|
Log-Analyse und Auswertung: Windows 7: System Care Antivirus 3.7.33 blockiert andere ProgrammeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
27.08.2013, 09:53 | #16 |
/// the machine /// TB-Ausbilder | Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme Downloade dir bitte Windows Repair (All In One) von hier.
Frisches FSS und FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.08.2013, 16:48 | #17 |
| Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme Hi, Rechner läuft wieder gut.
__________________Würde Avira gerne gegen avast! ersetzen. Was sagst du zu avast? FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-08-2013 01 Ran by Sabine (administrator) on 27-08-2013 17:33:12 Running from C:\Users\Sabine\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo) C:\Windows\system32\ibmpmsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe () C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7968800 2009-07-10] (Realtek Semiconductor) HKLM\...\Run: [TPHOTKEY] - C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [68976 2009-03-13] (Lenovo Group Limited) HKLM\...\Run: [LENOVO.TPFNF6R] - C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [62752 2009-08-20] (Lenovo Group Limited) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-07] (Intel Corporation) HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [380704 2009-07-08] (Lenovo.) HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [x] HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1888552 2009-11-25] (Synaptics Incorporated) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [15026056 2011-01-26] (Skype Technologies S.A.) MountPoints2: {e00765f0-38a6-11df-8838-806e6f6e6963} - Q:\LenovoQDrive.exe MountPoints2: {ea90bf23-38a8-11df-a158-806e6f6e6963} - D:\wubi.exe HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [160840 2012-02-09] (Geek Software GmbH) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-08-08] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKU\Default\...\RunOnce: [wlstart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-08-20] (Microsoft Corporation) HKU\Default\...\RunOnce: [] - [x] HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2009-03-24] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad SearchScopes: HKLM - DefaultScope value is missing. BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File DPF: HKLM-x32 {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://www.fotokasten.de/javaapplet/ImageUploader5.cab DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\..\Interfaces\{6390A93E-4764-466D-B597-4E4E7D613A07}: [NameServer]192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default\Extensions\staged FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default\Extensions\{30ded8b8-1fb9-4178-845b-adc824baf28a} FF Extension: toolbar_AVIRA-V7 - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-08] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-08] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-08-08] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation) R2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] () R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software) S2 RoxLiveShare10; "C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe" [x] ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-08-08] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-08-08] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-08] (Avira Operations GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] () S3 PCDSRVC{127174DC-C366ED8B-06000000}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [x] S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-27 16:52 - 2013-08-27 16:52 - 00000056 ____H C:\Windows\SysWOW64\ezsidmv.dat 2013-08-27 12:14 - 2013-08-27 12:14 - 00003288 ____N C:\bootsqm.dat 2013-08-27 12:12 - 2013-08-27 12:12 - 00000000 __SHD C:\found.001 2013-08-27 12:07 - 2013-08-27 16:48 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2013-08-27 12:05 - 2013-08-27 12:05 - 03268369 _____ C:\Users\Sabine\Desktop\tweaking.com_windows_repair_aio.zip 2013-08-27 12:05 - 2013-08-27 12:05 - 00000000 ____D C:\Users\Sabine\Desktop\Tweaking.com - Windows Repair 2013-08-26 22:01 - 2013-08-27 17:30 - 00002483 _____ C:\Users\Sabine\Desktop\FSS.txt 2013-08-26 21:59 - 2013-08-26 21:59 - 00358507 _____ (Farbar) C:\Users\Sabine\Desktop\FSS.exe 2013-08-26 21:49 - 2013-08-26 21:49 - 00448512 _____ (OldTimer Tools) C:\Users\Sabine\Desktop\TFC.exe 2013-08-26 21:42 - 2013-08-26 21:41 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-08-26 21:42 - 2013-08-26 21:41 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-08-26 21:42 - 2013-08-26 21:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-08-26 21:42 - 2013-08-26 21:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-08-26 21:42 - 2013-08-26 21:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-08-26 15:57 - 2013-08-26 15:55 - 00891115 _____ C:\Users\Sabine\Desktop\SecurityCheck.exe 2013-08-26 15:50 - 2013-08-26 15:50 - 00000325 _____ C:\Users\Sabine\Desktop\ESET_1.txt 2013-08-26 12:18 - 2013-08-26 12:18 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe 2013-08-25 10:05 - 2013-08-25 10:05 - 00000000 ____D C:\Windows\ERUNT 2013-08-25 09:49 - 2013-08-25 09:53 - 00000000 ____D C:\AdwCleaner 2013-08-25 09:17 - 2013-08-25 09:17 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Malwarebytes 2013-08-25 09:14 - 2013-08-25 09:14 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-25 09:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-08-25 09:13 - 2013-08-25 09:03 - 00994642 _____ C:\Users\Sabine\Desktop\adwcleaner.exe 2013-08-25 09:13 - 2013-08-22 17:54 - 01021434 _____ (Thisisu) C:\Users\Sabine\Desktop\JRT.exe 2013-08-22 22:10 - 2013-08-22 22:10 - 00000000 ____D C:\FRST 2013-08-22 22:09 - 2013-08-22 22:09 - 00000000 _____ C:\Users\Sabine\defogger_reenable 2013-08-22 22:01 - 2013-08-22 21:57 - 00377856 _____ C:\Users\Sabine\Desktop\1ki7fe1b.exe 2013-08-22 21:53 - 2013-08-22 21:49 - 00050477 _____ C:\Users\Sabine\Desktop\Defogger.exe 2013-08-20 19:35 - 2013-08-20 19:35 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care Antivirus 2013-08-20 19:33 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-20 19:33 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-20 19:33 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-20 19:33 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-20 19:33 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-20 19:33 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-20 19:33 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-20 19:33 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-20 19:33 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-20 19:33 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-20 19:33 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-20 19:33 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-20 19:33 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-20 19:33 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-20 19:32 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-20 19:32 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-20 19:32 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-20 19:32 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-20 19:32 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-20 19:32 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-20 19:32 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-20 19:32 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-20 19:32 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-20 19:32 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-20 19:32 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-20 19:02 - 2013-08-20 19:08 - 00000000 ____D C:\Windows\system32\MRT 2013-08-16 17:58 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-16 17:55 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-16 17:55 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-16 17:55 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-16 17:55 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-16 17:55 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-16 17:55 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-16 17:55 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-16 17:55 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-16 17:53 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-16 17:53 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-16 17:52 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-16 17:52 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-16 17:52 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-16 17:52 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-16 17:52 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-16 17:39 - 2013-08-16 17:39 - 00000240 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job 2013-08-08 21:04 - 2013-08-08 21:04 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Avira 2013-08-08 21:01 - 2013-08-08 21:01 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-08-08 21:00 - 2013-08-08 21:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-08 20:59 - 2013-08-08 20:59 - 00000000 ____D C:\Windows\system32\Macromed 2013-08-08 20:58 - 2013-08-08 20:58 - 00002005 