|
Log-Analyse und Auswertung: Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe CardWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
16.11.2013, 16:57 | #1 |
| Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Hallo erstmal, bin ganz neu hier und wie meisten hab ich natürlich hierher gefunden weil ich ein Problem hab .Habe mich hier im Forum schon ein bisschen umgesehen und hoffe ich halte mich an alle Regeln und mache nicht zu viel falsch. Habe seit gestern Abend ein Fenster das sich beim Start von Firefox mit öffnet und sich nicht schliessen lässt auch nicht mit dem Task Manager. Erst wenn ich FF selbst schließe geht das "schadfenster" mit zu. Selbstverständlich ist es auch nach einem reboot noch da. Ich füge ein Bild des Fensters mit Meldung dessen was passiert wenn ich versuche es mit "X" zu schließen (ist dann eine schleife). OS ist Windows7 64bit. AVG Antivirus Free Edition 2014 läuft immer auf dem Rechner mit. Habe mir das "Farbar's Recovery Scan Tool" (64bit) runtergeladen und ausgeführt...werde hier nun den Code posten. Ich hoffe das hab ich seweit richtig gemacht. Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2013 Ran by Jan at 2013-11-16 14:44:45 Running from C:\Users\Jan\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== 64 Bit HP CIO Components Installer (Version: 15.2.1) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144) AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589) AMD Catalyst Install Manager (Version: 8.0.915.0) AMD Fuel (Version: 2013.0830.1944.33589) AVG 2014 (Version: 14.0.3629) AVG 2014 (Version: 14.0.4158) AVG 2014 (Version: 2014.0.4158) Battle.net (x32) Blacklight: Retribution (x32) Borderlands 2 (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589) Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589) Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589) CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589) CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589) CCC Help Czech (x32 Version: 2013.0830.1943.33589) CCC Help Danish (x32 Version: 2013.0830.1943.33589) CCC Help Dutch (x32 Version: 2013.0830.1943.33589) CCC Help English (x32 Version: 2013.0830.1943.33589) CCC Help Finnish (x32 Version: 2013.0830.1943.33589) CCC Help French (x32 Version: 2013.0830.1943.33589) CCC Help German (x32 Version: 2013.0830.1943.33589) CCC Help Greek (x32 Version: 2013.0830.1943.33589) CCC Help Hungarian (x32 Version: 2013.0830.1943.33589) CCC Help Italian (x32 Version: 2013.0830.1943.33589) CCC Help Japanese (x32 Version: 2013.0830.1943.33589) CCC Help Korean (x32 Version: 2013.0830.1943.33589) CCC Help Norwegian (x32 Version: 2013.0830.1943.33589) CCC Help Polish (x32 Version: 2013.0830.1943.33589) CCC Help Portuguese (x32 Version: 2013.0830.1943.33589) CCC Help Russian (x32 Version: 2013.0830.1943.33589) CCC Help Spanish (x32 Version: 2013.0830.1943.33589) CCC Help Swedish (x32 Version: 2013.0830.1943.33589) CCC Help Thai (x32 Version: 2013.0830.1943.33589) CCC Help Turkish (x32 Version: 2013.0830.1943.33589) ccc-utility64 (Version: 2013.0830.1944.33589) D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Dropbox (HKCU Version: 2.4.6) Evernote v. 5.0.2 (x32 Version: 5.0.2.1392) Fotogalerie (x32 Version: 16.4.3508.0205) FreePDF (Remove only) (x32) GPL Ghostscript (Version: 9.10) Grand Theft Auto IV (x32 Version: 1.0.0013.131) Grand Theft Auto IV (x32 Version: 1.00.0000) Hearthstone (x32) League of Legends (x32 Version: 3.0.1) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SkyDrive (HKCU Version: 17.0.2015.0811) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727) Movie Maker (x32 Version: 16.4.3508.0205) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 25.0.1) MSI Afterburner 2.3.1 (x32 Version: 2.3.1) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.19.0) NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0) NVIDIA Install Application (Version: 2.1002.133.902) Open Broadcaster Software (x32) Photo Common (x32 Version: 16.4.3508.0205) Photo Gallery (x32 Version: 16.4.3508.0205) PlanetSide 2 (x32) Platform (x32 Version: 1.34) Prime World (x32) Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.21.531.2010) RedMon - Redirection Port