| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Malewarebytes findet nach jedem Suchlauf neue Funde.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
26.08.2013, 16:55
| #5 |
 |  Windows 7: Malewarebytes findet nach jedem Suchlauf neue Funde. Eset log Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=2902fc2cc16f8541ba94b00041ff33c0
# engine=14908
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-26 03:16:24
# local_time=2013-08-26 05:16:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 1808916 154240056 0 0
# compatibility_mode=5893 16776573 100 94 93274 129160034 0 0
# scanned=196407
# found=0
# cleaned=0
# scan_time=4410
Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.8.800.94 Adobe Reader XI Mozilla Firefox (23.0) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-08-2013
Ran by ***** (administrator) on 26-08-2013 17:51:31
Running from C:\Users\*****\Desktop\fürs board
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKCU\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759384 2013-07-08] (Sandboxie Holdings, LLC)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2472048 2013-03-19] (VIA)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j561uwr2.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll No File
FF Extension: Visualisateur 3D de 20-20 - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j561uwr2.default\Extensions\2020Player_IKEA@2020Technologies.com
FF Extension: Vagex Firefox Add-On - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j561uwr2.default\Extensions\ffaddon@vagex.com
FF Extension: WOT - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j561uwr2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: No Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j561uwr2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-06-26] ()
S3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-06-26] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-26 15:58 - 2013-08-26 15:58 - 02347384 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_enu.exe
2013-08-25 15:11 - 2013-08-25 15:11 - 00000000 ____D C:\Windows\ERUNT
2013-08-25 15:06 - 2013-08-25 15:07 - 00000000 ____D C:\AdwCleaner
2013-08-25 15:05 - 2013-08-25 15:05 - 01021434 _____ (Thisisu) C:\Users\*****\Desktop\JRT.exe
2013-08-25 15:03 - 2013-08-25 15:03 - 00994642 _____ C:\Users\*****\Desktop\adwcleaner.exe
2013-08-25 01:42 - 2013-08-25 01:42 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-25 01:39 - 2013-08-25 01:39 - 00000000 ____D C:\Users\*****\AppData\Roaming\PDF Architect
2013-08-24 22:03 - 2013-08-26 17:50 - 00000000 ____D C:\Users\*****\Desktop\fürs board
2013-08-24 21:38 - 2013-08-24 21:38 - 00377856 _____ C:\Users\*****\Desktop\xj8u4eyb.exe
2013-08-24 21:12 - 2013-08-24 21:12 - 00000000 ____D C:\FRST
2013-08-24 21:10 - 2013-08-24 21:10 - 00000000 _____ C:\Users\*****\defogger_reenable
2013-08-24 21:08 - 2013-08-24 21:08 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2013-08-19 20:30 - 2013-08-19 20:30 - 00013615 _____ C:\Users\*****\Downloads\Selbsttest.zip
2013-08-19 20:29 - 2013-08-19 20:29 - 00000633 _____ C:\Users\*****\Downloads\unbenannt
2013-08-17 12:25 - 2013-08-17 12:25 - 00003032 _____ C:\Windows\System32\Tasks\{1C501C9F-BEB9-4D59-9A6A-DFD376F878EA}
2013-08-14 15:12 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 15:12 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 15:12 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 15:12 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 15:12 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 15:12 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 15:12 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 15:12 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 15:12 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 15:12 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 15:12 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 15:12 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 15:12 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 15:12 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 15:11 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 15:11 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 15:11 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 15:08 - 2013-08-14 15:09 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 13:29 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 13:29 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 13:29 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 13:29 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 13:29 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 13:29 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 13:29 