| |
| |||||||
Log-Analyse und Auswertung: Win 7.. C:\ProgramData\eSafe eGdpSvc.exe in C:\ProgramData\eSafeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
26.10.2013, 16:48
| #1 |
| |  Win 7.. C:\ProgramData\eSafe eGdpSvc.exe in C:\ProgramData\eSafe Hallo, ich habe folgendes Problem... Ich habe im Internet gesurft und bin auf einen Link gegangen, der gleich zu einem Download geführt hat (ich weiss man soll eigentlich nicht drauf Klicken  ). Wollte dann weiter surfen bis ich gemerkt habe, dass sich mein Google Chrom verändert hat und komische Wörter vor den such-Links standen. Habe dann Chrom deinstalliert, weil ich gehofft habe das, dass Problem weg ist aber Pustekuchen...Habe mir dann alle möglichen Anti Viren Programme geladen aber nur 1 hat den Trojaner erkannt. Als nächstes habe ich halt gegoogelt und bin schon auf einen Beitrag, auf eurer Seite gestoßen und habe den Schritten gefolgt und auch gemacht. Nur weiß ich jetzt nicht ob wirklich alles weg ist  Ich poste mal die (glaube) Logs heißt das: AdwCleaner: Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 26/10/2013 um 11:06:42
# Updated 20/10/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Kevin - KEVIN-PC
# Gestartet von : E:\Neuer Ordner\adwcleaner-3.010.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : WsysSvc
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\eSafe
Ordner Gelöscht : C:\ProgramData\Uniblue\DriverScanner
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\DriverScanner
Ordner Gelöscht : C:\Program Files (x86)\Uniblue\DriverScanner
Ordner Gelöscht : C:\Program Files (x86)\BobyLyrics-15
Ordner Gelöscht : C:\Users\Kevin\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Kevin\AppData\Local\Temp\AskSearch
Ordner Gelöscht : C:\Users\Kevin\AppData\Local\Temp\eIntaller
Ordner Gelöscht : C:\Users\Kevin\AppData\LocalLow\BobyLyrics-15
Ordner Gelöscht : C:\Users\Kevin\AppData\Roaming\ExpressFiles
Ordner Gelöscht : C:\Users\Kevin\AppData\Roaming\Uniblue\DriverScanner
Datei Gelöscht : C:\Users\Public\Desktop\driverscanner.lnk
Datei Gelöscht : C:\Windows\Tasks\AmiUpdXp.job
Datei Gelöscht : C:\Windows\System32\Tasks\AmiUpdXp
Datei Gelöscht : C:\Windows\Tasks\driverscanner.job
Datei Gelöscht : C:\Windows\System32\Tasks\driverscanner
Datei Gelöscht : C:\Windows\System32\Tasks\Express FilesUpdate
Datei Gelöscht : C:\Windows\Tasks\BobyLyrics-15-chromeinstaller.job
Datei Gelöscht : C:\Windows\System32\Tasks\BobyLyrics-15-chromeinstaller
Datei Gelöscht : C:\Windows\Tasks\BobyLyrics-15-codedownloader.job
Datei Gelöscht : C:\Windows\System32\Tasks\BobyLyrics-15-codedownloader
Datei Gelöscht : C:\Windows\Tasks\BobyLyrics-15-enabler.job
Datei Gelöscht : C:\Windows\System32\Tasks\BobyLyrics-15-enabler
Datei Gelöscht : C:\Windows\Tasks\BobyLyrics-15-updater.job
Datei Gelöscht : C:\Windows\System32\Tasks\BobyLyrics-15-updater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DriverScanner]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_963508d2
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0043914.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0043914.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0043914.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0043914.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411391114}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455395514}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466396614}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444394414}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411391114}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411391114}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411391114}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411391114}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455395514}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466396614}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411391114}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\SProtector
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BobyLyrics-15
Schlüssel Gelöscht : HKLM\Software\eSafeSecControl
Schlüssel Gelöscht : HKLM\Software\qone8Software
Schlüssel Gelöscht : HKLM\Software\SP Global
Schlüssel Gelöscht : HKLM\Software\SProtector
Schlüssel Gelöscht : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gelöscht : HKLM\Software\BobyLyrics-15
