Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Softwareupdater.UI.exe eingefangen

Softwareupdater.UI.exe eingefangen


Plagegeister aller Art und deren Bekämpfung: Softwareupdater.UI.exe eingefangen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 15.11.2013, 18:45   #1
holgerbaer
 
Softwareupdater.UI.exe eingefangen - Standard

Softwareupdater.UI.exe eingefangen


hier das erste Log, Rest folgt morgen

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.14.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16736
Holger :: HOLGER-PC [Administrator]

14.11.2013 23:01:35
mbam-log-2013-11-14 (23-01-35).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 331552
Laufzeit: 7 Minute(n), 7 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
So, weiter geht's:

Code:
ATTFilter
# AdwCleaner v3.012 - Bericht erstellt am 15/11/2013 um 18:19:34
# Updated 11/11/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Holger - HOLGER-PC
# Gestartet von : C:\Users\Holger_2\Desktop\From the INet\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : SystemStoreService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
Datei Gelöscht : C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Schlüssel Gelöscht : HKCU\Software\Conduit

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Mozilla Firefox v25.0 (de)

[ Datei : C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\zbxkzxp7.default\prefs.js ]


[ Datei : C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.cookieculler.pcookie53", "www.qipu.de;_ym_visorc;/");
Zeile gelöscht : user_pref("extensions.cookieculler.pcookie54", "www.qipu.de;OAID;/");
Zeile gelöscht : user_pref("extensions.enabledAddons", "alarm%40gutscheinsammler.de:2.0.3,amznUWL2%40amazon.com:1.10,DeviceDetection%40logitech.com:1.24.0.9,facebookBlocker%40webgraph.com:1.2.2,toolbar-ff%40payback.de[...]
Zeile gelöscht : user_pref("extensions.qipu.exceptions", "{\"vodafone.de\":\"/\",\"myprinting.de\":\"/\",\"goertz.de\":\"/\",\"klarmobil.de\":\"/\",\"meevio.de\":\"/\",\"zeitschriften-abo.de\":\"/\",\"barclaycard.de\"[...]
Zeile gelöscht : user_pref("extensions.qipu.last_alert_version", "0");
Zeile gelöscht : user_pref("extensions.qipu.last_full_timestamp", "2013-11-14 23:08:08");
Zeile gelöscht : user_pref("extensions.qipu.lastdownload", "Fri Nov 15 2013 18:16:04 GMT+0100");
Zeile gelöscht : user_pref("extensions.qipu.rates_expired_in", "1800");
Zeile gelöscht : user_pref("extensions.qipu.shop_paths", "{\"www.dell.com\":{\"/de/p\":\"89\",\"/de/unternehmen\":\"93\"},\"dell.com\":{\"/de/p\":\"89\",\"/de/unternehmen\":\"93\"}}");
Zeile gelöscht : user_pref("extensions.qipu.status", "Aktiviert");
Zeile gelöscht : user_pref("extensions.qipu.statusdisabled", false);
Zeile gelöscht : user_pref("extensions.qipu.timestamp", "2013-11-15 18:16:00");
Zeile gelöscht : user_pref("extensions.qipu.version", "");

[ Datei : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\52hlsbxx.default\prefs.js ]


[ Datei : C:\Users\Natalie und Michelle\AppData\Roaming\Mozilla\Firefox\Profiles\hai0zkqu.default\prefs.js ]


[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\n5jcsjir.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [3825 octets] - [15/11/2013 18:18:41]
AdwCleaner[S0].txt - [3708 octets] - [15/11/2013 18:19:34]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [3768 octets] ##########
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Holger on 15.11.2013 at 18:29:03,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\covus freemium gmbh



