|
Log-Analyse und Auswertung: WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
16.09.2013, 19:50 | #16 | |
/// the machine /// TB-Ausbilder | WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...)Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.09.2013, 16:00 | #17 |
| WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...) Hi schrauber,
__________________Soluto habe ich neu installiert und es funktioniert jetzt wieder. Ebenso mußte ich Skype und SkypePlus neu installieren, weil diese nicht gestartet sind und auch manuell konnte ich diese Progs nicht ausführen. Beide funktionieren jetzt auch. Hier ein frisches FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03 Ran by Jason (administrator) on JASONS-PC on 17-09-2013 16:45:30 Running from C:\Users\Jason\Desktop Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Soluto) c:\program files\soluto\soluto.exe (Steganos GmbH) C:\Program Files\Steganos Mail CleanUp\smc.exe () C:\Program Files\GfKLSPService\GfK-WatchDog.exe () C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe () C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe (GfK) C:\Program Files\GfKLSPService\GfKLSPService.exe (Yuna Software) C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.0.1.3\NIS.exe (Soluto) C:\Program Files\Soluto\SolutoLauncherService.exe (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.0.1.3\NIS.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\system32\conime.exe (Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Soluto) C:\Program Files\Soluto\SolutoService.exe (GlavSoft LLC.) C:\Program Files\Soluto\SolutoRemoteService.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Steganos Mail CleanUp] - C:\PROGRA~1\STEGAN~1\SMC.EXE [1484800 2002-10-10] (Steganos GmbH) HKLM\...\Run: [GfK-WatchDog] - C:\Program Files\GfKLSPService\GfK-WatchDog.exe [58856 2013-07-15] () HKLM\...\Run: [MessengerPlusForSkypeService] - C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-06-27] (Yuna Software) HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit HKLM\...\Policies\Explorer: [LockTaskbar] 1 HKLM\...\Policies\Explorer: [NoDrives] 0 HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.) HKCU\...\Policies\system: [DisableLockWorkstation] 1 HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKCU\...\Policies\Explorer: [NoNetConnectDisconnect] 1 HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1 HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 1 HKCU\...\Policies\Explorer: [NoRecentDocsNetHood] 1 HKCU\...\Policies\Explorer: [NoDrives] 0 HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\UpdatusUser\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x20BBB51E800FCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de SearchScopes: HKLM - DefaultScope value is missing. BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK) BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.0.1.3\coIEPlg.dll (Symantec Corporation) BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.0.1.3\IPS\IPSBHO.DLL (Symantec Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.0.1.3\coIEPlg.dll (Symantec Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.3.1/jinstall-1_3_1_18-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab DPF: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.3.1/jinstall-1_3_1_18-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: AutorunsDisabled\mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) Handler: AutorunsDisabled\wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll (Skype Technologies) Filter: AutorunsDisabled - No CLSID Value - No File Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Path=Profiles\JonDoFox FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Adobe\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin: @pack.google.com/Google Updater;version=12 - C:\Program Files\Google\Google Updater\2.2.1273.1045\npCIDetect12.dll (Google) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Adobe\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Adobe\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM\...