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WSysControl
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BobyLyrics-15
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16521
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
*************************
AdwCleaner[R0].txt - [8029 octets] - [26/10/2013 11:05:32]
AdwCleaner[S0].txt - [6984 octets] - [26/10/2013 11:06:42]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7044 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Professional x64
Ran by Kevin on 26.10.2013 at 11:10:47,36
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422392214}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422392214}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{FBA8EECD-A4CF-465F-9D12-10705F8D4069}
~~~ Files
Successfully deleted: [File] C:\Windows\Tasks\registrybooster.job
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Kevin\appdata\local\apn"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.10.2013 at 11:21:58,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.26.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16521 Kevin :: KEVIN-PC [Administrator] Schutz: Aktiviert 26.10.2013 11:14:34 mbam-log-2013-10-26 (11-14-34).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 198310 Laufzeit: 5 Minute(n), 35 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 1 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.SProtect.A) -> Bösartig: (c:\progra~2\psupport\psupport.dll) Gut: () -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 1 C:\ProgramData\ShoppingChip (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 8 C:\Program Files (x86)\PSupport\psupport.dll (PUP.Optional.SProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\ShoppingChip\VzzwnrXy.exe (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Kevin\AppData\Local\Temp\18be6784_.exe (PUP.Optional.Searchprotect) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Kevin\AppData\Local\Temp\294823_.exe (PUP.Optional.BundleLoader.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Kevin\AppData\Local\Temp\awh1F73.tmp (PUP.Optional.Amonetize) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Kevin\AppData\Local\Temp\BobyLyrics_1060-1090_v122.exe (PUP.Optional.Adlyrics) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Kevin\AppData\Local\Temp\toolbar1484599.exe (PUP.Optional.InstallMonetizer) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\ShoppingChip\VzzwnrXy.dat (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Professional x64
Ran by Kevin on 26.10.2013 at 11:10:47,36
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422392214}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422392214}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{FBA8EECD-A4CF-465F-9D12-10705F8D4069}
~~~ Files
Successfully deleted: [File] C:\Windows\Tasks\registrybooster.job
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Kevin\appdata\local\apn"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.10.2013 at 11:21:58,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Das Ergebnis kommt später da der Suchlauf jetzt schon 5 Stunden und 30 Minuten dauert... Wie weiss ich ob der Trojaner nachher weg ist? Vielen Dank im vorraus  |
|
26.10.2013, 17:26
| #2 |
| /// the machine /// TB-Ausbilder    | Win 7.. C:\ProgramData\eSafe eGdpSvc.exe in C:\ProgramData\eSafe hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
26.10.2013, 18:05
| #3 |
| | Win 7.. C:\ProgramData\eSafe eGdpSvc.exe in C:\ProgramData\eSafe Hallo,
__________________hier die Daten  FRST: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2013 01 Ran by Kevin (administrator) on KEVIN-PC on 26-10-2013 18:32:39 Running from C:\Users\Kevin\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe (ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Kevin\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2816808 2012-03-28] (Synaptics Incorporated) HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2012-01-04] (Intel(R) Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [RegistryBooster] - C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe [67968 2012-03-02] (Uniblue Systems Limited) HKCU\...