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho8076.tmp



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Holger\appdata\local\{4F443BB9-C568-405D-9ED1-304AD8FF101F}
Successfully deleted: [Empty Folder] C:\Users\Holger\appdata\local\{9184F7EF-9D91-4B53-B9D7-622112775920}



~~~ FireFox

Successfully deleted the following from C:\Users\Holger\AppData\Roaming\mozilla\firefox\profiles\zbxkzxp7.default\prefs.js

user_pref("services.sync.prefs.syncID", "YV9cyxtuToVk");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.11.2013 at 18:36:00,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Und hier der Rest:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013
Ran by Holger_2 (ATTENTION: The logged in user is not administrator) on HOLGER-PC on 15-11-2013 18:42:39
Running from C:\Users\Holger_2\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(nabocorp. softwares) C:\Program Files (x86)\cam2pc\cam2pc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Seagate LLC) C:\Program Files (x86)\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11821160 2011-05-09] (Realtek Semiconductor)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-03-14] (CANON INC.)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [cam2pc] - C:\Program Files (x86)\cam2pc\cam2pc.exe [6639616 2007-10-27] (nabocorp. softwares)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {e5839fa2-4bdd-11e2-a28d-0009dd506595} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [MaxMenuMgr] - C:\Program Files (x86)\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe [185640 2009-09-25] (Seagate LLC)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled ()
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default
FF DefaultSearchEngine: Google
FF Homepage: hxxp://www.google.de/|
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20(shExpMatch(host%2C%20'(*.turntable.fm%7Cturntable.fm)')%20%26%26%20url.indexOf('.css')%20%3D%3D%20-1%20%26%26%20url.indexOf('.js')%20%3D%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*'))%20%7B%20return%20'PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000%3B%20PROXY%20ab-us13.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\chefkochde.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\familyone.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\idealode.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\leo-de-en.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\otr-quick-search.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Deutsches Wörterbuch - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\de-DE@dictionaries.addons.mozilla.org
FF Extension: Виявлення пристроїв Logitech - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\DeviceDetection@logitech.com
FF Extension: FacebookBlocker - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\facebookBlocker@webgraph.com
FF Extension: Form History Control - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\formhistory@yahoo.com
FF Extension: BlackSheep - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\jsobrier@zscaler.com
FF Extension: ScribbliesKids - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\ScribbliesKids
FF Extension: SphereGnome - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\SphereGnome
FF Extension: SphereGnomeBig - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\SphereGnomeBig
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\temp
FF Extension: iFoxFork Metal - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{0b7e0980-50bb-11df-9879-0800200c9a66}
FF Extension: iFoxFork Smooth - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{97f3d2a0-50ac-11df-9879-0800200c9a66}
FF Extension: CookieCuller - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}
FF Extension: User Agent Switcher - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
FF Extension: alarm - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\alarm@gutscheinsammler.de.xpi
FF Extension: amznUWL2 - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\amznUWL2@amazon.com.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\contents.rdf
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\Extensions.rdf
FF Extension: fdm_ffext - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\fdm_ffext@freedownloadmanager.org
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\icon.png
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\installed-extensions.txt
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\preview.png
FF Extension: printedit - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\printedit@DW-dev.xpi
FF Extension: toolbar-ff - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\toolbar-ff@payback.de.xpi