\Firefox\Extensions: [gacela2@nurago.com] - C:\Program Files\GfK Internet-Monitor FF Extension: GfK Internet-Monitor - C:\Program Files\GfK Internet-Monitor FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\ FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFFPlgn\ FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFFPlgn\ ========================== Services (Whitelisted) ================= S4 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.) S3 Automatisches LiveUpdate - Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [554352 2007-09-26] (Symantec Corporation) S3 GenericMount Helper Service; C:\Program Files\Norton Ghost\Shared\Drivers\GenericMountHelper.exe [1574408 2010-02-12] (Symantec) R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3019752 2013-07-15] () R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-07-15] () R2 GfKLSPService; C:\Program Files\GfKLSPService\GfKLSPService.exe [3300328 2013-07-15] (GfK) S3 gupdate1c98a32f5682443; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-02-08] (Google Inc.) R2 iprip; C:\Windows\System32\iprip.dll [29696 2006-11-02] (Microsoft Corporation) S3 LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE [2999664 2007-09-26] (Symantec Corporation) R2 MsgPlusService; C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-06-27] (Yuna Software) R2 NIS; C:\Program Files\Norton Internet Security\Engine\21.0.1.3\diMaster.dll [561968 2013-08-01] (Symantec Corporation) S3 Norton Ghost; C:\Program Files\Norton Ghost\Agent\VProSvc.exe [4590432 2010-03-03] (Symantec Corporation) R2 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [166976 2013-09-02] (Soluto) R3 SolutoRemoteService; C:\Program Files\Soluto\SolutoRemoteService.exe [1667584 2013-09-02] (GlavSoft LLC.) R2 SolutoService; C:\Program Files\Soluto\SolutoService.exe [819776 2013-09-02] (Soluto) S3 Symantec RemoteAssist; C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.) S3 Symantec SymSnap VSS Provider; C:\Windows\system32\dllhost.exe [7168 2006-11-02] (Microsoft Corporation) S3 SymSnapService; C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe [1964528 2010-02-11] (Symantec) S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) S4 a2AntiMalware; "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2service.exe" [x] ==================== Drivers (Whitelisted) ==================== R3 AmUStor; C:\Windows\System32\drivers\AmUStor.SYS [63616 2012-10-28] (Alcor Micro, Corp.) R1 BHDrvx86; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\BASHDefs\20130903.002\BHDrvx86.sys [1097816 2013-09-04] (Symantec Corporation) R1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1500010.003\ccSetx86.sys [117336 2013-07-30] (Symantec Corporation) R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-09-14] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-09-14] (Symantec Corporation) R3 GenericMount; C:\Windows\System32\DRIVERS\GenericMount.sys [57840 2010-02-12] (Symantec Corporation) S3 hcdriver; C:\Windows\System32\DRIVERS\hcdriver.sys [50688 2012-01-27] (Intel Corporation) R1 IDSVix86; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\IPSDefs\20130913.001\IDSvix86.sys [392792 2013-09-13] (Symantec Corporation) S3 k750bus; C:\Windows\System32\DRIVERS\k750bus.sys [55216 2005-02-11] (MCCI) S3 k750mgmt; C:\Windows\System32\DRIVERS\k750mgmt.sys [81728 2007-12-24] (MCCI) S3 k750obex; C:\Windows\System32\DRIVERS\k750obex.sys [79488 2007-12-24] (MCCI) R0 MxEFUF; C:\Windows\System32\DRIVERS\MxEFUF32.sys [108544 2011-08-15] (Matrox Graphics Inc.) R3 NAVENG; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20130916.003\NAVENG.SYS [93272 2013-09-14] (Symantec Corporation) R3 NAVEX15; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20130916.003\NAVEX15.SYS [1612376 2013-09-14] (Symantec Corporation) R0 Soluto; C:\Windows\System32\DRIVERS\Soluto.sys [51144 2013-09-02] (Soluto LTD.) R3 SRTSP; C:\Windows\System32\Drivers\NIS\1500010.003\SRTSP.SYS [650840 2013-07-31] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NIS\1500010.003\SRTSPX.SYS [32344 2013-07-31] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NIS\1500010.003\SYMDS.SYS [367704 2013-08-01] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NIS\1500010.003\SYMEFA.SYS [935000 2013-08-05] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2013-09-15] (Symantec Corporation) R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [63576 2013-08-07] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NIS\1500010.003\Ironx86.SYS [206936 2013-07-31] (Symantec Corporation) R1 SYMTDIv; C:\Windows\System32\Drivers\NIS\1500010.003\SYMTDIV.SYS [383064 2013-07-31] (Symantec Corporation) S3 udsstub; C:\Windows\System32\DRIVERS\udsstub.sys [16000 2012-06-18] (SysNucleus) S3 VProEventMonitor; C:\Windows\System32\DRIVERS\vproeventmonitor.sys [15096 2009-09-21] (Symantec Corporation) S3 a2acc; \??