\Run: [Google Update] - C:\Users\Kevin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-10-26] (Google Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1655568 2013-07-19] (Simply Super Software) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA7EC6BBE5B17CE01 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\Users\Kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 CHR Extension: (Gmail) - C:\Users\Kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2012-01-04] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-04-14] (Avira Operations GmbH & Co. KG) R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [43616 2012-04-03] (IVT Corporation.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-26 18:32 - 2013-10-26 18:32 - 01956160 _____ (Farbar) C:\Users\Kevin\Downloads\FRST64.exe 2013-10-26 18:32 - 2013-10-26 18:32 - 00000000 ____D C:\FRST 2013-10-26 18:30 - 2013-10-26 18:30 - 01089001 _____ (Farbar) C:\Users\Kevin\Downloads\FRST.exe 2013-10-26 16:59 - 2013-10-26 16:59 - 103108672 _____ C:\Windows\SysWOW64\퓫„ 2013-10-26 12:01 - 2013-10-26 12:01 - 00000000 ____D C:\Program Files (x86)\ESET 2013-10-26 12:00 - 2013-10-26 12:00 - 02347384 _____ (ESET) C:\Users\Kevin\Downloads\esetsmartinstaller_deu.exe 2013-10-26 11:59 - 2013-10-26 11:59 - 00002368 _____ C:\Users\Kevin\Desktop\Google Chrome.lnk 2013-10-26 11:59 - 2013-10-26 11:59 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-10-26 11:56 - 2013-10-26 18:06 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000UA.job 2013-10-26 11:56 - 2013-10-26 12:06 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000Core.job 2013-10-26 11:56 - 2013-10-26 12:02 - 00004094 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000UA 2013-10-26 11:56 - 2013-10-26 12:01 - 00003698 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000Core 2013-10-26 11:21 - 2013-10-26 11:21 - 00001219 _____ C:\Users\Kevin\Desktop\JRT.txt 2013-10-26 11:12 - 2013-10-26 11:12 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\Malwarebytes 2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-26 11:12 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\Windows\ERUNT 2013-10-26 11:04 - 2013-10-26 11:06 - 00000000 ____D C:\AdwCleaner 2013-10-25 23:36 - 2013-10-25 23:36 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\TrojanHunter 2013-10-25 23:10 - 2013-10-25 23:17 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5 2013-10-25 23:10 - 2013-10-25 23:10 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll 2013-10-25 23:10 - 2013-10-25 23:10 - 00001089 _____ C:\Users\Kevin\Desktop\TrojanHunter.lnk 2013-10-25 23:10 - 2013-10-25 23:10 - 00000000 ____D C:\ProgramData\TrojanHunter 2013-10-25 23:10 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20131025-231035.backup 2013-10-25 23:05 - 2013-10-25 23:05 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-10-25 23:04 - 2013-10-25 23:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-10-25 23:04 - 2013-10-25 23:04 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2013-10-25 23:04 - 2013-10-25 23:04 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-10-25 23:04 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2013-10-25 21:36 - 2013-10-25 21:36 - 00001143 _____ C:\Users\Public\Desktop\Trojan Remover.lnk 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\Users\Kevin\Documents\Simply Super Software 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\Simply Super Software 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\ProgramData\Simply Super Software 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\Program Files (x86)\Trojan Remover 2013-10-25 18:56 - 2013-10-25 18:56 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-10-25 18:47 - 2013-10-26 11:21 - 00000000 ____D C:\Program Files (x86)\PSupport 2013-10-17 14:14 - 2013-10-25 18:56 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-10-17 14:14 - 2013-10-17 14:14 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-10-17 14:14 - 2013-10-17 14:14 - 00000000 ____D C:\ProgramData\McAfee 2013-10-17 14:13 - 2013-10-17 14:13 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-10-17 14:13 - 2013-10-17 14:13 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-10-17 14:12 - 2013-10-17 14:13 - 00000000 ____D C:\ProgramData\Adobe 2013-10-17 14:08 - 2013-10-17 14:20 - 00000000 ____D C:\Users\Kevin\AppData\Local\Adobe 2013-10-17 14:04 - 2013-10-17 14:20 - 00000000 ____D C:\Users\Kevin\Desktop\Bewerbungen!!!!!!!!!!!!!! 