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 13:29 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 13:29 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 13:29 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 13:29 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 13:29 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 13:29 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 13:29 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 13:29 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 13:29 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 13:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 13:29 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 13:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 13:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 13:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 13:29 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 13:29 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 13:29 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 13:29 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 13:29 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 13:29 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-08 12:18 - 2013-08-08 12:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-02 14:59 - 2013-08-13 17:38 - 00236219 _____ C:\Users\*****\Desktop\mein TierbuchPixum Fotobuch Software.mcf
2013-08-02 14:59 - 2013-08-04 17:26 - 00235757 _____ C:\Users\*****\Desktop\mein TierbuchPixum Fotobuch Software.mcf~
2013-08-02 14:59 - 2013-08-04 17:26 - 00000000 ____D C:\Users\*****\Desktop\mein TierbuchPixum Fotobuch Software_mcf-Dateien
2013-08-02 02:42 - 2013-08-02 12:04 - 00174794 _____ C:\Users\*****\Desktop\Fertiges Fotobuch FL.mcf
2013-08-02 02:42 - 2013-08-02 11:54 - 00174076 _____ C:\Users\*****\Desktop\Fertiges Fotobuch FL.mcf~
2013-08-02 02:42 - 2013-08-02 11:53 - 00000000 ____D C:\Users\*****\Desktop\Fertiges Fotobuch FL_mcf-Dateien
2013-08-01 18:46 - 2013-08-01 18:55 - 00000000 ____D C:\Users\*****\Desktop\titel
2013-08-01 18:45 - 2013-08-02 02:42 - 00158666 _____ C:\Users\*****\Desktop\Pixum Fotobuch Software.mcf
2013-08-01 18:45 - 2013-08-02 02:41 - 00158666 _____ C:\Users\*****\Desktop\Pixum Fotobuch Software.mcf~
2013-08-01 18:45 - 2013-08-02 02:27 - 00000000 ____D C:\Users\*****\Desktop\Pixum Fotobuch Software_mcf-Dateien
2013-08-01 00:50 - 2013-08-02 11:52 - 00000000 ____D C:\Users\*****\Desktop\fertige bilder
==================== One Month Modified Files and Folders =======
2013-08-26 17:50 - 2013-08-24 22:03 - 00000000 ____D C:\Users\*****\Desktop\fürs board
2013-08-26 17:47 - 2013-08-26 17:47 - 00891115 _____ C:\Users\*****\Desktop\SecurityCheck.exe
2013-08-26 17:44 - 2013-03-20 04:56 - 00001600 _____ C:\Windows\Sandboxie.ini
2013-08-26 17:43 - 2009-07-14 06:51 - 00112264 _____ C:\Windows\setupact.log
2013-08-26 17:42 - 2013-03-19 16:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-26 17:03 - 2013-03-19 16:24 - 01968148 _____ C:\Windows\WindowsUpdate.log
2013-08-26 16:00 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-26 16:00 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-26 15:58 - 2013-08-26 15:58 - 02347384 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_enu.exe
2013-08-26 15:57 - 2011-04-12 09:43 - 00699092 _____ C:\Windows\system32\perfh007.dat
2013-08-26 15:57 - 2011-04-12 09:43 - 00149232 _____ C:\Windows\system32\perfc007.dat
2013-08-26 15:57 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 15:53 - 2013-03-19 19:22 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-26 15:52 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 10:37 - 2013-03-19 19:27 - 00000000 ____D C:\Users\*****\AppData\Roaming\Skype
2013-08-26 02:00 - 2013-03-19 17:25 - 00000000 ____D C:\Users\*****\AppData\Local\Adobe
2013-08-25 21:31 - 2013-03-22 21:13 - 00000000 ____D C:\Users\*****\AppData\Roaming\Audacity
2013-08-25 15:11 - 2013-08-25 15:11 - 00000000 ____D C:\Windows\ERUNT
2013-08-25 15:07 - 2013-08-25 15:06 - 00000000 ____D C:\AdwCleaner
2013-08-25 15:05 - 2013-08-25 15:05 - 01021434 _____ (Thisisu) C:\Users\*****\Desktop\JRT.exe
2013-08-25 15:03 - 2013-08-25 15:03 - 00994642 _____ C:\Users\*****\Desktop\adwcleaner.exe
2013-08-25 01:42 - 2013-08-25 01:42 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-08-25 01:42 - 2013-03-19 17:48 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-25 01:42 - 2013-03-19 16:45 - 00000000 ____D C:\ProgramData\Adobe
2013-08-25 01:39 - 2013-08-25 01:39 - 00000000 ____D C:\Users\*****\AppData\Roaming\PDF Architect
2013-08-24 21:38 - 2013-08-24 21:38 - 00377856 _____ C:\Users\*****\Desktop\xj8u4eyb.exe