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\ProgramData\Avira 2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\Program Files (x86)\Avira 2013-08-08 20:58 - 2013-08-08 20:43 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-08-08 20:58 - 2013-08-08 20:43 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-08-08 20:58 - 2013-08-08 20:43 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-07-28 19:28 - 2013-07-28 19:28 - 00000118 _____ C:\Windows\system32\MRT.INI ==================== One Month Modified Files and Folders ======= 2013-08-27 17:32 - 2013-08-27 17:32 - 01578852 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe 2013-08-27 17:30 - 2013-08-26 22:01 - 00002483 _____ C:\Users\Sabine\Desktop\FSS.txt 2013-08-27 17:30 - 2010-08-31 20:21 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Skype 2013-08-27 16:58 - 2010-03-26 18:07 - 00711370 _____ C:\Windows\system32\perfh007.dat 2013-08-27 16:58 - 2010-03-26 18:07 - 00153766 _____ C:\Windows\system32\perfc007.dat 2013-08-27 16:58 - 2009-07-14 07:13 - 01646182 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-27 16:57 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-27 16:57 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-27 16:52 - 2013-08-27 16:52 - 00000056 ____H C:\Windows\SysWOW64\ezsidmv.dat 2013-08-27 16:52 - 2010-08-31 20:22 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\skypePM 2013-08-27 16:50 - 2010-07-16 01:10 - 00334140 _____ C:\Windows\PFRO.log 2013-08-27 16:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-27 16:50 - 2009-07-14 06:51 - 00083045 _____ C:\Windows\setupact.log 2013-08-27 16:50 - 2009-07-14 06:45 - 00418592 _____ C:\Windows\system32\FNTCACHE.DAT 2013-08-27 16:48 - 2013-08-27 12:07 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2013-08-27 16:47 - 2010-03-26 09:15 - 02008552 _____ C:\Windows\WindowsUpdate.log 2013-08-27 16:46 - 2009-07-14 04:34 - 00000423 _____ C:\Windows\win.ini 2013-08-27 12:14 - 2013-08-27 12:14 - 00003288 ____N C:\bootsqm.dat 2013-08-27 12:12 - 2013-08-27 12:12 - 00000000 __SHD C:\found.001 2013-08-27 12:05 - 2013-08-27 12:05 - 03268369 _____ C:\Users\Sabine\Desktop\tweaking.com_windows_repair_aio.zip 2013-08-27 12:05 - 2013-08-27 12:05 - 00000000 ____D C:\Users\Sabine\Desktop\Tweaking.com - Windows Repair 2013-08-26 21:59 - 2013-08-26 21:59 - 00358507 _____ (Farbar) C:\Users\Sabine\Desktop\FSS.exe 2013-08-26 21:49 - 2013-08-26 21:49 - 00448512 _____ (OldTimer Tools) C:\Users\Sabine\Desktop\TFC.exe 2013-08-26 21:45 - 2010-03-26 09:42 - 00000000 ____D C:\ProgramData\Adobe 2013-08-26 21:44 - 2010-07-20 18:50 - 00000000 ____D C:\Users\Sabine\AppData\Local\Adobe 2013-08-26 21:44 - 2010-07-16 01:13 - 00000000 ____D C:\Users\Sabine 2013-08-26 21:41 - 2013-08-26 21:42 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-08-26 21:41 - 2013-08-26 21:42 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-08-26 21:41 - 2013-08-26 21:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-08-26 21:41 - 2013-08-26 21:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-08-26 21:41 - 2013-08-26 21:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-08-26 21:41 - 2010-07-29 18:30 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-08-26 21:41 - 2010-03-26 09:41 - 00000000 ____D C:\Program Files (x86)\Java 2013-08-26 15:55 - 2013-08-26 15:57 - 00891115 _____ C:\Users\Sabine\Desktop\SecurityCheck.exe 2013-08-26 15:50 - 2013-08-26 15:50 - 00000325 _____ C:\Users\Sabine\Desktop\ESET_1.txt 2013-08-26 12:18 - 2013-08-26 12:18 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe 2013-08-25 10:05 - 2013-08-25 10:05 - 00000000 ____D C:\Windows\ERUNT 2013-08-25 09:53 - 2013-08-25 09:49 - 00000000 ____D C:\AdwCleaner 2013-08-25 09:17 - 2013-08-25 09:17 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Malwarebytes 2013-08-25 09:14 - 2013-08-25 09:14 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-08-25 09:03 - 2013-08-25 09:13 - 00994642 _____ C:\Users\Sabine\Desktop\adwcleaner.exe 2013-08-22 22:10 - 2013-08-22 22:10 - 00000000 ____D C:\FRST 2013-08-22 22:09 - 2013-08-22 22:09 - 00000000 _____ C:\Users\Sabine\defogger_reenable 2013-08-22 21:57 - 2013-08-22 22:01 - 00377856 _____ C:\Users\Sabine\Desktop\1ki7fe1b.exe 2013-08-22 21:49 - 2013-08-22 21:53 - 00050477 _____ C:\Users\Sabine\Desktop\Defogger.exe 2013-08-22 17:54 - 2013-08-25 09:13 - 01021434 _____ (Thisisu) C:\Users\Sabine\Desktop\JRT.exe 2013-08-21 16:37 - 2010-09-02 18:55 - 00000000 ___RD C:\Users\Sabine\Dateien 2013-08-20 19:35 - 2013-08-20 19:35 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care Antivirus 2013-08-20 19:08 - 2013-08-20 19:02 - 00000000 ____D C:\Windows\system32\MRT 