![]() |
|
Log-Analyse und Auswertung: Windows 7: Sicherheitswarnung vom Telekom-Abuse-Team und Malwarebyte-FundeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
/// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Windows 7: Sicherheitswarnung vom Telekom-Abuse-Team und Malwarebyte-Funde Ignorier SecurityCheck. Frisches FRST fehlt noch. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
![]() | #2 |
![]() ![]() | ![]() Windows 7: Sicherheitswarnung vom Telekom-Abuse-Team und Malwarebyte-Funde upps, das habe ich vergessen hier ist es
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-09-2013 Ran by Benni (administrator) on BMB on 04-09-2013 22:10:52 Running from C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AuthenTec, Inc.) C:\Programme\Fingerprint Sensor\AtService.exe (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (SafeBoot International) C:\Programme\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe (Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Microsoft Corporation) C:\WINDOWS\System32\SCardSvr.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accoca.exe (Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe (Hewlett-Packard Development Company, L.P) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe (Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe (Hewlett-Packard) C:\Programme\Hp\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Corporation) C:\WINDOWS\system32\AccelerometerSt.Exe (Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accrdsub.exe (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE ( Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe (Analog Devices, Inc.) C:\Programme\Analog Devices\Core\smax4pnp.exe (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (PDF Complete Inc) C:\Programme\PDF Complete\pdfsvc.exe (Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\AsGHost.exe (HP) C:\Programme\HPQ\HP Connection Manager 1.1\bin\mdvsrv.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe () C:\Programme\Hewlett-Packard\Shared\HpqToaster.exe (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe (Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe (Farbar) C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads\FRST(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IMJPMIG8.1] - C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [208952 2004-08-04] (Microsoft Corporation) HKLM\...\Run: [PHIME2002ASync] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [455168 2004-08-04] (Microsoft Corporation) HKLM\...\Run: [PHIME2002A] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [455168 2004-08-04] (Microsoft Corporation) HKLM\...\Run: [Cpqset] - C:\Programme\Hewlett-Packard\Default Settings\cpqset.exe [61440 2008-05-14] () HKLM\...\Run: [coreworks] - C:\Programme\HPQ\HP Connection Manager 1.1\bin\gbxapp.exe [780776 2008-06-12] (HP) HKLM\...\Run: [HP Software Update] - C:\Programme\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM\...\Run: [PDF Complete] - C:\Programme\PDF Complete\pdfsty.exe [318488 2008-05-12] (PDF Complete Inc) HKLM\...\Run: [hpWirelessAssistant] - C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [WatchDog] - C:\Programme\InterVideo\DVD Check\DVDCheck.exe [197904 2008-05-23] (InterVideo Inc.) HKLM\...\Run: [SoundMAX] - C:\Programme\Analog Devices\SoundMAX\Smax4.exe [884736 2008-03-24] (Analog Devices, Inc.) HKLM\...\Run: [AccelerometerSysTrayApplet] - C:\WINDOWS\system32\AccelerometerSt.Exe [82224 2008-06-09] (Hewlett-Packard Corporation) HKLM\...\Run: [StartCCC] - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SynTPEnh] - C:\Programme\Synaptics\SynTP\SynTPEnh.exe [1040384 2008-03-27] (Synaptics, Inc.) HKLM\...\Run: [] - [x] HKLM\...\Run: [accrdsub] - C:\Programme\ActivIdentity\ActivClient\accrdsub.exe [293168 2007-05-15] (ActivIdentity) HKLM\...\Run: [PTHOSTTR] - C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [238896 2008-06-10] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [CognizanceTS] - C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [24848 2008-06-02] (Bioscrypt Inc.) HKLM\...