FF Extension: toolbar - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\toolbar@qipu.de.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{19EB90DC-A456-458b-8AAC-616D91AAFCE1}.xpi
FF Extension: prefs - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{5e594888-3e8e-47da-b2c6-b0b545112f84}.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
FF Extension: Adblock Plus - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: downbarconfig - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: prefs - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-27] (Microsoft Corp.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 MSSQL$MYMOVIES; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)
R2 SpyroService; C:\Program Files (x86)\FS\Spyro Portal\FlashPortal.exe [50688 2012-09-20] (FS)
R2 AirPrint; C:\AirPrint\airprint.exe -R _ipp._tcp,_universal -s [x]
R2 MSSQL$PP40; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PP40\Binn\sqlservr.exe -sPP40 [x]
S3 SQLAgent$PP40; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PP40\Binn\sqlagent.EXE -i PP40 [x]

==================== Drivers (Whitelisted) ====================

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [636760 2013-09-02] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 LTXMD_VAC; C:\Windows\System32\drivers\lmvac.sys [28944 2011-05-06] (Windows (R) Win 7 DDK provider)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 SMA_USBBUS; C:\Windows\System32\drivers\ftdibus.sys [76648 2013-02-13] (FTDI Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S0 nvpciflt; system32\DRIVERS\nvpciflt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-15 18:42 - 2013-11-15 18:42 - 01957794 _____ (Farbar) C:\Users\Holger_2\Desktop\FRST64.exe
2013-11-15 18:42 - 2013-11-15 18:42 - 00021493 _____ C:\Users\Holger_2\Desktop\FRST.txt
2013-11-15 18:36 - 2013-11-15 18:36 - 00001211 _____ C:\Users\Holger\Desktop\JRT.txt
2013-11-15 18:29 - 2013-11-15 18:29 - 00000000 ____D C:\Windows\ERUNT
2013-11-15 18:28 - 2013-11-15 18:28 - 01034531 _____ (Thisisu) C:\Users\Holger_2\Desktop\JRT.exe
2013-11-15 18:18 - 2013-11-15 18:19 - 00000000 ____D C:\AdwCleaner
2013-11-13 21:02 - 2013-11-13 21:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-13 20:20 - 2013-11-13 20:20 - 00030490 _____ C:\ComboFix.txt
2013-11-13 19:44 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-13 19:44 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-13 19:44 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-13 19:44 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-13 19:44 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-13 19:44 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-13 19:44 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-13 19:44 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-13 19:44 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-13 19:44 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-13 19:44 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 19:44 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 19:32 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 19:32 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 19:32 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 19:32 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 19:32 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 19:32 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 19:32 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 19:32 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 19:32 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 19:32 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 19:32 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 19:32 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 19:32 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 19:32 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 19:32 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 19:32 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 19:32 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 19:32 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 19:32 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 19:32 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 19:32 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 19:32 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 19:32 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 19:32 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 19:32 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 19:32 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 19:32 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 19:32 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 19:32 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 19:32 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 18:31 - 2013-11-13 20:20 - 00000000 ____D C:\Qoobox