Monitor Skype™ 6.10 (x32 Version: 6.10.104) Spotify (HKCU Version: 0.9.6.72.ge389c074) Steam (x32 Version: 1.0.0.0) swMSM (x32 Version: 12.0.0.1) Team Fortress 2 (x32) TeamSpeak 3 Client (Version: 3.0.13) TeamViewer 8 (x32 Version: 8.0.20935) Trillian (x32) Unity Web Player (HKCU Version: ) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition (x32) VIA Plattform-Geräte-Manager (x32 Version: 1.34) Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1) Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1) VLC media player 2.0.8 (x32 Version: 2.0.8) Windows Live Communications Platform (x32 Version: 16.4.3508.0205) Windows Live Essentials (x32 Version: 16.4.3508.0205) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3508.0205) Windows Live Photo Common (x32 Version: 16.4.3508.0205) Windows Live PIMT Platform (x32 Version: 16.4.3508.0205) Windows Live SOXE (x32 Version: 16.4.3508.0205) Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205) Windows Live UX Platform (x32 Version: 16.4.3508.0205) Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205) Windows Mobile Device Updater Component (Version: 04.08.2345.00) WinRAR 5.00 (64-bit) (Version: 5.00.0) Zune (Version: 04.08.2345.00) Zune Language Pack (CHS) (Version: 04.08.2345.00) Zune Language Pack (CHT) (Version: 04.08.2345.00) Zune Language Pack (CSY) (Version: 04.08.2345.00) Zune Language Pack (DAN) (Version: 04.08.2345.00) Zune Language Pack (DEU) (Version: 04.08.2345.00) Zune Language Pack (ELL) (Version: 04.08.2345.00) Zune Language Pack (ESP) (Version: 04.08.2345.00) Zune Language Pack (FIN) (Version: 04.08.2345.00) Zune Language Pack (FRA) (Version: 04.08.2345.00) Zune Language Pack (HUN) (Version: 04.08.2345.00) Zune Language Pack (IND) (Version: 04.08.2345.00) Zune Language Pack (ITA) (Version: 04.08.2345.00) Zune Language Pack (JPN) (Version: 04.08.2345.00) Zune Language Pack (KOR) (Version: 04.08.2345.00) Zune Language Pack (MSL) (Version: 04.08.2345.00) Zune Language Pack (NLD) (Version: 04.08.2345.00) Zune Language Pack (NOR) (Version: 04.08.2345.00) Zune Language Pack (PLK) (Version: 04.08.2345.00) Zune Language Pack (PTB) (Version: 04.08.2345.00) Zune Language Pack (PTG) (Version: 04.08.2345.00) Zune Language Pack (RUS) (Version: 04.08.2345.00) Zune Language Pack (SVE) (Version: 04.08.2345.00) ==================== Restore Points ========================= 20-10-2013 00:50:27 Windows Update 20-10-2013 13:02:27 Microsoft Visual C++ 2005 Redistributable wird installiert 20-10-2013 13:03:27 Microsoft Visual C++ 2005 Redistributable wird installiert 20-10-2013 13:04:08 DirectX wurde installiert 27-10-2013 18:07:33 Geplanter Prüfpunkt 05-11-2013 19:59:27 Geplanter Prüfpunkt 14-11-2013 00:29:43 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {691EB1EC-B22E-4A11-8900-0ABEC61EB509} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2013-01-23] () Task: {90CBF5E2-FA32-4001-BA04-2B6A9BEBDF1F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-14 01:09 - 2013-09-14 01:06 - 00071680 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll 2013-09-14 01:09 - 2013-09-14 01:06 - 00379392 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll 2013-09-14 01:09 - 2013-09-14 01:06 - 00098816 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll 2013-09-14 01:09 - 2013-09-14 01:06 - 64105984 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll 2013-01-16 17:01 - 2013-01-16 17:01 - 00069632 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll 2013-01-16 17:00 - 2013-01-16 17:00 - 00061440 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll 2013-01-16 17:01 - 2013-01-16 17:01 - 00229376 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll 2013-01-16 17:00 - 2013-01-16 17:00 - 00143360 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll 2013-01-16 17:01 - 2013-01-16 17:01 - 00348160 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll 2011-04-30 20:04 - 2011-04-30 20:04 - 00013312 _____ () C:\Program Files (x86)\MSI Afterburner\RTTSH.dll 2013-09-14 02:27 - 2013-11-12 19:52 - 36967424 _____ () C:\Users\Jan\AppData\Roaming\Spotify\Data\libcef.dll 2013-08-21 13:18 - 2013-10-24 18:45 - 00691200 _____ () E:\Steam\SDL2.dll 2013-09-06 11:55 - 2013-10-30 20:25 - 01123240 _____ () E:\Steam\bin\chromehtml.DLL 2013-08-07 10:31 - 2013-10-23 21:07 - 20625832 _____ () E:\Steam\bin\libcef.