\Run: [QlbCtrl.exe] - C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [177456 2008-05-14] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [SoundMAXPnP] - C:\Programme\Analog Devices\Core\smax4pnp.exe [1044480 2008-04-04] (Analog Devices, Inc.) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) Winlogon\Notify\ackpbsc: C:\WINDOWS\system32\ackpbsc.dll (ActivIdentity) Winlogon\Notify\acunlock: C:\Programme\ActivIdentity\ActivClient\acunlock.dll [X] Winlogon\Notify\AtiExtEvent: Ati2evxx.dll (ATI Technologies Inc.) Winlogon\Notify\OneCard: C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL [X] Winlogon\Notify\WgaLogon: WgaLogon.dll (Microsoft Corporation) Lsa: [Notification Packages] scecli ASWLNPkg Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\DVD Check.lnk ShortcutTarget: DVD Check.lnk -> C:\Programme\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Programme\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.) Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Toolbar: HKCU -&Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU -No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1374571681609 Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Winsock: Catalog9 01 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 20 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Mozilla\Firefox\Profiles\vsvz4md9.default FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ========================== Services (Whitelisted) ================= R2 accoca; C:\Programme\ActivIdentity\ActivClient\accoca.exe [182576 2007-05-15] (ActivIdentity) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.) R2 ASBroker; C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL [112400 2008-06-02] (Bioscrypt Inc.) R2 ASChannel; C:\Programme\Hewlett-Packard\IAM\Bin\AsChnl.dll [137488 2008-06-02] (Bioscrypt Inc.) R2 ATService; C:\Programme\Fingerprint Sensor\AtService.exe [1176824 2008-05-15] (AuthenTec, Inc.) R2 btwdins; C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800 2008-05-12] (Broadcom Corporation.) R3 Com4QLBEx; C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840 2008-04-03] (Hewlett-Packard Development Company, L.P.) R2 HP ProtectTools Service; C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [18944 2008-06-10] (Hewlett-Packard Development Company, L.P) R2 HpFkCryptService; C:\Programme\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256512 2008-06-05] (SafeBoot International) R3 hpqwmiex; C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe [165192 2008-04-16] (Hewlett-Packard Development Company, L.P.) S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) S2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 mdvsrv; C:\Programme\HPQ\HP Connection Manager 1.1\bin\mdvsrv.exe [575976 2008-06-12] (HP) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [117656 2013-08-17] (Mozilla Foundation) R2 pdfcDispatcher; C:\Programme\PDF Complete\pdfsvc.exe [576024 2008-05-12] (PDF Complete Inc) R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" [x] ==================== Drivers (Whitelisted) ==================== R0 Amddfltr; C:\Windows\System32\DRIVERS\Amddfltr.sys [15416 2008-03-12] (Advanced Micro Devices) R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG) S3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [163328 2007-11-29] (Broadcom Corporation) R3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [1287552 2013-07-23] (Broadcom Corporation) R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [879624 2008-05-14] (Broadcom Corporation.) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [74688 2008-05-14] (Broadcom Corporation.) S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [12496 2008-06-05] (SafeBoot International) R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [109184 2008-06-05] () R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [51376 2008-06-05] (SafeBoot N.V.) R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [12928 2008-06-05] (SafeBoot International) S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [56448 2007-06-21] (SCM Microsystems Inc.) R0 SFAUDIO; C:\Windows\System32\drivers\sfaudio.sys [24064 2008-03-28] (Sonic Focus, Inc) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1804160 2008-04-10] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) U2 CertPropSvc; S4 IntelIde; No ImagePath U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-03 08:04 - 2013-09-03 08:04 - 00000905 _____ C:\Dokumente und Einstellungen\Benni\Desktop\JRT.txt 2013-09-03 00:36 - 2013-09-03 00:36 - 00000000 ____D C:\WINDOWS\ERUNT 2013-09-02 22:20 - 2013-09-02 22:49 - 00000000 ____D C:\AdwCleaner 2013-09-02 20:21 - 2013-09-02 20:21 - 00000000 ____D C:\FRST 2013-09-02 20:12 - 2013-09-02 20:12 - 00000000 _____ C:\Dokumente und Einstellungen\Benni\defogger_reenable 2013-08-31 18:59 - 2013-08-31 18:59 - 00007566 _____ C:\WINDOWS\KB2803821-v2.log 2013-08-31 18:59 - 2013-08-31 18:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$ 2013-08-28 12:19 - 2013-08-28 12:19 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Malwarebytes 2013-08-28 12:18 - 2013-08-28 12:18 - 00000756 _____ C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware 2013-08-28 12:18 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2013-08-22 19:33 - 2013-08-22 20:02 - 00005920 _____ C:\WINDOWS\WgaNotify.log 2013-08-22 19:33 - 2013-08-22 19:33 - 00000000 ____D C:\6f9c548778953e4d2ee129855559657c 2013-08-18 09:03 - 2013-08-18 09:03 - 00015509 _____ C:\WINDOWS\KB2862772-IE8.log 2013-08-18 09:01 - 2013-08-18 09:03 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-08-18 09:00 - 2013-08-18 09:00 - 00008061 _____ C:\WINDOWS\KB2863058.log 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$ 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$ 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$ 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$ 2013-08-17 21:59 - 2013-08-18 08:56 - 00000000 ____D C:\Programme\Mozilla Firefox 2013-08-17 21:13 - 2013-08-18 09:00 - 00014911 _____ C:\WINDOWS\KB2859537.log 2013-08-17 21:13 - 2013-08-18 09:00 - 00014113 _____ C:\WINDOWS\KB2850869.log ==================== One Month Modified Files and Folders ======= 2013-09-04 21:59 - 2013-07-22 15:44 - 01566949 _____ C:\WINDOWS\WindowsUpdate.log 2013-09-04 21:56 - 2013-07-22 16:16 - 01071796 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-09-04 21:55 - 2004-08-04 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-09-04 21:49 - 2013-07-22 16:19 - 00000159 _____ C:\WINDOWS\wiadebug.log 2013-09-04 21:49 - 2013-07-22 16:19 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-09-04 21:47 - 2013-07-22 23:24 - 00000000 ____D C:\Dokumente und Einstellungen\All Users.WINDOWS\HPQLOG 2013-09-04 21:47 - 2013-07-22 15:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-09-04 08:41 - 2013-07-23 02:42 - 00393216 _____ C:\WINDOWS\system32\config\ACEEvent.evt 2013-09-04 08:41 - 2013-07-22 15:56 - 00000190 ___SH C:\Dokumente und Einstellungen\Benni\ntuser.ini 2013-09-04 08:41 - 2013-07-22 15:56 - 00000000 ____D C:\Dokumente und Einstellungen\Benni 2013-09-04 08:41 - 2013-07-22 15:51 - 00015940 _____ C:\WINDOWS\SchedLgU.Txt 2013-09-04 07:22 - 2013-07-22 13:36 - 00000000 ___RD C:\Programme 2013-09-03 19:30 - 2013-09-03 19:30 - 00000000 __SHD C:\Dokumente und Einstellungen\Benni\PrivacIE 2013-09-03 08:04 - 2013-09-03 08:04 - 00000905 _____ C:\Dokumente und Einstellungen\Benni\Desktop\JRT.txt 2013-09-03 00:36 - 2013-09-03 00:36 - 00000000 ____D C:\WINDOWS\ERUNT 2013-09-02 22:49 - 2013-09-02 22:20 - 00000000 ____D C:\AdwCleaner 2013-09-02 21:02 - 2013-07-25 09:33 - 00000190 ___SH C:\Dokumente und Einstellungen\Surfer\ntuser.ini 2013-09-02 21:02 - 2013-07-25 09:33 - 00000000 ____D C:\Dokumente und Einstellungen\Surfer 2013-09-02 20:21 - 2013-09-02 20:21 - 00000000 ____D C:\FRST 2013-09-02 20:12 - 2013-09-02 20:12 - 00000000 _____ C:\Dokumente und Einstellungen\Benni\defogger_reenable 2013-09-02 09:34 - 2013-07-27 16:28 - 00000000 ____D C:\WINDOWS\system32\NtmsData 2013-08-31 19:02 - 2013-07-22 16:14 - 00457375 _____ C:\WINDOWS\setupapi.log 2013-08-31 18:59 - 2013-08-31 18:59 - 00007566 _____ C:\WINDOWS\KB2803821-v2.log 2013-08-31 18:59 - 2013-08-31 18:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$ 2013-08-31 18:59 - 2013-08-01 15:03 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2013-08-31 18:59 - 2013-07-22 16:16 - 01196764 _____ C:\WINDOWS\iis6.log 2013-08-31 18:59 - 2013-07-22 16:16 - 01023933 _____ C:\WINDOWS\FaxSetup.