Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Virus & Co. oder liegt es an mir?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 28.08.2013, 08:19   #16
schrauber
/// the machine
/// TB-Ausbilder
 

Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Dann muss ich mal meinen Spam-Ordner checken, sorry. Poste auf jeden Fall mein ein frisches FRST log.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 28.08.2013, 22:16   #17
Scheeli
 
Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Hallo Schrauber, danke für deine Nachricht.
Hier das neue FRST-Log:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Standard (administrator) on 28-08-2013 23:13:13
Running from C:\Users\Standard\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
() C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe
() C:\ProgramData\ERUNT\srvany.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe
(Uwe Sieber - Uwe Sieber's Homepage) C:\Program Files\USBDLM\USBDLM.exe
(Adobe Systems, Inc.) C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe
(Uwe Sieber - Uwe Sieber's Homepage) C:\Program Files\USBDLM\USBDLM_usr.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKCU\...\Run: [AdobeBridge] - C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe [12002664 2011-06-09] (Adobe Systems, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
MountPoints2: {0c4ef0c0-e0ad-11e2-a23d-08606e71e251} - F:\LaunchU3.exe -a
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {FC0D2C6D-3ED3-4B87-B2B1-2AAF34BE9280} URL = hxxp://www.google.de/search?q={searchTerms}
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Standard\AppData\Roaming\Mozilla\Firefox\Path=Profiles\default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\

==================== Services (Whitelisted) =================

R2 BotkindSyncService; C:\Program Files (x86)\Allway Sync\Bin\SyncService.exe [182784 2013-04-11] ()
R2 ERUNT; C:\ProgramData\ERUNT\srvany.exe [13312 2001-03-20] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 USBDLM; C:\Program Files\USBDLM\USBDLM.exe [451560 2012-09-09] (Uwe Sieber - Uwe Sieber's Homepage)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130827.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130827.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\ENG64.SYS [126040 2013-07-01] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\ENG64.SYS [126040 2013-07-01] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\EX64.SYS [2098776 2013-07-01] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130828.002\EX64.SYS [2098776 2013-07-01] (Symantec Corporation)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [43680 2013-03-05] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-17 17:53 - 2013-08-17 17:53 - 00891115 _____ C:\Users\Standard\Desktop\SecurityCheck.exe
2013-08-17 16:45 - 2013-08-17 18:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 10:04 - 2013-08-16 10:04 - 00000000 ____D C:\Windows\ERUNT
2013-08-16 10:03 - 2013-08-16 10:03 - 01159319 _____ (Thisisu) C:\Users\Standard\Desktop\JRT.exe
2013-08-16 09:52 - 2013-08-16 09:52 - 00015203 _____ C:\AdwCleaner[S1].txt
2013-08-16 09:49 - 2013-08-16 09:49 - 00666633 _____ C:\Users\Standard\Desktop\adwcleaner.exe
2013-08-16 09:35 - 2013-08-16 09:35 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Users\Standard\AppData\Roaming\Malwarebytes
2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-16 09:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-16 09:32 - 2013-08-16 09:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Standard\Desktop\mbam-setup-1.75.0.1300.exe
2013-08-15 19:27 - 2013-08-15 19:27 - 00000000 ____D C:\FRST
2013-08-15 19:25 - 2013-08-15 19:25 - 01575570 _____ (Farbar) C:\Users\Standard\Desktop\FRST64.exe
2013-08-14 15:17 - 2013-08-27 22:59 - 00000000 ____D C:\Users\Standard\Desktop\Export Hochzeit
2013-08-14 01:45 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 01:45 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 01:45 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 01:45 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 01:45 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 01:45 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 01:45 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 01:45 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 01:45 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 01:45 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 01:45 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 01:45 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 01:45 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 01:45 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 01:43 - 2013-08-14 01:44 - 00000000 ____D C:\Windows\system32\MRT
2013-08-13 19:20 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-13 19:20 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-13 19:20 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-13 19:20 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-13 19:20 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-13 19:20 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-13 19:20 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-13 19:20 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-13 19:20 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-13 19:20 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-13 19:20 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-13 19:20 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-13 19:20 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-13 19:20 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-13 19:20 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-13 19:20 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-13 19:20 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-13 19:20 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-13 19:20 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-13 19:20 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-13 19:20 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-13 19:20 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-13 19:20 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-13 19:20 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-13 19:20 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-13 19:20 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-13 19:20 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-05 00:30 - 2013-08-05 00:30 - 00000000 ____D C:\Users\Standard\Documents\Neuer Ordner
2013-07-31 22:02 - 2013-07-31 22:02 - 00000814 _____ C:\Users\Standard\Desktop\Export neu - Verknüpfung.lnk
2013-07-30 00:19 - 2013-07-31 22:46 - 00001031 _____ C:\Users\Standard\Desktop\PhotoScape.lnk