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () E:\Steam\bin\avcodec-53.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () E:\Steam\bin\avutil-51.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () E:\Steam\bin\avformat-53.dll 2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Jan\AppData\Roaming\Dropbox\bin\libcef.dll 2013-09-26 12:50 - 2013-09-26 12:50 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll 2013-09-26 12:49 - 2013-09-26 12:49 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll 2013-06-12 23:00 - 2013-06-12 23:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll 2013-09-21 12:37 - 2013-11-12 19:52 - 00887808 _____ () C:\Users\Jan\AppData\Roaming\Spotify\Data\libglesv2.dll 2013-09-21 12:37 - 2013-11-12 19:52 - 00109568 _____ () C:\Users\Jan\AppData\Roaming\Spotify\Data\libegl.dll 2013-11-16 02:17 - 2013-11-16 02:17 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-10-08 22:39 - 2013-10-08 22:39 - 16233864 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/16/2013 02:07:34 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/16/2013 01:52:22 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/16/2013 01:22:07 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/16/2013 00:41:14 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/15/2013 01:57:27 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/14/2013 05:57:15 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/13/2013 05:52:47 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/12/2013 07:53:27 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/11/2013 05:05:41 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/11/2013 11:09:49 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (11/16/2013 02:03:08 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (11/16/2013 01:57:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (11/16/2013 01:55:09 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (11/16/2013 01:48:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: %%1747 Error: (11/16/2013 01:48:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (11/16/2013 01:19:04 PM) (Source: DCOM) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (11/02/2013 04:08:20 AM) (Source: DCOM) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (10/31/2013 02:35:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/31/2013 02:35:25 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (10/30/2013 11:49:02 AM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80004005 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 77% Total physical RAM: 4094.18 MB Available physical RAM: 923.6 MB Total Pagefile: 8186.54 MB Available Pagefile: 4602.94 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:297.99 GB) (Free:247.54 GB) NTFS Drive e: (Games) (Fixed) (Total:279.46 GB) (Free:173.07 GB) NTFS Drive f: (Extern) (Fixed) (Total:465.76 GB) (Free:42.38 GB) NTFS Drive g: (SKYRIM_EN) (CDROM) (Total:5.12 GB) (Free:0 GB) UDF Drive h: () (Removable) (Total:1.91 GB) (Free:0.8 GB) FAT ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 279 GB) (Disk ID: 00026770) Partition 1: (Not Active) - (Size=279 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 318D318C) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 2 GB) (Disk ID: 6E652072) No partition Table on disk 2. ======================================================== Disk: 3 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 216A51CA) Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS) ==================== End Of Log ============================ EDIT: Gerade festgestellt das zum einen das Fenster doch nicht zu geht wenn ich Browser schließe sondenr nur wenn ich das fenster per Task Manager "abschiesse". Beste Grüße Bryce Geändert von Bryce (16.11.2013 um 17:46 Uhr) Grund: Neue Fakten zur Sachlage gefunden. |
16.11.2013, 20:40 | #2 |
/// TB-Ausbilder | Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Hallo,
__________________FRST erstellt 2 Logfiles. Du hast nur die Addition.txt gepostet. Kannst du bitte auch noch die FRST.txt nachreichen?