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00521635 _____ C:\WINDOWS\ocgen.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00480436 _____ C:\WINDOWS\tsoc.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00357692 _____ C:\WINDOWS\comsetup.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00330380 _____ C:\WINDOWS\msmqinst.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00218540 _____ C:\WINDOWS\ntdtcsetup.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00181084 _____ C:\WINDOWS\netfxocm.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00074279 _____ C:\WINDOWS\MedCtrOC.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00057391 _____ C:\WINDOWS\ocmsn.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00052102 _____ C:\WINDOWS\msgsocm.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00051832 _____ C:\WINDOWS\tabletoc.log 2013-08-31 18:59 - 2013-07-22 16:16 - 00001374 _____ C:\WINDOWS\imsins.log 2013-08-28 12:19 - 2013-08-28 12:19 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Malwarebytes 2013-08-28 12:18 - 2013-08-28 12:18 - 00000756 _____ C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\ Malwarebytes Anti-Malware .lnk 2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware 2013-08-25 12:37 - 2013-07-25 10:03 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\.minecraft 2013-08-23 21:16 - 2013-07-22 13:19 - 00000000 ____D C:\WINDOWS\Registration 2013-08-22 20:02 - 2013-08-22 19:33 - 00005920 _____ C:\WINDOWS\WgaNotify.log 2013-08-22 20:02 - 2013-07-23 14:48 - 00080703 _____ C:\WINDOWS\spupdsvc.log 2013-08-22 19:33 - 2013-08-22 19:33 - 00000000 ____D C:\6f9c548778953e4d2ee129855559657c 2013-08-18 14:32 - 2013-07-22 14:01 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-08-18 09:05 - 2013-07-23 12:48 - 00000000 ____D C:\Programme\Mozilla Maintenance Service 2013-08-18 09:03 - 2013-08-18 09:03 - 00015509 _____ C:\WINDOWS\KB2862772-IE8.log 2013-08-18 09:03 - 2013-08-18 09:01 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-08-18 09:03 - 2013-07-25 11:33 - 00000000 ____D C:\WINDOWS\ie8updates 2013-08-18 09:03 - 2013-07-22 23:12 - 00151069 _____ C:\WINDOWS\updspapi.log 2013-08-18 09:03 - 2013-07-22 16:16 - 00001374 _____ C:\WINDOWS\imsins.BAK 2013-08-18 09:01 - 2013-07-25 11:00 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-08-18 09:00 - 2013-08-18 09:00 - 00008061 _____ C:\WINDOWS\KB2863058.log 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$ 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$ 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$ 2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$ 2013-08-18 09:00 - 2013-08-17 21:13 - 00014911 _____ C:\WINDOWS\KB2859537.log 2013-08-18 09:00 - 2013-08-17 21:13 - 00014113 _____ C:\WINDOWS\KB2850869.log 2013-08-18 09:00 - 2013-07-25 11:13 - 00012520 _____ C:\WINDOWS\system32\TZLog.log 2013-08-18 08:56 - 2013-08-17 21:59 - 00000000 ____D C:\Programme\Mozilla Firefox Files to move or delete: ==================== C:\DOKUME~1\Benni\LOKALE~1\Temp\_is13C.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\_is148.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\_is1DA.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\_is3B7.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\_is44B.