2013-08-20 19:01 - 2010-09-02 17:04 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-16 17:39 - 2013-08-16 17:39 - 00000240 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job 2013-08-16 17:28 - 2010-07-18 16:04 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Obliq 2013-08-08 21:06 - 2013-08-08 21:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-08 21:04 - 2013-08-08 21:04 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Avira 2013-08-08 21:01 - 2013-08-08 21:01 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-08-08 20:59 - 2013-08-08 20:59 - 00000000 ____D C:\Windows\system32\Macromed 2013-08-08 20:58 - 2013-08-08 20:58 - 00002005 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\ProgramData\Avira 2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\Program Files (x86)\Avira 2013-08-08 20:43 - 2013-08-08 20:58 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-08-08 20:43 - 2013-08-08 20:58 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-08-08 20:43 - 2013-08-08 20:58 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-08-05 17:41 - 2010-10-24 15:19 - 00000000 ____D C:\Users\Sabine\AppData\Local\Microsoft Help 2013-07-28 19:54 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-28 19:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-28 19:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-28 19:28 - 2013-07-28 19:28 - 00000118 _____ C:\Windows\system32\MRT.INI Files to move or delete: ==================== C:\Users\Sabine\AppData\Local\Temp\AskSLib.dll C:\Users\Sabine\AppData\Local\Temp\ffunzip.exe C:\Users\Sabine\AppData\Local\Temp\GLFF912.tmp.ConduitEngineSetup.exe C:\Users\Sabine\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe C:\Users\Sabine\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Sabine\AppData\Local\Temp\ose00000.exe C:\Users\Sabine\AppData\Local\Temp\pdf24-creator-update.exe C:\Users\Sabine\AppData\Local\Temp\prxGLFF912.tmp.tbDVDV.dll C:\Users\Sabine\AppData\Local\Temp\Quarantine.exe C:\Users\Sabine\AppData\Local\Temp\setup.exe C:\Users\Sabine\AppData\Local\Temp\SkypeSetup.exe C:\Users\Sabine\AppData\Local\Temp\ytb.exe C:\Users\Sabine\AppData\Local\Temp\jrt\erunt\ERUNT.EXE C:\Users\Sabine\AppData\Local\Temp\IXP270.TMP\SetupAdmin.exe C:\Users\Sabine\AppData\Local\Temp\is-A8FLP.tmp\APNStub.exe C:\Users\Sabine\AppData\Local\Temp\D2E0.dir\InstallFlashPlayer.exe C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.0.2971.exe C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.1.3099.exe C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.1.3341.exe C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3717.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-27 17:26 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Farbar Service Scanner Version: 18-08-2013 Ran by Sabine (administrator) on 27-08-2013 at 17:30:35 Running from "C:\Users\Sabine\Desktop" Microsoft Windows 7 Home Premium Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== WinDefend Service is not running. Checking service configuration: The start type of WinDefend service is set to Demand. The default start type is Auto. The ImagePath of WinDefend service is OK. The ServiceDll of WinDefend service is OK. Windows Defender Disabled Policy: ========================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware"=DWORD:1 Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\System32\ipnathlp.dll => MD5 is legit C:\Windows\System32\iphlpsvc.dll => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log **** |
27.08.2013, 20:25 | #18 |
/// the machine /// TB-Ausbilder | Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme Avast ist ok
__________________Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ |
28.08.2013, 19:07 | #19 |
| Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme Hi, ich habe alles erledigt. In deinen Tipps steht, man solle sich von RegistryCleanern fernhalten. Gilt das auch für den Revo Uninstaller, welcher nach der Deinstallation auch die Registry säubert? Danke für deine schnelle und erfolgreiche Hilfe! Gruß Thomas |
29.08.2013, 04:23 | #20 |
/// the machine /// TB-Ausbilder | Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme nein Revo ist in Ordnung
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme |
antivirus, avira, avira searchfree toolbar, bildschirm, blockiert, browser, cdburnerxp, converter, error, excel, farbar, farbar recovery scan tool, fehler, festplatte, flash player, helper, home, homepage, installation, mozilla, msiinstaller, newtab, pirates, plug-in, programm, realtek, registry, richtlinie, scan, security, smartbar, software, svchost.exe, system, system care, windows, wsearch |