__________________ |
16.11.2013, 20:59 | #3 |
| Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Ah ok, sorry!
__________________Hier ist das was glaub ich noch gefehlt hat. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013 Ran by Jan (administrator) on JAN-PC on 16-11-2013 14:43:53 Running from C:\Users\Jan\Downloads Windows 7 Professional N Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (AMD) C:\Windows\system32\atiesrxx.exe (Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE (AMD) C:\Windows\system32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\spotify.exe (Valve Corporation) E:\Steam\Steam.exe (Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Jan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe (NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe () C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe ==================== Registry (Whitelisted) ================== HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.) HKCU\...\Run: [Spotify] - C:\Users\Jan\AppData\Roaming\Spotify\spotify.exe [5955072 2013-11-12] (Spotify Ltd) HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-12] (Spotify Ltd) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) MountPoints2: {8681ebed-37d2-11e3-84e7-bcaec52d2602} - G:\INSTALL.EXE HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation) HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2369536 2013-09-14] (VIA) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [373760 2013-03-14] (shbox.de) Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Jan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios) ==================== Internet (Whitelisted) ==================== BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default FF Homepage: chrome://speeddial/content/speeddial.xul FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\ich@maltegoetz.de FF Extension: DownloadHelper - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: amznUWL2 - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\amznUWL2@amazon.com.xpi FF Extension: speeddial - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-08-30] (Advanced Micro Devices, Inc.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.) ==================== Drivers (Whitelisted) ==================== R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-18] (DT Soft Ltd) R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] () S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-16 14:43 - 2013-11-16 14:44 - 00010381 _____ C:\Users\Jan\Downloads\FRST.txt 2013-11-16 14:43 - 2013-11-16 14:43 - 00000000 ____D C:\FRST 2013-11-16 13:56 - 2013-11-16 13:57 - 00000000 ___RD C:\Users\Administrator\Podcasts 2013-11-16 13:56 - 2013-11-16 13:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe 2013-11-16 13:34 - 2013-11-16 13:34 - 01957794 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe 2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Malwarebytes 2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-16 13:09 - 2013-11-16 13:09 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jan\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-16 02:17 - 2013-11-16 02:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-15 20:17 - 2013-11-15 22:28 - 735920614 _____ C:\Users\Jan\Downloads\wall.avi 2013-11-14 01:31 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 01:31 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 01:31 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 01:31 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 01:31 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 01:31 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 01:31 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 01:31 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 01:31 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 01:31 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 01:31 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 01:31 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 00:44 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 00:44 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 00:44 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 00:44 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 00:44 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 00:44 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 00:44 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 00:44 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 