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\{FCD79CF2-2FA3-41BD-98E7-F89A444B4B12}\ISSetup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{FCD79CF2-2FA3-41BD-98E7-F89A444B4B12}\_Setup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{EEF933FF-D8DE-45AD-A286-30D2979ECD6F}\ISSetup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{EEF933FF-D8DE-45AD-A286-30D2979ECD6F}\_Setup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\LDevCTbl.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\LXBurnCom.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\ULCDRDrv.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{ABE1ADEC-E87A-48F7-808B-18614054D7A0}\IfxDrvSetupAppl32.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\{ABE1ADEC-E87A-48F7-808B-18614054D7A0}\IfxInstHlp.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{9A678650-8126-4210-9EA8-19E27DA5DF97}\{C151CE54-E7EA-4804-854B-F515368B0798}\difxapi.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{96C7C8B8-D43D-49C1-AB5C-19EEEC35C8F0}\ISSetup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{96C7C8B8-D43D-49C1-AB5C-19EEEC35C8F0}\_Setup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{3C33533D-9DF5-427E-8C84-9BEE7C3226F4}\ISSetup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{3C33533D-9DF5-427E-8C84-9BEE7C3226F4}\_Setup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{364A1DFB-8AE8-44A5-833B-A9C93D9C6481}\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\difxapi.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{2B88BFDA-EA35-4A7C-8AE4-2404E1BF8F0E}\ISSetup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{2B88BFDA-EA35-4A7C-8AE4-2404E1BF8F0E}\_Setup.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{275A149D-5F25-4577-B3D9-F717A6CFBE52}\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\difxapi.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\{25FB932F-3138-4F20-9504-6C34EFB4509F}\{C151CE54-E7EA-4804-854B-F515368B0798}\difxapi.dll C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 5 für Minecraft_1.6.2.zip\Minecraft.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 4 für Minecraft_1.6.2.zip\Minecraft.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 3 für Minecraft_1.6.2.zip\Minecraft.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 2 für Minecraft_1.6.2.zip\Minecraft.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 1 für Minecraft_1.6.2.zip\Minecraft.exe C:\DOKUME~1\Benni\LOKALE~1\Temp\jrt\erunt\ERUNT.EXE C:\DOKUME~1\Benni\LOKALE~1\Temp\isp19A.tmp\_Setup.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2004-08-04 14:00] - [2008-04-14 07:52] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e C:\Windows\System32\winlogon.exe [2004-08-04 14:00] - [2008-04-14 07:53] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a C:\Windows\System32\svchost.exe [2004-08-04 14:00] - [2008-04-14 07:53] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 C:\Windows\System32\services.exe [2004-08-04 14:00] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc C:\Windows\System32\User32.dll [2004-08-04 14:00] - [2008-04-14 07:52] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd C:\Windows\System32\userinit.exe [2004-08-04 14:00] - [2008-04-14 07:53] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 C:\Windows\System32\Drivers\volsnap.sys [2004-08-04 14:00] - [2008-04-14 07:22] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d ==================== End Of Log ============================ --- --- --- Der Rechner braucht unheimlich lange zum Booten ![]() ansonsten habe ich aber keine anderen Probleme. Woran liegt das langsame Booten ? EInen schönen Abend Mummb |
![]() |
Themen zu Windows 7: Sicherheitswarnung vom Telekom-Abuse-Team und Malwarebyte-Funde |
abuse-team, bonjour, browser, computer, crystaldiskinfo, desktop, device driver, excel, farbar, farbar recovery scan tool, firefox, firefox 23.0.1, flash player, homepage, internet, logfile, mozilla, netzwerk, plug-in, problem, pup.optional.conduit.a, pup.optional.installcore, pup.optional.softonic, secunia psi, security, software, starmoney, svchost.exe, taskhost.exe, windows, windows xp |