2013-11-13 18:31 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-13 18:31 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-13 18:31 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-13 18:31 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-13 18:31 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-13 18:31 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-13 18:31 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-13 18:31 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-13 18:30 - 2013-11-13 20:18 - 00000000 ____D C:\Windows\erdnt
2013-11-13 18:26 - 2013-11-13 18:26 - 05147957 ____R (Swearware) C:\Users\Holger_2\Desktop\ComboFix.exe
2013-11-12 21:26 - 2013-11-12 21:26 - 00000000 ____D C:\FRST
2013-11-12 21:14 - 2013-11-12 21:14 - 00000000 ____D C:\Users\Holger\AppData\Roaming\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-12 21:13 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-12 20:34 - 2013-11-12 20:35 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 20:34 - 2013-11-12 20:35 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 20:34 - 2013-11-12 20:34 - 00000000 ____D C:\Program Files\iPod
2013-11-12 15:15 - 2013-11-10 17:36 - 00011849 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt_0.odt
2013-11-10 14:06 - 2013-11-10 14:06 - 00000130 ____H C:\Users\Natalie und Michelle\Documents\.~lock.Überschrift.odt_0.odt#
2013-11-10 14:05 - 2013-11-10 14:03 - 00012160 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt
2013-11-06 20:37 - 2013-11-06 20:38 - 00000000 ____D C:\Users\Public\Documents\Natalie_öffentlich
2013-11-05 19:57 - 2013-11-05 19:57 - 00001098 _____ C:\Users\Natalie und Michelle\Desktop\OpenOffice Writer.lnk
2013-11-05 19:51 - 2013-11-10 12:32 - 00000000 ____D C:\Users\Natalie und Michelle\Documents\Natalie
2013-11-05 19:20 - 2013-11-05 19:20 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Roaming\OpenOffice
2013-11-02 10:58 - 2013-11-02 10:58 - 00000000 ____D C:\Users\Holger_2\AppData\Local\calibre-cache
2013-11-02 10:46 - 2013-11-02 10:46 - 00000934 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2013-10-30 22:10 - 2013-11-02 10:42 - 00000000 ____D C:\Users\Holger_2\AppData\Local\Mozilla Thunderbird
2013-10-30 21:49 - 2013-10-30 21:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-30 21:42 - 2013-10-30 22:30 - 00000000 ____D C:\Users\Holger_2\Documents\ConvertXToDVD
2013-10-25 19:33 - 2013-10-25 21:15 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Free Download Manager
2013-10-25 18:25 - 2013-10-25 18:25 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-10-22 21:41 - 2013-10-22 21:41 - 00000000 ____D C:\Users\Holger\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-10-22 21:01 - 2012-02-16 12:42 - 00676968 _____ (Realtek                                            ) C:\Windows\system32\Drivers\Rt64win7.sys
2013-10-22 21:01 - 2012-02-16 12:42 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2013-10-22 20:58 - 2013-10-22 20:58 - 00015448 _____ C:\Windows\DPINST.LOG
2013-10-22 20:58 - 2013-10-22 20:58 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3
2013-10-22 20:53 - 2013-10-22 20:53 - 00000000 ____D C:\Intel
2013-10-22 20:50 - 2013-10-22 20:50 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-22 20:40 - 2013-10-22 21:00 - 00000000 ____D C:\Medion
2013-10-22 20:32 - 2013-10-22 20:32 - 00000000 ____D C:\Program Files\CPUID

==================== One Month Modified Files and Folders =======

2013-11-15 18:43 - 2013-11-15 18:42 - 00021493 _____ C:\Users\Holger_2\Desktop\FRST.txt
2013-11-15 18:42 - 2013-11-15 18:42 - 01957794 _____ (Farbar) C:\Users\Holger_2\Desktop\FRST64.exe
2013-11-15 18:38 - 2013-09-02 20:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-15 18:38 - 2012-01-10 19:29 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-15 18:36 - 2013-11-15 18:36 - 00001211 _____ C:\Users\Holger\Desktop\JRT.txt
2013-11-15 18:33 - 2012-09-11 21:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-15 18:30 - 2009-07-14 05:45 - 00017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-15 18:30 - 2009-07-14 05:45 - 00017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-15 18:29 - 2013-11-15 18:29 - 00000000 ____D C:\Windows\ERUNT
2013-11-15 18:29 - 2011-05-16 15:04 - 00772300 _____ C:\Windows\system32\perfh007.dat
2013-11-15 18:29 - 2011-05-16 15:04 - 00179186 _____ C:\Windows\system32\perfc007.dat