2013-10-17 12:29 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-17 12:29 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-17 12:29 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-17 12:29 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-17 12:29 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-17 12:29 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-17 12:29 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-17 12:29 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-17 12:29 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-17 12:29 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-17 12:29 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-17 12:29 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-17 12:29 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-17 12:29 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-17 12:29 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-17 12:29 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-17 12:29 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-17 12:29 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-17 12:29 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-17 12:29 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-17 12:29 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-17 12:29 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-17 12:29 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-17 12:29 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-17 12:29 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-17 12:29 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-17 12:28 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-17 12:28 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-17 12:28 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-17 12:28 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-17 12:28 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-17 12:28 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-17 12:28 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-17 12:28 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-17 12:28 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-17 12:28 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-17 12:28 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-17 12:28 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-17 12:28 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-17 12:28 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-17 12:28 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-17 12:28 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-17 12:28 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-17 12:28 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-17 12:28 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-17 12:28 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ==================== One Month Modified Files and Folders ======= 2013-10-26 18:32 - 2013-10-26 18:32 - 01956160 _____ (Farbar) C:\Users\Kevin\Downloads\FRST64.exe 2013-10-26 18:32 - 2013-10-26 18:32 - 00000000 ____D C:\FRST 2013-10-26 18:30 - 2013-10-26 18:30 - 01089001 _____ (Farbar) C:\Users\Kevin\Downloads\FRST.exe 2013-10-26 18:26 - 2013-03-02 16:57 - 01794672 _____ C:\Windows\WindowsUpdate.log 2013-10-26 18:17 - 2012-03-28 15:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-26 18:06 - 2013-10-26 11:56 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000UA.job 2013-10-26 16:59 - 2013-10-26 16:59 - 103108672 _____ C:\Windows\SysWOW64\퓫„ 2013-10-26 12:06 - 2013-10-26 11:56 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000Core.job 2013-10-26 12:02 - 2013-10-26 11:56 - 00004094 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000UA 2013-10-26 12:01 - 2013-10-26 12:01 - 00000000 ____D C:\Program Files (x86)\ESET 2013-10-26 12:01 - 2013-10-26 11:56 - 00003698 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000Core 2013-10-26 12:00 - 2013-10-26 12:00 - 02347384 _____ (ESET) C:\Users\Kevin\Downloads\esetsmartinstaller_deu.exe 2013-10-26 11:59 - 2013-10-26 11:59 - 00002368 _____ C:\Users\Kevin\Desktop\Google Chrome.lnk 2013-10-26 11:59 - 2013-10-26 11:59 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-10-26 11:58 - 2012-03-28 19:25 - 00000000 ____D C:\Users\Kevin\AppData\Local\Google 2013-10-26 11:34 - 2013-03-03 01:16 - 00654166 _____ C:\Windows\system32\perfh007.dat 2013-10-26 11:34 - 2013-03-03 01:16 - 00130006 _____ C:\Windows\system32\perfc007.dat 2013-10-26 11:34 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-26 11:21 - 2013-10-26 11:21 - 00001219 _____ C:\Users\Kevin\Desktop\JRT.txt 2013-10-26 11:21 - 2013-10-25 18:47 - 00000000 ____D C:\Program Files (x86)\PSupport 2013-10-26 11:16 - 2009-07-14 06:45 - 00025680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-26 11:16 - 2009-07-14 06:45 - 00025680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-26 11:12 - 2013-10-26 11:12 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\Malwarebytes 2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-10-26 11:12 - 2013-10-26 11:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-10-26 11:10 - 2013-10-26 11:10 - 00000000 ____D C:\Windows\ERUNT 2013-10-26 11:08 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-26 11:08 - 2009-07-14 06:51 - 01009297 _____ C:\Windows\setupact.log 2013-10-26 11:06 - 2013-10-26 11:04 - 00000000 ____D C:\AdwCleaner 2013-10-26 11:06 - 2012-03-27 00:19 - 00000000 ____D C:\ProgramData\Uniblue 2013-10-25 23:36 - 2013-10-25 23:36 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\TrojanHunter 2013-10-25 23:17 - 2013-10-25 23:10 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5 2013-10-25 23:17 - 2012-03-26 21:14 - 00000000 ____D C:\Users\Kevin\AppData\Local\VirtualStore 2013-10-25 23:16 - 2013-10-25 23:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-10-25 23:10 - 2013-10-25 23:10 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll 2013-10-25 23:10 - 2013-10-25 23:10 - 00001089 _____ C:\Users\Kevin\Desktop\TrojanHunter.lnk 2013-10-25 23:10 - 2013-10-25 23:10 - 00000000 ____D C:\ProgramData\TrojanHunter 2013-10-25 23:05 - 2013-10-25 23:05 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-10-25 23:04 - 2013-10-25 23:04 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2013-10-25 23:04 - 2013-10-25 23:04 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-10-25 21:53 - 2010-11-21 05:47 - 00017044 _____ C:\Windows\PFRO.log 2013-10-25 21:53 - 2009-07-14 06:45 - 00288928 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-25 21:36 - 2013-10-25 21:36 - 00001143 _____ C:\Users\Public\Desktop\Trojan Remover.lnk 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\Users\Kevin\Documents\Simply Super Software 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\Users\Kevin\AppData\Roaming\Simply Super Software 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\ProgramData\Simply Super Software 2013-10-25 21:36 - 2013-10-25 21:36 - 00000000 ____D C:\Program Files (x86)\Trojan Remover 2013-10-25 19:29 - 2012-09-14 19:12 - 00001268 _____ C:\Users\Kevin\Desktop\Revo Uninstaller.lnk 2013-10-25 18:56 - 2013-10-25 18:56 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-10-25 18:56 - 2013-10-17 14:14 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-10-25 18:40 - 2013-06-21 11:39 - 00035294 _____ C:\Windows\IE10_main.log 2013-10-25 18:34 - 2013-08-17 19:59 - 00000000 ____D C:\Windows\system32\MRT 2013-10-25 18:33 - 2013-03-07 08:34 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-17 14:20 - 2013-10-17 14:08 - 00000000 ____D C:\Users\Kevin\AppData\Local\Adobe 2013-10-17 14:20 - 2013-10-17 14:04 - 00000000 ____D C:\Users\Kevin\Desktop\Bewerbungen!!!!!!!!!!!!!! 2013-10-17 14:18 - 2013-04-01 22:03 - 00000400 _____ C:\Windows\ODBC.INI 2013-10-17 14:18 - 2009-07-14 04:34 - 00000499 _____ C:\Windows\win.ini 2013-10-17 14:14 - 2013-10-17 14:14 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-10-17 14:14 - 2013-10-17 14:14 - 00000000 ____D C:\ProgramData\McAfee 2013-10-17 14:13 - 2013-10-17 14:13 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-10-17 14:13 - 2013-10-17 14:13 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-10-17 14:13 - 2013-10-17 14:12 - 00000000 ____D C:\ProgramData\Adobe 2013-10-17 12:19 - 2012-03-28 15:05 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-17 12:18 - 2012-03-28 15:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-17 12:18 - 2012-03-28 15:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\Kevin\AppData\Local\Temp\AskSLib.dll C:\Users\Kevin\AppData\Local\Temp\htmlayout.dll C:\Users\Kevin\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Kevin\AppData\Local\Temp\Quarantine.exe C:\Users\Kevin\AppData\Local\Temp\toolbar1703858.exe C:\Users\Kevin\AppData\Local\Temp\toolbar1815290.exe C:\Users\Kevin\AppData\Local\Temp\toolbar1820937.exe C:\Users\Kevin\AppData\Local\Temp\uninstall2648444.exe C:\Users\Kevin\AppData\Local\Temp\uninstall2669130.exe C:\Users\Kevin\AppData\Local\Temp\VSUSetup.exe C:\Users\Kevin\AppData\Local\Temp\_unps.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-09 21:56 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2013 01
Ran by Kevin at 2013-10-26 18:33:53