00:44 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 00:44 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 00:44 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 00:44 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 00:44 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 00:44 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 00:44 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 00:44 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 00:44 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 00:44 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 00:44 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 00:44 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 00:44 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 00:44 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 00:44 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 00:44 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-09 19:11 - 2013-11-10 00:33 - 745630751 _____ C:\Users\Jan\Downloads\Were.the.Millers.2013.EXTENDED.BDRip.X264-SPARKS.mkv 2013-11-02 14:00 - 2013-11-16 00:47 - 00011485 _____ C:\Users\Jan\Desktop\Hearthstone.xlsx 2013-10-29 22:24 - 2013-10-29 22:24 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard 2013-10-29 21:37 - 2013-10-29 21:37 - 00000443 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2013-10-29 21:00 - 2013-10-29 21:00 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-enGB.exe 2013-10-29 20:38 - 2013-11-13 22:05 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-10-29 20:34 - 2013-11-16 02:55 - 00000000 ____D C:\Users\Jan\AppData\Local\Battle.net 2013-10-29 20:34 - 2013-10-29 21:32 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Battle.net 2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard Entertainment 2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-10-29 20:31 - 2013-10-29 20:31 - 00000000 ____D C:\ProgramData\Battle.net 2013-10-29 20:26 - 2013-10-29 20:30 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-deDE.exe 2013-10-26 14:17 - 2013-10-26 14:17 - 00020140 _____ C:\Users\Jan\Downloads\google.csv 2013-10-18 13:03 - 2013-10-18 13:03 - 00000000 ____D C:\Users\Jan\AppData\Local\Skyrim 2013-10-18 12:21 - 2013-10-18 12:21 - 00000037 _____ C:\Windows\WET.INI 2013-10-18 11:54 - 2013-10-18 11:55 - 00000000 ____D C:\Users\Jan\AppData\Roaming\DAEMON Tools Lite 2013-10-18 11:54 - 2013-10-18 11:54 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2013-10-18 11:52 - 2013-10-18 11:55 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite 2013-10-18 11:52 - 2013-10-18 11:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Jan\Downloads\DTLite4471-0333.exe 2013-10-18 03:28 - 2013-11-16 13:54 - 00003014 _____ C:\Windows\System32\Tasks\MSIAfterburner 2013-10-18 02:16 - 2013-10-18 11:19 - 00000000 ____D C:\Users\Jan\Documents\Battlefield Heroes 2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help ==================== One Month Modified Files and Folders ======= 2013-11-16 14:44 - 2013-11-16 14:43 - 00010381 _____ C:\Users\Jan\Downloads\FRST.txt 2013-11-16 14:44 - 2013-09-25 23:15 - 00000000 ____D C:\Users\Jan\AppData\Roaming\NetSpeedMonitor 2013-11-16 14:43 - 2013-11-16 14:43 - 00000000 ____D C:\FRST 2013-11-16 14:40 - 2013-09-14 01:19 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Skype 2013-11-16 14:39 - 2013-09-14 02:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-16 14:13 - 2009-07-14 05:50 - 00020112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-16 14:13 - 2009-07-14 05:50 - 00020112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-16 14:12 - 2011-04-12 09:14 - 00699416 _____ C:\Windows\system32\perfh007.dat 2013-11-16 14:12 - 2011-04-12 09:14 - 00149556 _____ C:\Windows\system32\perfc007.dat 2013-11-16 14:12 - 2009-07-14 06:12 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-16 14:10 - 2013-09-14 00:31 - 01211612 _____ C:\Windows\WindowsUpdate.log 2013-11-16 14:07 - 2013-10-16 15:16 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Dropbox 2013-11-16 14:07 - 2013-09-14 02:26 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify 2013-11-16 14:06 - 2013-10-16 15:34 - 00000000 ___RD C:\Users\Jan\Dropbox 2013-11-16 14:06 - 2013-10-06 15:26 - 00000000 ____D C:\Users\Jan\AppData\Local\FreePDF_XP 2013-11-16 14:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-16 14:06 - 2009-07-14 05:56 - 00192621 _____ C:\Windows\setupact.log 2013-11-16 13:57 - 2013-11-16 13:56 - 00000000 ___RD