==================== One Month Modified Files and Folders =======

2013-08-28 23:11 - 2013-08-28 23:11 - 01579080 _____ (Farbar) C:\Users\Standard\Downloads\FRST64.exe
2013-08-28 22:55 - 2013-05-20 14:38 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 22:53 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 22:53 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-28 22:50 - 2010-11-21 08:50 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-08-28 22:50 - 2010-11-21 08:50 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-08-28 22:50 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-28 22:49 - 2013-04-16 14:07 - 02022870 _____ C:\Windows\WindowsUpdate.log
2013-08-28 22:46 - 2013-05-20 14:44 - 00000000 ____D C:\Users\Standard\AppData\Roaming\Skype
2013-08-28 22:46 - 2013-05-20 14:38 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-28 22:46 - 2013-04-16 15:35 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-28 22:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 22:46 - 2009-07-14 06:51 - 00039733 _____ C:\Windows\setupact.log
2013-08-27 22:59 - 2013-08-14 15:17 - 00000000 ____D C:\Users\Standard\Desktop\Export Hochzeit
2013-08-19 10:51 - 2013-05-20 22:22 - 00000000 ____D C:\Users\Standard\Desktop\Export neu
2013-08-18 23:57 - 2013-05-20 14:17 - 00001456 _____ C:\Users\Standard\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-08-18 17:47 - 2013-05-08 13:04 - 00000710 _____ C:\Users\Standard\SciTE.session
2013-08-18 00:27 - 2013-04-16 16:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-18 00:27 - 2010-11-21 05:47 - 00020372 _____ C:\Windows\PFRO.log
2013-08-17 18:06 - 2013-08-17 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 17:53 - 2013-08-17 17:53 - 00891115 _____ C:\Users\Standard\Desktop\SecurityCheck.exe
2013-08-16 12:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-16 10:04 - 2013-08-16 10:04 - 00000000 ____D C:\Windows\ERUNT
2013-08-16 10:03 - 2013-08-16 10:03 - 01159319 _____ (Thisisu) C:\Users\Standard\Desktop\JRT.exe
2013-08-16 09:52 - 2013-08-16 09:52 - 00015203 _____ C:\AdwCleaner[S1].txt
2013-08-16 09:49 - 2013-08-16 09:49 - 00666633 _____ C:\Users\Standard\Desktop\adwcleaner.exe
2013-08-16 09:35 - 2013-08-16 09:35 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Users\Standard\AppData\Roaming\Malwarebytes
2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-16 09:35 - 2013-08-16 09:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-16 09:32 - 2013-08-16 09:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Standard\Desktop\mbam-setup-1.75.0.1300.exe
2013-08-15 19:27 - 2013-08-15 19:27 - 00000000 ____D C:\FRST
2013-08-15 19:25 - 2013-08-15 19:25 - 01575570 _____ (Farbar) C:\Users\Standard\Desktop\FRST64.exe
2013-08-15 18:21 - 2013-07-17 23:40 - 00000000 ____D C:\Users\Standard\AppData\Local\NPE
2013-08-14 13:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 11:30 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-14 01:44 - 2013-08-14 01:43 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 01:43 - 2013-04-16 16:43 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-05 18:02 - 2013-05-25 16:12 - 00000000 ____D C:\Users\Standard\Documents\Dokumente Fotografie
2013-08-05 00:30 - 2013-08-05 00:30 - 00000000 ____D C:\Users\Standard\Documents\Neuer Ordner
2013-07-31 22:46 - 2013-07-30 00:19 - 00001031 _____ C:\Users\Standard\Desktop\PhotoScape.lnk
2013-07-31 22:44 - 2013-05-20 14:38 - 00000000 ____D C:\Users\Standard\AppData\Roaming\PhotoScape
2013-07-31 22:02 - 2013-07-31 22:02 - 00000814 _____ C:\Users\Standard\Desktop\Export neu - Verknüpfung.lnk