Running from C:\Users\Kevin\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Bonjour (Version: 3.0.0.10)
Die Siedler 7 (x32 Version: 1.12.1396)
Die Sims™ 3 (x32 Version: 1.38.151)
Die Sims™ 3 Einfach tierisch (x32 Version: 10.0.96)
Die Sims™ 3 Gib Gas-Accessoires (x32 Version: 5.8.1)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
EA SPORTS Game Face Browser Plugin 1.5.3.0 (HKCU Version: 1.5.3.0)
ESET Online Scanner v3 (x32)
FUSSBALL MANAGER 13 (x32 Version: 1.0.4.0)
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (HKCU Version: 30.0.1599.101)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.03.1000)
iTunes (Version: 11.0.5.5)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
McAfee Security Scan Plus (Version: 3.8.130.8)
mediAvatar iPod Transfer (x32 Version: 5.4.1.20120803)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office Standard Edition 2003 (x32 Version: 11.0.5614.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Origin (x32 Version: 9.3.2.2730)
Revo Uninstaller 1.95 (x32 Version: 1.95)
Spybot - Search & Destroy (x32 Version: 2.2.25)
Synaptics Pointing Device Driver (Version: 15.3.17.0)
Trojan Remover 6.8.8 (x32 Version: 6.8.8)
TrojanHunter 5.5 (x32 Version: 5.5)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Uniblue RegistryBooster (x32 Version: 6.0.10.8)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
==================== Restore Points =========================
04-09-2013 08:28:39 Windows Update
06-09-2013 11:24:55 Windows Update
06-09-2013 16:42:28 Windows Update
06-09-2013 17:50:46 Windows Update
09-09-2013 21:32:58 Windows Update
11-09-2013 20:04:20 Gerätetreiber-Paketinstallation: Microsoft Netzwerkadapter
11-09-2013 21:12:44 Revo Uninstaller's restore point - EverestPoker.com
13-09-2013 14:30:17 Windows Update
14-09-2013 08:42:52 Windows Update
20-09-2013 08:44:17 Windows Update
20-09-2013 20:06:00 Windows Update
30-09-2013 17:11:37 Windows Update
03-10-2013 18:48:34 Windows Update
17-10-2013 10:13:05 Windows Update
25-10-2013 16:27:00 Windows Update
25-10-2013 17:00:15 Revo Uninstaller's restore point - Google Chrome
25-10-2013 17:05:52 Revo Uninstaller's restore point - ExpressFiles
25-10-2013 17:09:07 Revo Uninstaller's restore point - PokerStars.eu
25-10-2013 17:11:42 Revo Uninstaller's restore point - Software Version Updater
25-10-2013 17:17:38 Revo Uninstaller's restore point - ShoppingChip
25-10-2013 17:25:24 Revo Uninstaller's restore point - Product Support 1.74.b1377
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {22F5A1AC-96EA-4B74-BACB-4C80338E5691} - \AmiUpdXp No Task File
Task: {2FAC3FDB-493E-49B5-B74A-0B460F8563CC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000Core => C:\Users\Kevin\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-26] (Google Inc.)
Task: {3F2DCB98-4D5E-459E-A94D-CC76D5546258} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {410A5167-41CB-43D0-B21A-087AFA33E9E6} - \DriverScanner No Task File
Task: {5A25A3C1-348F-4AA4-B839-07121895B37B} - \BobyLyrics-15-codedownloader No Task File
Task: {5FEF54FD-ED2C-46CF-8391-173C2EA0EB6E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000UA => C:\Users\Kevin\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-26] (Google Inc.)
Task: {7185D0B2-8F73-4129-A18D-ACF8605BB1D1} - \BobyLyrics-15-chromeinstaller No Task File
Task: {7ADF3587-045F-4181-9344-018A3A5AE3E2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {7E87C611-6552-49E9-BFC1-B4B759337304} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-17] (Adobe Systems Incorporated)
Task: {8FBA0F66-BC22-4F88-BDBC-56FC702CAD6F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {93A31BDA-A806-4010-87CA-A29EEB731252} - System32\Tasks\{E4CFDFFE-610F-430C-A096-1FB31C437712} => C:\Program Files (x86)\Origin Games\FIFA Manager 13\Manager13.exe [2013-05-22] (Electronic Arts Inc.)
