![]() |
|
Log-Analyse und Auswertung: Windows startet-Desktop und Taskleiste leerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
![]() | ![]() Windows startet-Desktop und Taskleiste leer Schritt 3 ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=45769097e25e5745ab1c8c3a4b2ea801 # engine=15736 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-11-03 07:24:01 # local_time=2013-11-03 08:24:01 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.0.6001 NT Service Pack 1 # compatibility_mode=5892 16776574 100 100 7863098 221039369 0 0 # scanned=111800 # found=0 # cleaned=0 # scan_time=5652 FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013 Ran by MK (administrator) on MK-PC on 03-11-2013 20:34:12 Running from C:\Users\MK\Desktop Microsoft® Windows Vista™ Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 7 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Facebook Inc.) C:\Users\MK\AppData\Local\Facebook\Update\FacebookUpdate.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Zhorn Software) C:\Program Files\Stickies\stickies.exe (Realtek Semiconductor Corp.) C:\Users\MK\AppData\Local\Temp\RtkBtMnt.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\system32\wuauclt.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2009-01-27] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6957600 2009-03-10] (Realtek Semiconductor) HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\SkyTel.exe [1833504 2009-03-10] (Realtek Semiconductor Corp.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Facebook Update] - C:\Users\MK\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.) HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.) HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation) HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter Startup: C:\Users\MK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\MK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk ShortcutTarget: Stickies.lnk -> C:\Program Files\Stickies\stickies.exe (Zhorn Software) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194 FireFox: ======== FF ProfilePath: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default FF Homepage: Google FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\MK\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\cafeuni.xml FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\englische-ergebnisse.xml FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\gmx-suche.xml FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\lastminute.xml FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\webde-suche.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: toolbar - C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\Extensions\toolbar@web.de.xpi FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ========================== Services (Whitelisted) ================= R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) S2 EvtEng; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [x] S2 RegSrvc; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [x] ==================== Drivers (Whitelisted) ==================== R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [153952 2009-02-20] (Realtek Semiconductor Corp.) S3 U6000ALL; C:\Windows\System32\DRIVERS\U6000ALL.sys [230784 2007-07-13] () S0 51817044; system32\drivers\82296768.sys [x] U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\Users\MK\AppData\Local\Temp\catchme.sys [x] S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x] S0 dvymu; System32\drivers\vkiekgwf.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S2 SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-03 18:42 - 2013-11-03 18:47 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu(1).exe 2013-11-03 18:27 - 2013-11-03 18:27 - 00000816 _____ C:\Users\MK\Desktop\Fixlist.txt 2013-11-03 18:23 - 2013-11-03 18:23 - 00023563 _____ C:\Users\MK\Downloads\FRST.txt 2013-11-03 16:52 - 2013-11-03 16:52 - 00023009 _____ C:\Users\MK\Desktop\2. FRST.txt 2013-11-03 16:48 - 2013-11-03 16:48 - 01089445 _____ (Farbar) C:\Users\MK\Downloads\FRST(1).exe 2013-11-03 16:38 - 2013-11-03 16:38 - 00009652 _____ C:\ComboFix.txt 2013-11-03 16:27 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-11-03 16:27 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-11-03 16:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-11-03 16:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-11-03 16:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-11-03 16:27 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-11-03 16:27 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-11-03 16:27 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-11-03 16:15 - 2013-11-03 16:38 - 00000000 ____D C:\Qoobox 2013-11-03 16:15 - 2013-11-03 16:37 - 00000000 ____D C:\Windows\erdnt 2013-11-03 16:10 - 2013-11-03 16:12 - 05143677 ____R (Swearware) C:\Users\MK\Desktop\ComboFix.exe 2013-11-03 16:09 - 2013-11-03 16:09 - 00034371 _____ C:\Users\MK\Desktop\AdwCleaner[R0].txt 2013-11-03 16:09 - 2013-11-03 16:09 - 00034307 _____ C:\Users\MK\Desktop\AdwCleaner[S0].txt 2013-11-03 15:42 - 2013-11-03 18:00 - 00000000 ____D C:\AdwCleaner 2013-11-03 15:41 - 2013-11-03 15:41 - 01060070 _____ C:\Users\MK\Desktop\adwcleaner.exe 2013-11-03 13:41 - 2013-11-03 13:41 - 00026188 _____ C:\Users\MK\Desktop\Gmer.log 2013-11-03 11:31 - 2013-11-03 11:31 - 00377856 _____ C:\Users\MK\Downloads\gmer_2.1.19163.exe 2013-11-03 11:30 - 2013-11-03 11:30 - 00017886 _____ C:\Users\MK\Desktop\Addition.txt 2013-11-03 11:24 - 2013-11-03 11:26 - 00017886 _____ C:\Users\MK\Downloads\Addition.txt 2013-11-03 11:23 - 2013-11-03 11:23 - 01089445 _____ (Farbar) C:\Users\MK\Desktop\FRST.exe 2013-11-03 11:23 - 2013-11-03 11:23 - 00000000 ____D C:\FRST 2013-11-03 11:21 - 2013-11-03 11:21 - 00000000 _____ C:\Users\MK\defogger_reenable 2013-11-03 11:20 - 2013-11-03 11:20 - 00050477 _____ C:\Users\MK\Downloads\Defogger.exe 2013-11-03 10:52 - 2013-11-03 10:52 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Users\MK\AppData\Roaming\Malwarebytes 2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-03 10:52 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-03 10:50 - 2013-11-03 10:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\MK\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-03 10:24 - 2013-11-03 10:24 - 00000000 ____D C:\Program Files\ESET 2013-11-03 10:23 - 2013-11-03 10:24 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu.exe 2013-11-03 10:10 - 2013-11-03 10:10 - 00000000 ____D C:\TDSSKiller_Quarantine 2013-11-03 10:07 - 2013-11-03 10:08 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\MK\Downloads\tdsskiller.exe 2013-11-02 18:29 - 2013-11-02 18:29 - 104684788 _____ C:\Windows\system32\③縕ᰤŽ 2013-11-01 13:47 - 2013-11-01 13:47 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(5).exe 2013-11-01 13:36 - 2013-11-01 13:36 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(4).exe 2013-11-01 13:35 - 2013-11-01 13:35 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(3).exe 2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Users\MK\AppData\Local\Google 2013-10-27 16:22 - 2013-10-27 16:22 - 103334033 _____ C:\Windows\system32\犳᭄* 2013-10-15 17:56 - 2013-10-15 17:56 - 101148298 _____ C:\Windows\system32\몘鮹᭄“ 2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\Oracle 2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\Program Files\Common Files\Java 2013-10-15 16:46 - 2013-10-15 16:45 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-15 16:45 - 2013-10-15 16:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-15 16:45 - 2013-10-15 16:45 - 00000000 ____D C:\Program Files\Java 2013-10-15 16:41 - 2013-10-15 16:41 - 00913832 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(2).exe 2013-10-06 15:14 - 2013-10-06 15:17 - 00000000 ____D C:\Users\MK\Desktop\Islam. Lit 2013-10-05 10:41 - 2013-10-05 10:41 - 00000000 ____D C:\ProgramData\䇈ƽ㹸ƽÄƽ㋘ƽ8520-1533-40C5-AD09-953C574F14BCÄƽ㞨ƽ 2013-10-04 22:03 - 2013-10-04 22:03 - 00000000 ____D C:\Users\MK\AppData\Local\BeamriseUninstall ==================== One Month Modified Files and Folders ======= 2013-11-03 20:28 - 2008-01-21 02:35 - 01711480 _____ C:\Windows\WindowsUpdate.log 2013-11-03 18:47 - 2013-11-03 18:42 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu(1).exe 2013-11-03 18:40 - 2008-01-21 08:16 - 01445310 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-03 18:36 - 2008-01-21 03:47 - 00216432 _____ C:\Windows\PFRO.log 2013-11-03 18:36 - 2006-11-02 13:47 - 00004192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-03 18:36 - 2006-11-02 13:47 - 00004192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-03 18:27 - 2013-11-03 18:27 - 00000816 _____ C:\Users\MK\Desktop\Fixlist.txt 2013-11-03 18:23 - 2013-11-03 18:23 - 00023563 _____ C:\Users\MK\Downloads\FRST.txt 2013-11-03 18:00 - 2013-11-03 15:42 - 00000000 ____D C:\AdwCleaner 2013-11-03 17:50 - 2011-09-30 15:44 - 00001356 _____ C:\Users\MK\AppData\Local\d3d9caps.dat 2013-11-03 16:52 - 2013-11-03 16:52 - 00023009 _____ C:\Users\MK\Desktop\2. FRST.txt 2013-11-03 16:48 - 2013-11-03 16:48 - 01089445 _____ (Farbar) C:\Users\MK\Downloads\FRST(1).exe 2013-11-03 16:38 - 2013-11-03 16:38 - 00009652 _____ C:\ComboFix.txt 2013-11-03 16:38 - 2013-11-03 16:15 - 00000000 ____D C:\Qoobox 2013-11-03 16:38 - 2006-11-02 12:18 - 00000000 __RHD C:\Users\Default 2013-11-03 16:38 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public 2013-11-03 16:37 - 2013-11-03 16:15 - 00000000 ____D C:\Windows\erdnt 2013-11-03 16:36 - 2006-11-02 11:23 - 00000215 _____ C:\Windows\system.ini 2013-11-03 16:35 - 2011-09-30 15:44 - 00000000 ____D C:\Users\MK 2013-11-03 16:22 - 2013-08-06 05:53 - 00000000 ____D C:\ProgramData\Avira 2013-11-03 