Files to move or delete:
====================
C:\Users\Standard\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Standard\AppData\Local\Temp\FoxyDeal.exe
C:\Users\Standard\AppData\Local\Temp\FoxyDeal_Setup.exe
C:\Users\Standard\AppData\Local\Temp\nvStInst.exe
C:\Users\Standard\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Standard\AppData\Local\Temp\uninst1.exe
C:\Users\Standard\AppData\Local\Temp\_isC3AB.exe
C:\Users\Standard\AppData\Local\Temp\{D1616665-23E4-46AB-9D95-254B14F5BE62}\InstallFlashPlayer.exe
C:\Users\Standard\AppData\Local\Temp\{868D6BDD-D317-4F5B-AA22-1AA90EBB35D4}\ISSetup.dll
C:\Users\Standard\AppData\Local\Temp\{868D6BDD-D317-4F5B-AA22-1AA90EBB35D4}\_Setup.dll
C:\Users\Standard\AppData\Local\Temp\{42EF2E44-25DE-42E6-93CB-419C76FAB65D}\setup.exe
C:\Users\Standard\AppData\Local\Temp\{2B76B5C9-A26D-41C3-8531-53E2D3E0ECC4}\{F1A6C690-C12C-4E7A-B4BD-958678215418}\dotNetFx40_Client_x86_x64.exe
C:\Users\Standard\AppData\Local\Temp\{2B76B5C9-A26D-41C3-8531-53E2D3E0ECC4}\{F1A6C690-C12C-4E7A-B4BD-958678215418}\vcredist_x64.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe
C:\Users\Standard\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe
C:\Users\Standard\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\BExternal.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\BUSolForMontiera.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\BUSolution.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\ChromeToolbarSetup.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\CrxInstaller.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\GUninstaller.exe
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\IEHelper.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\MntrDLLInstall.dll
C:\Users\Standard\AppData\Local\Temp\CEE40245-BAB0-7891-8078-3536394B324C\Latest\sqlite3.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\GoogleEarth.exe
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemyext.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\icudt.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGAttrs.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGCore.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGExportCommon.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGGfx.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGMath.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGOpt.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGSg.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\IGUtils.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\Leap.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\plugin_ax.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtCore4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtGui4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtNetwork4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\QtWebKit4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemyext.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\earthflashsol.exe
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\earthps.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\ge_expat.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\googleearth.exe
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\googleearth_free.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\gpsbabel.exe
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\icudt.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGAttrs.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGCore.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGExportCommon.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGGfx.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGMath.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGOpt.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGSg.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\IGUtils.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\Leap.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\msvcp100.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\msvcr100.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtCore4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtGui4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtNetwork4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\QtWebKit4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\Plugins\npgeinprocessplugin.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\imageformats\qgif4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\imageformats\qjpeg4.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\optimizations\IGOptExtension.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\d3dx9_43.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\IGAttrs.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\IGGfx.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\IGSg.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\libEGL.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogles20\libGLESv2.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogl\IGAttrs.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogl\IGGfx.dll
C:\Users\Standard\AppData\Local\Temp\._msige61\program files\Google\Google Earth\client\alchemy\ogl\IGSg.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit





[YOUTUBE]C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-26 13:47

==================== End Of Log ============================
         
--- --- ---

--- --- ---
__________________


Alt 29.08.2013, 08:14   #18
schrauber
/// the machine
/// TB-Ausbilder
 

Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Ok. Schick mir heut Abend bitte ne PM, dann check ich wo die Email geblieben ist. Auf Arbeit hab ich keinen Zugriff darauf.
__________________
__________________

Alt 30.08.2013, 19:03   #19
schrauber
/// the machine
/// TB-Ausbilder
 

Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Hi,

in allen Browsern oder nur in einem? Wenn ja welchen benutzt du?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 31.08.2013, 10:32   #20
Scheeli
 
Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Ich verwende eigentlich nur den Firefox.
Hab gerade mal getestet, das Problem gibt es beim Windows Explorer nicht.
Also ist Firefox der Übeltäter?