Task: {BEFAF6D1-4FDB-4431-897A-824B2AC06A2A} - \BobyLyrics-15-updater No Task File
Task: {C8508B36-C6AC-4E8D-8520-74646A7D59D2} - \BobyLyrics-15-enabler No Task File
Task: {CBED5A63-B9BC-4E37-8BD0-1997F8E1DA20} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {DD49F8A9-B71B-4377-ABA7-A6729B6F0D98} - \Express FilesUpdate No Task File
Task: {E706A481-4482-42A9-ACE0-611FAD103829} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000Core.job => C:\Users\Kevin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1108531400-1246947476-2128160406-1000UA.job => C:\Users\Kevin\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-01-04 11:28 - 2012-01-04 11:28 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2012-02-14 17:53 - 2012-02-14 17:53 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-01-04 11:28 - 2012-01-04 11:28 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2013-03-02 17:34 - 2013-03-02 17:19 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-25 23:04 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-10-25 23:04 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-10-25 23:04 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-10-25 23:04 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-10-25 23:04 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-10-26 11:59 - 2013-10-09 02:01 - 00698832 _____ () C:\Users\Kevin\AppData\Local\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
2013-10-26 11:59 - 2013-10-09 02:01 - 00099792 _____ () C:\Users\Kevin\AppData\Local\Google\Chrome\Application\30.0.1599.101\libegl.dll
2013-10-26 11:59 - 2013-10-09 02:02 - 04055504 _____ () C:\Users\Kevin\AppData\Local\Google\Chrome\Application\30.0.1599.101\pdf.dll
2013-10-26 11:59 - 2013-10-09 02:02 - 00415184 _____ () C:\Users\Kevin\AppData\Local\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll
2013-10-26 11:59 - 2013-10-09 02:01 - 01604560 _____ () C:\Users\Kevin\AppData\Local\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
2013-10-26 11:59 - 2013-10-09 02:02 - 13584336 _____ () C:\Users\Kevin\AppData\Local\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Standard-VGA-Grafikkarte
Description: Standard-VGA-Grafikkarte
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardgrafikkartentypen)
Service: vga
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 63%
Total physical RAM: 4011.86 MB
Available physical RAM: 1465.95 MB
Total Pagefile: 8021.9 MB
Available Pagefile: 5153.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:448.77 GB) (Free:337.49 GB) NTFS
Drive e: () (Removable) (Total:3.74 GB) (Free:3.57 GB) FAT32
Drive f: () (Removable) (Total:3.66 GB) (Free:3.66 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 88706074)
Partition 1: (Not Active) - (Size=17 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)
========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 6E652072)
No partition Table on disk 2.
==================== End Of Log ============================
Der Eset Scanner ist jetzt fertig und zeigt Keine Bedrohungen an. Geprüfte Dateien: 357805 Infizierte Dateien: 0 Wiederhergestellte Dateien: 0 Gesamtdauer der Prüfung: 06:39:45 Prüfstatus: Abgeschlossen Kann ich die Anwendung nach dem Schließen deinstallieren? Der Eset Scanner ist fertig und hat keine Bedrohungen gefunden! |
|
27.10.2013, 07:34
| #4 |
| /// the machine /// TB-Ausbilder | Win 7.. C:\ProgramData\eSafe eGdpSvc.exe in C:\ProgramData\eSafe Ja den kannste deinstallieren. Sieht gut aus, noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win 7.. C:\ProgramData\eSafe eGdpSvc.exe in C:\ProgramData\eSafe |
| .dll, administrator, appdatalow, autostart, desktop, download, gelöscht, internet, internet explorer, microsoft, programme, pup.optional.adlyrics, pup.optional.amonetize, pup.optional.bundleloader.a, pup.optional.installmonetizer, pup.optional.multiplug.a, pup.optional.searchprotect, pup.optional.sprotect.a, registrierungsdatenbank, software, surfen, system32, trojaner, windows |
Linear-Darstellung