C:\Users\Administrator\Podcasts 2013-11-16 13:57 - 2013-09-14 14:23 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-16 13:57 - 2013-09-14 14:23 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-16 13:56 - 2013-11-16 13:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe 2013-11-16 13:56 - 2013-09-14 14:23 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-16 13:56 - 2013-09-14 14:23 - 00000000 ____D C:\Users\Administrator 2013-11-16 13:56 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini 2013-11-16 13:54 - 2013-10-18 03:28 - 00003014 _____ C:\Windows\System32\Tasks\MSIAfterburner 2013-11-16 13:34 - 2013-11-16 13:34 - 01957794 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe 2013-11-16 13:20 - 2013-09-20 16:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-16 13:20 - 2010-11-21 04:47 - 00153480 _____ C:\Windows\PFRO.log 2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Malwarebytes 2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-16 13:09 - 2013-11-16 13:09 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jan\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-16 12:45 - 2013-09-14 01:23 - 00000000 ____D C:\ProgramData\MFAData 2013-11-16 02:55 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\Battle.net 2013-11-16 02:17 - 2013-11-16 02:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-16 00:47 - 2013-11-02 14:00 - 00011485 _____ C:\Users\Jan\Desktop\Hearthstone.xlsx 2013-11-15 22:28 - 2013-11-15 20:17 - 735920614 _____ C:\Users\Jan\Downloads\wall.avi 2013-11-15 15:44 - 2013-09-21 15:56 - 00000000 ____D C:\Users\Jan\AppData\Roaming\vlc 2013-11-14 01:31 - 2013-10-16 08:00 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-13 22:05 - 2013-10-29 20:38 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-11-13 17:52 - 2013-09-14 02:27 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify 2013-11-12 19:53 - 2013-09-14 01:19 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-12 19:53 - 2013-09-14 01:19 - 00000000 ____D C:\ProgramData\Skype 2013-11-10 00:33 - 2013-11-09 19:11 - 745630751 _____ C:\Users\Jan\Downloads\Were.the.Millers.2013.EXTENDED.BDRip.X264-SPARKS.mkv 2013-11-03 22:00 - 2013-10-16 08:00 - 00000000 ____D C:\Users\Jan\AppData\Local\Microsoft Help 2013-11-03 21:29 - 2013-10-16 15:18 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-11-03 21:29 - 2013-09-14 00:44 - 00000000 ___RD C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-30 17:19 - 2013-10-15 22:09 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner 2013-10-29 22:24 - 2013-10-29 22:24 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard 2013-10-29 21:37 - 2013-10-29 21:37 - 00000443 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2013-10-29 21:32 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Battle.net 2013-10-29 21:00 - 2013-10-29 21:00 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-enGB.exe 2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard Entertainment 2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-10-29 20:31 - 2013-10-29 20:31 - 00000000 ____D C:\ProgramData\Battle.net 2013-10-29 20:30 - 2013-10-29 20:26 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-deDE.exe 2013-10-26 14:17 - 2013-10-26 14:17 - 00020140 _____ C:\Users\Jan\Downloads\google.csv 2013-10-23 22:02 - 2013-09-14 14:09 - 00000000 ____D C:\Users\Jan\AppData\Roaming\TS3Client 2013-10-18 13:03 - 2013-10-18 13:03 - 00000000 ____D C:\Users\Jan\AppData\Local\Skyrim 2013-10-18 13:03 - 2013-10-06 19:34 - 00000000 ____D C:\Users\Jan\Documents\My Games 2013-10-18 12:22 - 2013-09-14 00:44 - 00000000 ____D C:\Users\Jan\AppData\Local\VirtualStore 2013-10-18 12:21 - 2013-10-18 12:21 - 00000037 _____ C:\Windows\WET.INI 2013-10-18 12:03 - 2013-09-15 13:37 - 00141959 _____ C:\Windows\DirectX.log 2013-10-18 11:55 - 2013-10-18 11:54 - 00000000 ____D C:\Users\Jan\AppData\Roaming\DAEMON Tools Lite 2013-10-18 11:55 - 2013-10-18 11:52 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite 2013-10-18 11:54 - 2013-10-18 11:54 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2013-10-18 11:52 - 2013-10-18 11:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Jan\Downloads\DTLite4471-0333.exe 2013-10-18 11:19 - 2013-10-18 02:16 - 00000000 ____D C:\Users\Jan\Documents\Battlefield Heroes 2013-10-18 10:07 - 2013-10-14 20:35 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-10-18 10:07 - 2013-10-12 12:13 - 00270240 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-10-18 02:17 - 2013-10-14 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\PunkBuster 2013-10-17 11:59 - 2013-10-06 19:33 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-10-17 10:58 - 2013-09-14 02:01 - 00064352 _____ C:\Users\Jan\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-17 10:06 - 2009-07-14 05:50 - 00305712 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-10-17 00:28 - 2013-10-16 08:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Works Some content of TEMP: ==================== C:\Users\Jan\AppData\Local\Temp\BunndleOfferManager.dll C:\Users\Jan\AppData\Local\Temp\drm_dyndata_7380014.dll C:\Users\Jan\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Jan\AppData\Local\Temp\nv3DVStreaming.dll C:\Users\Jan\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll C:\Users\Jan\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Jan\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Jan\AppData\Local\Temp\nvStereoApiI.dll C:\Users\Jan\AppData\Local\Temp\nvStInst.exe C:\Users\Jan\AppData\Local\Temp\ose00000.exe C:\Users\Jan\AppData\Local\Temp\sdanircmdc.exe C:\Users\Jan\AppData\Local\Temp\sfamcc00001.dll C:\Users\Jan\AppData\Local\Temp\sfamcc00002.dll C:\Users\Jan\AppData\Local\Temp\sfextra.dll C:\Users\Jan\AppData\Local\Temp\swt-win32-3349.dll C:\Users\Jan\AppData\Local\Temp\_is3ED6.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 20:06 ==================== End Of Log ============================ --- --- --- |
16.11.2013, 21:14 | #4 |
/// TB-Ausbilder | Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Und wenn du den Firefox abschiesst und den Rechner neu startest, erscheint diese Seite immer noch?
__________________ cheers, Leo |
16.11.2013, 21:24 | #5 |
| Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Ich werde es später nochmal ausprobieren (kann den Rechner grade nicht neustarten) aber wenn ich mich richtig erinnere dann ja, das war so. |
16.11.2013, 21:26 | #6 |
/// TB-Ausbilder | Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Ja teste das bitte nochmals und gib dann Bescheid.
__________________ --> Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card |
17.11.2013, 00:57 | #7 |
| Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Jap also es besteht weiterhin auch nach dem Neustart wenn ich Firefox über den Task Manager "abschiesse". Ich bin nicht sicher ob das bisher so richtig klar geworden ist aber das kein Tab im Firefox wenn ich ihn öffne, sondern ich starte Firefox (der geht ganz normal auf, mit meiner alten session/tabs) und DAZU öffnet sich diesen im Bild dargestellte zusätzliche Firefox fenster (welche sich wie gesagt nicht schließt wenn man firefox mit dem "X" beendet). Kann man aus den Log files bisher nix aussagekräftiges raus ziehen? Ich kenn mich zwar bisschen mit PCs aus aber log-files sind für mich trotzdem eher chinesisch ^^. Danke schonmal |
17.11.2013, 01:31 | #8 |
/// TB-Ausbilder | Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Hi, deaktiviere im Firefox die "Sitzungswiederherstellung nach einem Crash" genau wie hier beschrieben: Sitzungswiederherstellung | Hilfe zu Firefox Dann den Firefox wieder im Taskmanager abschiessen und neu starten. Besteht das Problem danach weiterhin?
__________________ cheers, Leo |
17.11.2013, 01:45 | #9 |
| Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Achje! Hätte ich eigentlich auch selber drauf kommen können! Hat echt funktioniert! Ganz vielen Dank! Jetzt is die frage ob das warklich nur ein nerviges Firefox fenster war das jetzt weg ist oder ob es eine tieferliegendes Problem gab/gibt das behoben werden muss? |
17.11.2013, 01:57 | #10 |
/// TB-Ausbilder | Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Ja ich hab im FRST-Log eben keinerlei Anhaltspunkte gesehen, dass sich da was tiefer eingegraben hat bei dir. Noch eine Kontrolle: ESET Online Scanner
__________________ cheers, Leo |
07.01.2014, 15:17 | #11 |
/// TB-Ausbilder | Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card Fehlende Rückmeldung Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten. Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
Themen zu Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card |
antivirus, avg, avg antivirus, branding, browser, defender, email, error, excel, farbar recovery scan tool, fehler, firefox, firefox 25.0.1, flash player, gebraucht, gesperrt, help, ihr browser hat gesperrt, log, problem, scan, schließen, security, server, software, system, trojaner/virus, usb, windows, windows xp, öffnet |