\C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2accx86.sys [x] U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] R3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x32.sys [x] U2 V2iMount; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-17 16:44 - 2013-09-17 16:44 - 00000000 ____D C:\FRST 2013-09-17 16:43 - 2013-09-17 16:43 - 01083437 _____ (Farbar) C:\Users\Jason\Desktop\FRST.exe 2013-09-17 16:29 - 2013-09-17 16:30 - 00000000 ____D C:\Users\Jason\AppData\Local\{4D30A8BD-D9DE-4111-807C-D488DFF99C4E} 2013-09-16 18:11 - 2013-09-16 18:11 - 00000000 ____D C:\ProgramData\Messenger Plus! for Skype 2013-09-16 18:10 - 2013-09-16 18:10 - 00987504 _____ (Yuna Software) C:\Users\Jason\Downloads\Setup-PlusForSkype-2.0_FF.exe 2013-09-16 16:52 - 2013-09-16 16:52 - 00000000 ____D C:\Users\Jason\AppData\Local\{01C14C6B-AD33-4FF9-AAD7-6BB48AEFAC91} 2013-09-15 20:43 - 2013-09-15 20:43 - 00000000 ____D C:\Program Files\Soluto 2013-09-15 20:43 - 2013-09-02 13:51 - 00051144 _____ (Soluto LTD.) C:\Windows\system32\Drivers\Soluto.sys 2013-09-15 20:08 - 2013-09-15 20:14 - 00002210 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk 2013-09-15 08:47 - 2013-09-15 20:43 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin 2013-09-15 08:43 - 2013-09-15 08:43 - 01511488 _____ (Soluto Inc) C:\Users\Jason\Downloads\solutoinstaller_1.3.1328.exe 2013-09-15 08:32 - 2013-09-15 08:32 - 00000000 ____D C:\Users\Jason\AppData\Local\{0FA2F25E-551B-4F3F-90C3-2EBA82D1B209} 2013-09-14 04:47 - 2013-09-14 04:48 - 00000000 ____D C:\Users\Jason\AppData\Local\{9C13A9AE-D0AA-40CA-868A-13CDACCFC6E0} 2013-09-13 17:28 - 2013-09-13 17:28 - 00275181 _____ C:\Users\Jason\Downloads\WindowsUpdateDiagnostic.diagcab 2013-09-13 16:45 - 2013-09-13 16:45 - 00000000 ____D C:\Users\Jason\AppData\Local\{60DED220-4B05-421C-9ADF-B292049AFD47} 2013-09-12 16:57 - 2013-09-12 16:57 - 00000000 ____D C:\Users\Jason\AppData\Local\{8DADB1EA-2A01-4B9A-A889-8377032F69C8} 2013-09-12 03:12 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-12 03:12 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-12 03:12 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-12 03:12 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-12 03:12 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-12 03:12 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-12 03:12 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-12 03:12 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-12 03:12 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-12 03:12 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-12 03:12 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-12 03:12 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-12 03:12 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-12 03:12 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-12 03:12 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-12 03:12 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-11 21:47 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-11 21:47 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2013-09-11 21:30 - 2013-09-11 21:30 - 00000000 ____D C:\Users\Jason\AppData\Local\{107D6498-8605-45E3-9388-BC56CF52A801} 2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Jason\AppData\Local\{E95A276B-30B9-4CC1-A1A2-F04EFB0DBE6B} 2013-09-10 21:43 - 2013-09-12 20:01 - 00000000 ____D C:\Windows\ERUNT 2013-09-10 16:37 - 2013-09-12 19:51 - 00000000 ____D C:\Windows\erdnt 2013-09-08 20:12 - 2013-09-08 20:12 - 00000912 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-08 20:12 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-08 