Alt 31.08.2013, 14:13   #21
schrauber
/// the machine
/// TB-Ausbilder
 

Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Ja. Deinstallieren, keine Daten behalten, neu installieren. Testen
__________________
--> Virus & Co. oder liegt es an mir?

Alt 02.09.2013, 14:42   #22
Scheeli
 
Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Muß ich da auf irgend etwas achten? Was ist dann alles weg?
Blöde Frage, ich weiß, aber ich bin (manchmal) blond

Alt 02.09.2013, 18:53   #23
schrauber
/// the machine
/// TB-Ausbilder
 

Virus & Co. oder liegt es an mir? - Standard

Virus & Co. oder liegt es an mir?



Lesezeichen und so Sachen, gespeicherte Passwörter von Webseiten und so.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Virus & Co. oder liegt es an mir?
besuch, besuchten, computer, installiert, merkwürdige, plötzlich, problem, pup.babylon.a, pup.iminent.a, pup.optional.babylon.a, pup.optional.delta, pup.optional.opencandy, pup.optional.regcleanerpro, pup.optional.somoto, win32/adware.yontoo.b, windows 7, Änderungen




Ähnliche Themen: Virus & Co. oder liegt es an mir?


  1. Trojaner-Warnung/PC-Problem: Liegt es an der Hardware oder an einem Trojaner-Problem?
    Plagegeister aller Art und deren Bekämpfung - 17.03.2015 (7)
  2. GVU mal wieder, FRST log liegt vor
    Plagegeister aller Art und deren Bekämpfung - 19.04.2014 (7)
  3. Trojaner oder Virus oder sonst was schädliches ?
    Log-Analyse und Auswertung - 09.12.2012 (28)
  4. Virus: Seite kann nicht angezeigt werden, OTL Log liegt vor ;)
    Log-Analyse und Auswertung - 15.09.2012 (2)
  5. Hab einen Trojaner oder wurm oder nen virus weis aber nicht was für einen
    Log-Analyse und Auswertung - 30.11.2011 (2)
  6. Bundespolizei-Virus, OTL.txt liegt bereits vor
    Log-Analyse und Auswertung - 03.08.2011 (5)
  7. Welches Problem liegt vor?
    Plagegeister aller Art und deren Bekämpfung - 02.02.2011 (11)
  8. Virus oder Trojaner? Browser reagieren nicht oder verzögert.
    Log-Analyse und Auswertung - 20.10.2010 (26)
  9. Habe ich einen Virus oder Malware oder sonstiges auf dem Rechner?
    Log-Analyse und Auswertung - 15.08.2010 (23)
  10. schadhaftes script oder virus? url falschmeldung oder echte gefahr?
    Plagegeister aller Art und deren Bekämpfung - 06.06.2010 (6)
  11. Liegt es villeicht am Netzteil ?
    Alles rund um Windows - 19.12.2009 (4)
  12. CPU Last liegt bei 100%
    Plagegeister aller Art und deren Bekämpfung - 02.12.2009 (1)
  13. Liegt es an Vista...
    Log-Analyse und Auswertung - 04.11.2009 (6)
  14. Ping hoch liegt an Virus ?
    Log-Analyse und Auswertung - 09.02.2009 (11)
  15. Netzwerkserver liegt lahm
    Log-Analyse und Auswertung - 13.12.2007 (10)
  16. Wo liegt das Problem?
    Log-Analyse und Auswertung - 05.02.2007 (5)
  17. Hilfe! Virus oder liegt die GraKa im Sterben?
    Netzwerk und Hardware - 01.06.2006 (7)

Zum Thema Virus & Co. oder liegt es an mir? - Dann muss ich mal meinen Spam-Ordner checken, sorry. Poste auf jeden Fall mein ein frisches FRST log. - Virus & Co. oder liegt es an mir?...
Archiv
Du betrachtest: Virus & Co. oder liegt es an mir? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.