2013-11-15 18:29 - 2009-07-14 06:13 - 01822438 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-15 18:28 - 2013-11-15 18:28 - 01034531 _____ (Thisisu) C:\Users\Holger_2\Desktop\JRT.exe
2013-11-15 18:22 - 2012-06-14 21:03 - 00018427 _____ C:\Windows\setupact.log
2013-11-15 18:22 - 2011-09-05 23:24 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-15 18:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 18:21 - 2012-01-10 19:27 - 01596032 _____ C:\Windows\WindowsUpdate.log
2013-11-15 18:19 - 2013-11-15 18:18 - 00000000 ____D C:\AdwCleaner
2013-11-15 18:17 - 2012-01-12 22:25 - 00000000 ____D C:\Users\Holger_2\Desktop\From the INet
2013-11-15 18:16 - 2012-01-14 18:52 - 00000000 ____D C:\Users\Holger_2\Documents\Excel
2013-11-15 18:13 - 2012-01-10 19:29 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-13 22:29 - 2013-07-23 19:14 - 00000000 ____D C:\Program Files (x86)\DVM_IPCam2Setup
2013-11-13 21:43 - 2012-01-21 14:09 - 00000000 ____D C:\Users\Holger_2\Documents\InDesign
2013-11-13 21:43 - 2012-01-12 22:15 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Adobe
2013-11-13 21:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-13 21:05 - 2013-11-13 21:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-13 21:05 - 2011-08-10 20:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-13 20:20 - 2013-11-13 20:20 - 00030490 _____ C:\ComboFix.txt
2013-11-13 20:20 - 2013-11-13 18:31 - 00000000 ____D C:\Qoobox
2013-11-13 20:18 - 2013-11-13 18:30 - 00000000 ____D C:\Windows\erdnt
2013-11-13 20:16 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-11-13 20:06 - 2012-06-27 14:58 - 00339954 _____ C:\Windows\PFRO.log
2013-11-13 19:44 - 2013-08-26 02:02 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 19:41 - 2011-07-18 21:31 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 19:39 - 2012-03-17 18:26 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Local\CrashDumps
2013-11-13 18:33 - 2012-01-27 21:58 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-13 18:26 - 2013-11-13 18:26 - 05147957 ____R (Swearware) C:\Users\Holger_2\Desktop\ComboFix.exe
2013-11-12 21:26 - 2013-11-12 21:26 - 00000000 ____D C:\FRST
2013-11-12 21:14 - 2013-11-12 21:14 - 00000000 ____D C:\Users\Holger\AppData\Roaming\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-12 20:35 - 2013-11-12 20:34 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 20:35 - 2013-11-12 20:34 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 20:35 - 2012-09-15 09:50 - 00000000 ____D C:\Program Files\iTunes
2013-11-12 20:34 - 2013-11-12 20:34 - 00000000 ____D C:\Program Files\iPod
2013-11-10 18:13 - 2012-01-10 19:34 - 00102360 _____ C:\Users\Holger\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-10 18:06 - 2012-01-27 22:30 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-10 17:36 - 2013-11-12 15:15 - 00011849 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt_0.odt
2013-11-10 14:06 - 2013-11-10 14:06 - 00000130 ____H C:\Users\Natalie und Michelle\Documents\.~lock.Überschrift.odt_0.odt#
2013-11-10 14:03 - 2013-11-10 14:05 - 00012160 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt
2013-11-10 12:32 - 2013-11-05 19:51 - 00000000 ____D C:\Users\Natalie und Michelle\Documents\Natalie
2013-11-09 10:38 - 2012-06-13 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-06 20:40 - 2012-01-22 16:57 - 00000000 ____D C:\Users\Holger_2\AppData\Local\CrashDumps
2013-11-06 20:38 - 2013-11-06 20:37 - 00000000 ____D C:\Users\Public\Documents\Natalie_öffentlich
2013-11-06 17:06 - 2012-03-28 08:08 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Local\Adobe
2013-11-06 17:06 - 2012-01-17 21:22 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Roaming\Adobe
2013-11-05 19:57 - 2013-11-05 19:57 - 00001098 _____ C:\Users\Natalie und Michelle\Desktop\OpenOffice Writer.lnk
2013-11-05 19:20 - 2013-11-05 19:20 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Roaming\OpenOffice
2013-11-03 17:10 - 2012-05-18 18:28 - 00000000 ____D C:\Napster-Musik
2013-11-02 17:45 - 2013-01-27 19:04 - 00000000 ____D C:\Users\Holger_2\Documents\Calibre Bibliothek
2013-11-02 10:58 - 2013-11-02 10:58 - 00000000 ____D C:\Users\Holger_2\AppData\Local\calibre-cache
2013-11-02 10:46 - 2013-11-02 10:46 - 00000934 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2013-11-02 10:46 - 2013-01-27 19:02 - 00000000 ____D C:\Program Files\Calibre2
2013-11-02 10:42 - 2013-10-30 22:10 - 00000000 ____D C:\Users\Holger_2\AppData\Local\Mozilla Thunderbird
2013-11-02 10:40 - 2013-06-11 21:36 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-30 22:30 - 2013-10-30 21:42 - 00000000 ____D C:\Users\Holger_2\Documents\ConvertXToDVD