2013-08-24 21:34 - 2013-03-19 17:23 - 00081456 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-24 21:33 - 2010-11-21 05:47 - 00021372 _____ C:\Windows\PFRO.log
2013-08-24 21:33 - 2009-07-14 06:45 - 04955456 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-24 21:31 - 2013-03-19 17:47 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-24 21:31 - 2013-03-19 17:47 - 00000000 ____D C:\Program Files\Adobe
2013-08-24 21:31 - 2013-03-19 16:48 - 00000000 ____D C:\Users\*****\AppData\Roaming\Adobe
2013-08-24 21:21 - 2013-03-19 17:57 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-24 21:16 - 2013-06-28 13:31 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes
2013-08-24 21:12 - 2013-08-24 21:12 - 00000000 ____D C:\FRST
2013-08-24 21:10 - 2013-08-24 21:10 - 00000000 _____ C:\Users\*****\defogger_reenable
2013-08-24 21:10 - 2013-03-19 16:30 - 00000000 ____D C:\Users\*****
2013-08-24 21:08 - 2013-08-24 21:08 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2013-08-20 19:14 - 2013-03-22 15:44 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-08-19 20:30 - 2013-08-19 20:30 - 00013615 _____ C:\Users\*****\Downloads\Selbsttest.zip
2013-08-19 20:29 - 2013-08-19 20:29 - 00000633 _____ C:\Users\*****\Downloads\unbenannt
2013-08-17 12:40 - 2013-03-22 15:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Games
2013-08-17 12:25 - 2013-08-17 12:25 - 00003032 _____ C:\Windows\System32\Tasks\{1C501C9F-BEB9-4D59-9A6A-DFD376F878EA}
2013-08-14 17:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 15:10 - 2013-03-19 19:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 15:09 - 2013-08-14 15:08 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 15:08 - 2013-03-21 13:33 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-13 17:41 - 2013-07-21 15:23 - 00000000 ____D C:\ProgramData\tmp
2013-08-13 17:38 - 2013-08-02 14:59 - 00236219 _____ C:\Users\*****\Desktop\mein TierbuchPixum Fotobuch Software.mcf
2013-08-13 10:27 - 2013-06-05 00:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-08 12:18 - 2013-08-08 12:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-05 18:48 - 2013-03-19 19:22 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-08-05 18:44 - 2013-03-19 16:48 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-05 18:44 - 2013-03-19 16:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-05 18:44 - 2013-03-19 16:48 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-04 17:26 - 2013-08-02 14:59 - 00235757 _____ C:\Users\*****\Desktop\mein TierbuchPixum Fotobuch Software.mcf~
2013-08-04 17:26 - 2013-08-02 14:59 - 00000000 ____D C:\Users\*****\Desktop\mein TierbuchPixum Fotobuch Software_mcf-Dateien
2013-08-02 13:08 - 2013-07-21 16:09 - 00000000 ____D C:\Users\*****\Desktop\Tiere im Urlaub
2013-08-02 12:04 - 2013-08-02 02:42 - 00174794 _____ C:\Users\*****\Desktop\Fertiges Fotobuch FL.mcf
2013-08-02 11:54 - 2013-08-02 02:42 - 00174076 _____ C:\Users\*****\Desktop\Fertiges Fotobuch FL.mcf~
2013-08-02 11:53 - 2013-08-02 02:42 - 00000000 ____D C:\Users\*****\Desktop\Fertiges Fotobuch FL_mcf-Dateien
2013-08-02 11:52 - 2013-08-01 00:50 - 00000000 ____D C:\Users\*****\Desktop\fertige bilder
2013-08-02 11:50 - 2013-07-21 16:21 - 00000000 ____D C:\Users\*****\Desktop\Findus und Lina
2013-08-02 02:42 - 2013-08-01 18:45 - 00158666 _____ C:\Users\*****\Desktop\Pixum Fotobuch Software.mcf
2013-08-02 02:41 - 2013-08-01 18:45 - 00158666 _____ C:\Users\*****\Desktop\Pixum Fotobuch Software.mcf~
2013-08-02 02:27 - 2013-08-01 18:45 - 00000000 ____D C:\Users\*****\Desktop\Pixum Fotobuch Software_mcf-Dateien
2013-08-01 18:55 - 2013-08-01 18:46 - 00000000 ____D C:\Users\*****\Desktop\titel
Files to move or delete:
====================
C:\Users\*****\AppData\Local\Temp\Quarantine.exe
C:\Users\*****\AppData\Local\Temp\{EE549AF9-8FAA-4584-83B2-ECF1BC9DC1FF}\adobe_oobelib.dll
C:\Users\*****\AppData\Local\Temp\{EE549AF9-8FAA-4584-83B2-ECF1BC9DC1FF}\asneu.dll
C:\Users\*****\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\*****\AppData\Local\Temp\jrt\erunt\ERUNT.EXE.manifest
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-22 13:24
==================== End Of Log ============================
Ich glaube damit sind wir fertig oder? Scheint ja nichts mehr da zu sein? Wenn ja, bedanke ich mich jetzt schonmal recht herzlich bei dir, großartig wie kompetent du/ihr helfen könnt und anleitet! Vielen vielen Dank!  |
| Themen zu Windows 7: Malewarebytes findet nach jedem Suchlauf neue Funde. |
| .dll, adobe, adware.packed.ranver, antivirus, branding, browser, converter, defender, explorer, farbar, farbar recovery scan tool, flash player, log-datei, mozilla, plushd, programm, pup.optional.installcore.a, pup.optional.opencandy, registry, services.exe, software, svchost.exe, system, taskhost.exe, windows, winlogon.exe |
Baum-Darstellung