20:10 - 2013-09-08 20:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jason\Downloads\mbam-setup-1.75.0.1300.exe 2013-08-28 17:48 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL ==================== One Month Modified Files and Folders ======= 2013-09-17 16:44 - 2013-09-17 16:44 - 00000000 ____D C:\FRST 2013-09-17 16:44 - 2013-02-06 17:44 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Skype 2013-09-17 16:43 - 2013-09-17 16:43 - 01083437 _____ (Farbar) C:\Users\Jason\Desktop\FRST.exe 2013-09-17 16:30 - 2013-09-17 16:29 - 00000000 ____D C:\Users\Jason\AppData\Local\{4D30A8BD-D9DE-4111-807C-D488DFF99C4E} 2013-09-17 16:30 - 2012-04-06 20:30 - 00000000 ____D C:\Users\Jason\AppData\Local\Windows Live 2013-09-17 16:30 - 2009-04-11 14:37 - 01683325 _____ C:\Windows\WindowsUpdate.log 2013-09-17 16:24 - 2012-04-30 11:44 - 00000000 ____D C:\Program Files\GfK Internet-Monitor 2013-09-17 16:24 - 2012-04-30 11:43 - 00000000 ____D C:\Program Files\GfKLSPService 2013-09-17 16:24 - 2011-07-27 17:09 - 00000000 ____D C:\Windows\system32\NtmsData 2013-09-17 16:23 - 2008-01-21 04:47 - 00082620 _____ C:\Windows\PFRO.log 2013-09-17 16:23 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-17 16:23 - 2006-11-02 14:47 - 00006848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-17 16:23 - 2006-11-02 14:47 - 00006848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-16 18:18 - 2006-11-02 15:01 - 00032628 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-16 18:11 - 2013-09-16 18:11 - 00000000 ____D C:\ProgramData\Messenger Plus! for Skype 2013-09-16 18:10 - 2013-09-16 18:10 - 00987504 _____ (Yuna Software) C:\Users\Jason\Downloads\Setup-PlusForSkype-2.0_FF.exe 2013-09-16 17:53 - 2013-02-09 10:07 - 00000000 ___RD C:\Program Files\Skype 2013-09-16 17:53 - 2013-02-06 17:44 - 00000000 ____D C:\ProgramData\Skype 2013-09-16 17:13 - 2007-10-14 14:13 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2013-09-16 16:52 - 2013-09-16 16:52 - 00000000 ____D C:\Users\Jason\AppData\Local\{01C14C6B-AD33-4FF9-AAD7-6BB48AEFAC91} 2013-09-16 16:51 - 2010-12-31 18:49 - 00000000 ____D C:\ProgramData\Soluto 2013-09-15 20:46 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET 2013-09-15 20:43 - 2013-09-15 20:43 - 00000000 ____D C:\Program Files\Soluto 2013-09-15 20:43 - 2013-09-15 08:47 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin 2013-09-15 20:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration 2013-09-15 20:15 - 2010-09-12 11:33 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton 2013-09-15 20:15 - 2009-11-08 21:12 - 00000000 ____D C:\Windows\system32\Drivers\NIS 2013-09-15 20:15 - 2009-03-28 02:29 - 00000000 ____D C:\ProgramData\Norton 2013-09-15 20:14 - 2013-09-15 20:08 - 00002210 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk 2013-09-15 20:09 - 2012-06-21 18:12 - 00142936 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS 2013-09-15 20:09 - 2012-06-21 18:12 - 00008194 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT 2013-09-15 20:08 - 2012-06-21 18:11 - 00000000 ____D C:\Program Files\Norton Internet Security 2013-09-15 17:56 - 2010-09-12 08:44 - 00000000 ____D C:\Users\Public\Downloads\Norton 2013-09-15 17:49 - 2012-09-23 11:09 - 01021936 _____ (Symantec Corporation) C:\Users\Jason\Downloads\NISDownloader.exe 2013-09-15 08:43 - 2013-09-15 08:43 - 01511488 _____ (Soluto Inc) C:\Users\Jason\Downloads\solutoinstaller_1.3.1328.exe 2013-09-15 08:32 - 2013-09-15 08:32 - 00000000 ____D C:\Users\Jason\AppData\Local\{0FA2F25E-551B-4F3F-90C3-2EBA82D1B209} 2013-09-14 05:00 - 2009-10-30 21:14 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-09-14 04:48 - 2013-09-14 04:47 - 00000000 ____D C:\Users\Jason\AppData\Local\{9C13A9AE-D0AA-40CA-868A-13CDACCFC6E0} 2013-09-13 17:53 - 2010-07-22 18:06 - 00000000 ____D C:\ProgramData\VideoViewer 2013-09-13 17:28 - 2013-09-13 17:28 - 00275181 _____ C:\Users\Jason\Downloads\WindowsUpdateDiagnostic.diagcab 2013-09-13 16:45 - 2013-09-13 16:45 - 00000000 ____D C:\Users\Jason\AppData\Local\{60DED220-4B05-421C-9ADF-B292049AFD47} 2013-09-12 20:50 - 2007-10-14 11:54 - 00000000 ____D C:\Users\Jason\AppData\Local\VirtualStore 2013-09-12 20:01 - 2013-09-10 21:43 - 00000000 ____D C:\Windows\ERUNT 2013-09-12 19:51 - 2013-09-10 16:37 - 00000000 ____D C:\Windows\erdnt 2013-09-12 16:57 - 2013-09-12 16:57 - 00000000 ____D C:\Users\Jason\AppData\Local\{8DADB1EA-2A01-4B9A-A889-8377032F69C8} 2013-09-12 16:51 - 2006-11-02 14:47 - 00495576 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-12 03:10 - 2013-07-16 17:31 - 00000000 ____D C:\Windows\system32\MRT 2013-09-12 03:01 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2013-09-11 21:30 - 2013-09-11 21:30 - 00000000 ____D C:\Users\Jason\AppData\Local\{107D6498-8605-45E3-9388-BC56CF52A801} 2013-09-11 16:34 - 2009-04-11 18:55 - 01445460 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Jason\AppData\Local\{E95A276B-30B9-4CC1-A1A2-F04EFB0DBE6B} 2013-09-10 17:10 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default 2013-09-10 17:10 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public 2013-09-10 17:02 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini 2013-09-08 20:12 - 2013-09-08 20:12 - 00000912 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-08 20:12 - 2011-01-26 17:54 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-09-08 20:11 - 2013-09-08 20:10 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jason\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-05 18:51 - 2006-11-02 12:22 - 61865984 _____ C:\Windows\system32\config\SOFTWARE.bak 2013-09-05 18:51 - 2006-11-02 12:22 - 30670848 _____ C:\Windows\system32\config\COMPONENTS.bak 2013-09-05 18:51 - 2006-11-02 12:22 - 20447232 _____ C:\Windows\system32\config\SYSTEM.bak 2013-09-05 18:51 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak 2013-09-05 18:51 - 2006-11-02 12:22 - 00057344 _____ C:\Windows\system32\config\SAM.bak 2013-09-05 18:51 - 2006-11-02 12:22 - 00028672 _____ C:\Windows\system32\config\SECURITY.bak 2013-09-02 13:51 - 2013-09-15 20:43 - 00051144 _____ (Soluto LTD.) C:\Windows\system32\Drivers\Soluto.sys 2013-09-01 17:51 - 2007-10-23 18:47 - 00000000 ____D C:\Users\Jason\Documents\Meine Dokumente 2013-08-19 16:16 - 2012-04-25 18:46 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-08-18 19:56 - 2013-08-17 11:20 - 00000000 ____D C:\Program Files\Mozilla Firefox Some content of TEMP: ==================== C:\Users\Jason\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-17 16:31 ==================== End Of Log ============================ --- --- --- MfG. Als ich ebend FRST gedownloadet habe und es gestartet habe, hat sich Skype verabschiedet und geschlossen?! MfG. |
17.09.2013, 16:34 | #18 |
/// the machine /// TB-Ausbilder | WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...) Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.
__________________Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter unlock: C:\Users\Jason\AppData\Local\Temp Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Teste ob oben von dir beschriebene Probleme weg sind.
__________________ |
17.09.2013, 16:51 | #19 |
| WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...) Hier die Logdatei: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 16-09-2013 03 Ran by Jason at 2013-09-17 17:41:48 Run:1 Running from C:\Users\Jason\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** unlock: C:\Users\Jason\AppData\Local\Temp ***************** "C:\Users\Jason\AppData\Local\Temp" => File/Diroctory unlocked successfully. ==== End of Fixlog ==== Scheinbar hat es nach dem 7. mal gereicht. Denn im Updateverlauf stehen diese Updates 7 mal drin als erfolgreich installiert. Letztmalig vom 14.09.2013. Ist wohl dann alles gut, wenn ich nachher nach einen Neustart auch Skype wieder auf dem Desktop bekomme. MfG. |
17.09.2013, 20:09 | #20 |
/// the machine /// TB-Ausbilder | WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...) Try it und berichte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...) |
32 bit, adblock, adobe reader xi, analyse, angezeigt, anleitung, application/pdf:, askbar, benötigt, blockiert, board, dateien, funde, geladen, gestartet, gesuch, gesucht, helper.exe, heute, infos, inhalt, install.exe, malwarebytes, microsoft fix it, minute, minuten, neuer, norton, officejet, plug-in, scan, seite, sketchup, startseite, tab, tracker, öffnet |