2013-10-30 22:30 - 2012-03-29 18:12 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Vso
2013-10-30 21:49 - 2013-10-30 21:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-28 17:08 - 2009-07-14 05:45 - 02336472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-28 15:04 - 2012-01-17 21:13 - 00102360 _____ C:\Users\Natalie und Michelle\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-25 21:15 - 2013-10-25 19:33 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Free Download Manager
2013-10-25 18:25 - 2013-10-25 18:25 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-10-23 19:13 - 2012-01-12 21:06 - 00102360 _____ C:\Users\Holger_2\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-22 21:45 - 2013-08-11 15:22 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-10-22 21:41 - 2013-10-22 21:41 - 00000000 ____D C:\Users\Holger\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-10-22 21:04 - 2003-07-26 15:48 - 00020344 _____ C:\Users\Holger_2\Documents\To-Do-List.txt
2013-10-22 21:01 - 2011-08-11 22:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-10-22 21:01 - 2011-07-18 22:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-22 21:00 - 2013-10-22 20:40 - 00000000 ____D C:\Medion
2013-10-22 20:58 - 2013-10-22 20:58 - 00015448 _____ C:\Windows\DPINST.LOG
2013-10-22 20:58 - 2013-10-22 20:58 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3
2013-10-22 20:53 - 2013-10-22 20:53 - 00000000 ____D C:\Intel
2013-10-22 20:50 - 2013-10-22 20:50 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-22 20:32 - 2013-10-22 20:32 - 00000000 ____D C:\Program Files\CPUID
2013-10-18 16:34 - 2012-01-14 18:51 - 00000000 ____D C:\Users\Holger_2\Documents\Word

Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
--- --- ---

--- --- ---

Antwort

Themen zu Softwareupdater.UI.exe eingefangen
adblock, adobe, browser, converter, cpu-z, desktop, entfernen, error, farbar, farbar recovery scan tool, firefox, flash player, free download, helper, home, homepage, installation, kaspersky, logfile, loswerden, monitor, mozilla, nvpciflt.sys, photoshop, plug-in, realtek, registry, rundll, secunia psi, security, spam, svchost.exe, tablet, tastatur, user agent, wscript.exe


« TR/Ransom.Foreign.hjrz | Arbeitsstationsdienst lässt sich nicht starten, PC sehr langsam, Netzwerk eingeschränkt »


Ähnliche Themen: Softwareupdater.UI.exe eingefangen


  1. SoftwareUpdater.UI.exe
    Log-Analyse und Auswertung - 17.11.2014 (7)
  2. SoftwareUpdater.Ui.exe
    Log-Analyse und Auswertung - 04.11.2014 (13)
  3. SoftwareUpdater.ui
    Plagegeister aller Art und deren Bekämpfung - 09.05.2014 (13)
  4. Windows 7: Auf Festplattenpartition für Daten befindet sich ein Ordner "SoftwareUpdater" mit einer Datei "SoftwareUpdater.Bootstrapper"
    Plagegeister aller Art und deren Bekämpfung - 10.02.2014 (13)
  5. SoftwareUpdater.Ui.exe
    Plagegeister aller Art und deren Bekämpfung - 31.01.2014 (32)
  6. Windows 7: SoftwareUpdater eingefangen
    Log-Analyse und Auswertung - 18.01.2014 (8)
  7. SoftwareUpdater eingefangen!
    Plagegeister aller Art und deren Bekämpfung - 06.01.2014 (13)
  8. SoftwareUpdater.Ui.exe
    Log-Analyse und Auswertung - 19.12.2013 (5)
  9. Softwareupdater.Ui.exe
    Log-Analyse und Auswertung - 29.10.2013 (3)
  10. Softwareupdater.UI.exe eingefangen
    Plagegeister aller Art und deren Bekämpfung - 22.10.2013 (3)
  11. Softwareupdater.ui.exe auf Windows Vista (SP2) eingefangen
    Log-Analyse und Auswertung - 27.09.2013 (10)
  12. C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper nicht zu löschen
    Log-Analyse und Auswertung - 05.09.2013 (7)
  13. Softwareupdater.ui.exe eingefangen und möchte bei jedem Neustart zustimmung für update
    Log-Analyse und Auswertung - 28.08.2013 (4)
  14. SoftwareUpdater.ui.exe
    Plagegeister aller Art und deren Bekämpfung - 14.07.2013 (19)
  15. c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe
    Plagegeister aller Art und deren Bekämpfung - 12.07.2013 (14)
  16. softwareupdater.bootstrapper.exe "c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe"
    Log-Analyse und Auswertung - 08.07.2013 (14)
  17. SoftwareUpdater.UI.exe
    Plagegeister aller Art und deren Bekämpfung - 02.07.2013 (10)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Softwareupdater.UI.exe eingefangen - hier das erste Log, Rest folgt morgen Code: Alles auswählen Aufklappen ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.14.09 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16736 Holger - Softwareupdater.UI.exe eingefangen...
Archiv
Du betrachtest: Softwareupdater.UI.exe eingefangen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19