16:12 - 2013-11-03 16:10 - 05143677 ____R (Swearware) C:\Users\MK\Desktop\ComboFix.exe 2013-11-03 16:09 - 2013-11-03 16:09 - 00034371 _____ C:\Users\MK\Desktop\AdwCleaner[R0].txt 2013-11-03 16:09 - 2013-11-03 16:09 - 00034307 _____ C:\Users\MK\Desktop\AdwCleaner[S0].txt 2013-11-03 15:46 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Resources 2013-11-03 15:44 - 2013-01-15 09:29 - 00000000 ____D C:\ProgramData\Uniblue 2013-11-03 15:41 - 2013-11-03 15:41 - 01060070 _____ C:\Users\MK\Desktop\adwcleaner.exe 2013-11-03 13:41 - 2013-11-03 13:41 - 00026188 _____ C:\Users\MK\Desktop\Gmer.log 2013-11-03 11:31 - 2013-11-03 11:31 - 00377856 _____ C:\Users\MK\Downloads\gmer_2.1.19163.exe 2013-11-03 11:30 - 2013-11-03 11:30 - 00017886 _____ C:\Users\MK\Desktop\Addition.txt 2013-11-03 11:26 - 2013-11-03 11:24 - 00017886 _____ C:\Users\MK\Downloads\Addition.txt 2013-11-03 11:23 - 2013-11-03 11:23 - 01089445 _____ (Farbar) C:\Users\MK\Desktop\FRST.exe 2013-11-03 11:23 - 2013-11-03 11:23 - 00000000 ____D C:\FRST 2013-11-03 11:21 - 2013-11-03 11:21 - 00000000 _____ C:\Users\MK\defogger_reenable 2013-11-03 11:21 - 2011-10-13 09:30 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-11-03 11:20 - 2013-11-03 11:20 - 00050477 _____ C:\Users\MK\Downloads\Defogger.exe 2013-11-03 10:52 - 2013-11-03 10:52 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Users\MK\AppData\Roaming\Malwarebytes 2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-03 10:51 - 2013-11-03 10:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\MK\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-03 10:24 - 2013-11-03 10:24 - 00000000 ____D C:\Program Files\ESET 2013-11-03 10:24 - 2013-11-03 10:23 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu.exe 2013-11-03 10:10 - 2013-11-03 10:10 - 00000000 ____D C:\TDSSKiller_Quarantine 2013-11-03 10:08 - 2013-11-03 10:07 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\MK\Downloads\tdsskiller.exe 2013-11-02 18:29 - 2013-11-02 18:29 - 104684788 _____ C:\Windows\system32\③縕ᰤŽ 2013-11-01 20:12 - 2012-08-08 13:05 - 00000000 ____D C:\Users\MK\AppData\Roaming\Skype 2013-11-01 19:45 - 2011-10-06 10:39 - 00032768 _____ C:\Users\MK\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-11-01 19:40 - 2012-10-31 10:41 - 00000000 ____D C:\Users\MK\AppData\Roaming\stickies 2013-11-01 19:14 - 2011-12-13 09:27 - 00000000 ____D C:\Users\MK\AppData\Roaming\vlc 2013-11-01 14:40 - 2012-05-02 20:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-11-01 14:40 - 2012-05-02 20:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-01 14:40 - 2011-10-13 20:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-11-01 13:47 - 2013-11-01 13:47 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(5).exe 2013-11-01 13:36 - 2013-11-01 13:36 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(4).exe 2013-11-01 13:35 - 2013-11-01 13:35 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(3).exe 2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Users\MK\AppData\Local\Google 2013-10-30 20:23 - 2012-01-04 09:58 - 00000000 ____D C:\Users\MK\Desktop\Gesundheit 2013-10-27 16:22 - 2013-10-27 16:22 - 103334033 _____ C:\Windows\system32\犳᭄* 2013-10-20 21:36 - 2011-10-26 19:15 - 00000000 ____D C:\Users\MK\Desktop\Offizielles 2013-10-20 20:33 - 2011-10-13 20:16 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-10-15 17:56 - 2013-10-15 17:56 - 101148298 _____ C:\Windows\system32\몘鮹᭄“ 2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\Oracle 2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\Program Files\Common Files\Java 2013-10-15 16:45 - 2013-10-15 16:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-10-15 16:45 - 2013-10-15 16:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2013-10-15 16:45 - 2013-10-15 16:45 - 00000000 ____D C:\Program Files\Java 2013-10-15 16:45 - 2013-03-25 22:33 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-10-15 16:45 - 2011-10-14 05:09 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-10-15 16:41 - 2013-10-15 16:41 - 00913832 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(2).exe 2013-10-09 02:05 - 2013-04-24 10:27 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-06 15:20 - 2012-08-09 00:12 - 00000000 ____D C:\Users\MK\Desktop\Uni OS 2013-10-06 15:17 - 2013-10-06 15:14 - 00000000 ____D C:\Users\MK\Desktop\Islam. Lit 2013-10-06 15:09 - 2012-04-27 18:41 - 00000000 ____D C:\Users\MK\Desktop\Sufismus 2013-10-05 10:41 - 2013-10-05 10:41 - 00000000 ____D C:\ProgramData\䇈ƽ㹸ƽÄƽ㋘ƽ8520-1533-40C5-AD09-953C574F14BCÄƽ㞨ƽ 2013-10-04 22:03 - 2013-10-04 22:03 - 00000000 ____D C:\Users\MK\AppData\Local\BeamriseUninstall Some content of TEMP: ==================== C:\Users\MK\AppData\Local\temp\RtkBtMnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-03 18:46 ==================== End Of Log ============================ --- --- --- |
![]() |