 _____ C:\Windows\setupact.log 2013-08-13 10:42 - 2012-05-27 12:05 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-13 10:42 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-12 21:59 - 2012-05-26 16:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-12 21:40 - 2012-05-27 12:05 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-12 21:07 - 2012-11-21 11:31 - 00000675 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-12 15:01 - 2013-02-10 13:22 - 00003108 _____ C:\Windows\System32\Tasks\RegClean Pro 2013-08-12 15:01 - 2012-09-12 17:59 - 00000274 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job 2013-08-12 11:30 - 2013-06-03 16:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-08-12 11:30 - 2012-10-19 19:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-11 17:37 - 2013-08-11 17:37 - 75161460 _____ C:\Users\Vinc\Downloads\Madcon - Glow.mp4 2013-08-11 17:30 - 2013-03-10 18:25 - 00000000 ____D C:\Users\Vinc\AppData\Roaming\vlc 2013-08-11 13:24 - 2013-08-11 13:23 - 00000000 ____D C:\Users\Vinc\Downloads\One Piece 2013-08-11 12:22 - 2013-05-09 17:14 - 00000000 ____D C:\Users\Vinc\AppData\Roaming\BabSolution 2013-08-11 12:16 - 2013-08-11 12:16 - 00001218 _____ C:\Users\Vinc\Desktop\Mc Affe Labs Stinger.lnk 2013-08-11 02:14 - 2012-05-12 10:19 - 00000000 ____D F:\Eigene Dateien\Eigene Dokumente\Produkte 2013-08-09 15:01 - 2012-05-26 16:35 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-09 15:01 - 2012-05-26 16:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-09 15:01 - 2012-05-26 16:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-09 15:01 - 2010-07-25 12:08 - 00000000 ____D C:\Users\Vinc\AppData\Local\Adobe 2013-08-03 20:57 - 2013-04-19 23:08 - 00000619 _____ C:\Users\Vinc\Desktop\Open Broadcaster Software.lnk 2013-08-02 17:43 - 2012-05-28 11:25 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-01 16:23 - 2012-05-27 12:05 - 00000000 ____D C:\Users\Vinc\AppData\Local\Google 2013-08-01 13:01 - 2013-08-01 13:01 - 00000619 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-07-31 17:59 - 2012-09-12 17:59 - 00000282 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job 2013-07-30 11:10 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-29 21:12 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-07-29 10:39 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-07-25 14:56 - 2013-06-24 16:09 - 00000000 ____D C:\Users\Gast1\AppData\Roaming\Skype ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-12 18:26 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Das GMER-, MBAM- und OTL-Log füge ich im Anhang bei. Als letztes möchte ich noch beifügen: Gerade, als ich mir das OTL-Log nochmal angeschaut habe, stürzte mein Computer ab, was mir noch nie passiert ist. Auf einmal kam blauer Bildschirm mit weißer Schrift, ich konnte nur kurz "windows has been detected" oder so lesen, dann startete er neu. Nach der Anmeldung kam erst einmal eine halbe Minute schwarzer Bildschirm. Und eben gerade wieder wurde mein Desktop für ca. 10 Sekunden ganz dunkel. Ich hoffe, dass ich meinen Computer mit irgendeinem Programm bereingen kann und nicht neu aufsetzen muss, wie z.B hier: http://www.trojaner-board.de/138953-...blockiert.html LG, bluevinc Geändert von bluevinc (13.08.2013 um 10:55 Uhr) |
Themen zu Windows 7 - Virenprogramm findet einige Viren + Computerabsturz |
32 bit, antivirus, avira, browser, checkliste, chromium, computer, converter, error, excel, farbar, farbar recovery scan tool, flash player, helper, home, homepage, internet, internet explorer, photoshop, plug-in, programm, registry, scan, security, sekunden, server, services.exe, software, svchost.exe, tablet, viren, windows |