|
Plagegeister aller Art und deren Bekämpfung: Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunterWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
14.12.2013, 13:30 | #1 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Seit einem normalen Win7 Update vor 2 Tagen werden meine Minianwendungen teilweise nicht mehr bzw. fehlerhaft dargestellt. Die Uhr ist komplett weg und lässt sich auch nicht neu auf den Bildschirm ziehen. Die Wetter-Anwendung wird fehlerhaft dargestellt. Der Kalender wird ganz normal angezeigt. Des weiteren fiel mir auf, dass das System sich beim Herunterfahren aufhängt. "Bitte nicht ausschalten, Updates werden konfiguriert...." Der Kreis läuft und läuft und es passiert nichts. Ich habe weder verdächtige Websites besucht, noch unbekannte mails geöffnet. Als Sicherheitssystem benutze ich Norton 360° und installiere regelmäßig die Windows Updates. Vor 2 Tagen ist ein "Kumulatives Sicherheitsupdate für Internet Explorer 10 unter Windows 7 Service Pack 1" fehlgeschlagen. Allerdings dachte ich, es sei irrelevant da ich den IE nicht verwende. Ich bin ratlos und hoffe, dass mir hier jemand weiterhelfen kann. |
14.12.2013, 13:39 | #2 |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
14.12.2013, 14:02 | #3 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Ich habe die Dateien gescannt, weiß aber nicht wie ich sie hier posten soll. Sorry mache das zum ersten mal. Einfach Inhalt komplett kopieren und dann hier einfügen?
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2013 Ran by Verena (administrator) on VERENA-PC on 14-12-2013 13:47:57 Running from C:\Users\Verena\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccsvchst.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccsvchst.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (Spotify Ltd) C:\Users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files\ScanWizard 5\ScannerFinder.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated) HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1814440 2013-09-21] (Valve Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom) HKCU\...\Run: [Spotify] - C:\Users\Verena\AppData\Roaming\Spotify\spotify.exe [4752384 2013-11-02] (Spotify Ltd) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-11-02] (Spotify Ltd) Startup: C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation) BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.100.1 FireFox: ======== FF ProfilePath: C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default FF SearchEngineOrder.1: Google.com FF Homepage: https://www.google.de FF Keyword.URL: hxxp://websearch.google.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=E0DCF02E-3C03-4C84-BB1C-1C9850EFFBA8&apn_ptnrs=U3&apn_sauid=5BB63DAD-6AF8-49E2-9F65-A95A4C1ED668&apn_dtid=OSJ000YYDE&&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\searchplugins\safesearch.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: SQLiteManager - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi FF Extension: No Name - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\coFFPlgn\ FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\IPSFF ========================== Services (Whitelisted) ================= R2 N360; C:\Program Files\Norton 360\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation) ==================== Drivers (Whitelisted) ==================== R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-11-21] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-11-21] (Symantec Corporation) R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20131213.001\IDSvix86.sys [394456 2013-12-14] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20131213.018\NAVENG.SYS [93272 2013-08-29] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20131213.018\NAVEX15.SYS [1612376 2013-08-29] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\N360\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-19] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [339544 2013-04-25] (Symantec Corporation) R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-14 13:47 - 2013-12-14 13:48 - 00007668 _____ C:\Users\Verena\Desktop\FRST.txt 2013-12-14 13:47 - 2013-12-14 13:47 - 01060875 _____ (Farbar) C:\Users\Verena\Desktop\FRST.exe 2013-12-14 13:47 - 2013-12-14 13:47 - 00000000 ____D C:\FRST 2013-12-14 11:19 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-14 11:19 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-14 11:19 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-14 11:19 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-14 11:19 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-14 11:19 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-14 11:19 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-14 11:19 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-14 11:19 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-14 11:19 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-14 11:19 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-14 11:19 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-14 11:19 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-14 11:19 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-14 11:19 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-14 11:19 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-14 11:19 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-14 11:19 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-14 11:19 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-14 11:08 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-14 11:08 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-14 11:07 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-14 11:07 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-14 11:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-12-14 11:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-12-14 11:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-12-14 11:07 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-12-14 11:07 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-12-14 11:07 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-12-14 11:07 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-12-14 11:07 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-12-14 11:07 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-12-14 11:06 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-12-14 10:47 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-12-12 20:37 - 2013-12-12 20:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-12 20:37 - 2013-12-12 20:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-12 20:37 - 2013-12-12 20:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-12 20:37 - 2013-12-12 20:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-12 20:31 - 2013-12-12 20:43 - 00012246 _____ C:\Windows\IE11_main.log 2013-12-12 19:34 - 2013-12-14 09:45 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-12-11 17:39 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 17:39 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 17:39 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 17:39 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 17:39 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 17:39 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 17:39 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 17:39 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 17:39 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-04 17:02 - 2013-12-04 17:02 - 00019212 _____ C:\Users\Verena\Desktop\Nikolaus Gedicht.odt 2013-12-01 10:48 - 2013-12-01 10:48 - 00002705 _____ C:\Users\Public\Desktop\Playway 4 CD-ROM.lnk 2013-11-30 12:07 - 2013-11-30 12:14 - 00011409 _____ C:\Users\Verena\Desktop\Gruppe 2 Fortgeschrittene.odt 2013-11-30 12:01 - 2013-11-30 12:01 - 00010765 _____ C:\Users\Verena\Desktop\Gruppe 1 Anfänger.odt 2013-11-28 17:54 - 2013-11-28 17:54 - 00000000 ____D C:\Users\Verena\Documents\PagesConverter0.6 2013-11-24 19:23 - 2013-11-24 19:23 - 00001966 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk 2013-11-24 19:23 - 2013-11-24 19:23 - 00000000 ____D C:\Program Files\HP 2013-11-24 19:22 - 2013-11-24 19:23 - 06110144 _____ C:\Users\Verena\Downloads\HPPSdr.exe 2013-11-21 21:10 - 2013-11-21 21:10 - 00008253 _____ C:\Users\Verena\Unbenannt 1.odt 2013-11-17 08:05 - 2013-11-17 08:06 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2013-12-14 13:48 - 2013-12-14 13:47 - 00007668 _____ C:\Users\Verena\Desktop\FRST.txt 2013-12-14 13:47 - 2013-12-14 13:47 - 01060875 _____ (Farbar) C:\Users\Verena\Desktop\FRST.exe 2013-12-14 13:47 - 2013-12-14 13:47 - 00000000 ____D C:\FRST 2013-12-14 13:26 - 2013-05-12 14:14 - 02069077 _____ C:\Windows\WindowsUpdate.log 2013-12-14 13:21 - 2013-09-26 18:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-14 13:08 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-14 13:08 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-14 12:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-12-14 12:37 - 2013-11-02 18:17 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Spotify 2013-12-14 12:37 - 2013-10-02 17:27 - 00000000 ____D C:\Program Files\Steam 2013-12-14 12:35 - 2013-09-14 11:09 - 00003966 _____ C:\Windows\setupact.log 2013-12-14 12:35 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-14 12:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-12-14 12:33 - 2013-09-14 11:09 - 00088762 _____ C:\Windows\PFRO.log 2013-12-14 11:15 - 2013-05-12 14:17 - 01642430 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-14 10:36 - 2013-05-12 14:58 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-14 09:45 - 2013-12-12 19:34 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-12-14 09:44 - 2009-07-14 05:33 - 00291096 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-12 20:49 - 2013-09-16 14:21 - 00000000 ____D C:\Windows\system32\MRT 2013-12-12 20:45 - 2013-05-12 15:41 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-12 20:43 - 2013-12-12 20:31 - 00012246 _____ C:\Windows\IE11_main.log 2013-12-12 20:37 - 2013-12-12 20:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-12 20:37 - 2013-12-12 20:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-12 20:37 - 2013-12-12 20:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-12 20:37 - 2013-12-12 20:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-11 21:03 - 2013-05-20 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-12-11 21:03 - 2013-05-20 12:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-12-10 15:00 - 2013-05-15 14:07 - 00000000 ____D C:\Users\Verena\AppData\Roaming\vlc 2013-12-04 17:02 - 2013-12-04 17:02 - 00019212 _____ C:\Users\Verena\Desktop\Nikolaus Gedicht.odt 2013-12-03 14:39 - 2013-05-12 16:55 - 00000000 ____D C:\Users\Verena\Desktop\Schule 2013-12-03 14:12 - 2013-08-13 17:59 - 00000000 ____D C:\Users\Verena\AppData\Local\CrashDumps 2013-12-01 10:48 - 2013-12-01 10:48 - 00002705 _____ C:\Users\Public\Desktop\Playway 4 CD-ROM.lnk 2013-12-01 10:47 - 2013-10-30 10:33 - 00000000 ____D C:\Program Files\Klett 2013-11-30 12:14 - 2013-11-30 12:07 - 00011409 _____ C:\Users\Verena\Desktop\Gruppe 2 Fortgeschrittene.odt 2013-11-30 12:01 - 2013-11-30 12:01 - 00010765 _____ C:\Users\Verena\Desktop\Gruppe 1 Anfänger.odt 2013-11-28 17:54 - 2013-11-28 17:54 - 00000000 ____D C:\Users\Verena\Documents\PagesConverter0.6 2013-11-26 11:11 - 2013-12-14 11:19 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 10:23 - 2013-12-14 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 10:22 - 2013-12-14 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 09:53 - 2013-12-14 11:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 09:52 - 2013-12-14 11:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 09:38 - 2013-12-14 11:19 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 09:38 - 2013-12-14 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 09:36 - 2013-12-14 11:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 09:32 - 2013-12-14 11:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 09:29 - 2013-12-14 11:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 09:29 - 2013-12-14 11:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 09:28 - 2013-12-14 11:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:16 - 2013-12-14 11:19 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:13 - 2013-12-14 11:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 08:32 - 2013-12-14 11:19 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:26 - 2013-12-14 11:19 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 07:34 - 2013-12-14 11:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:33 - 2013-12-14 11:19 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:27 - 2013-12-14 11:19 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-24 19:23 - 2013-11-24 19:23 - 00001966 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk 2013-11-24 19:23 - 2013-11-24 19:23 - 00000000 ____D C:\Program Files\HP 2013-11-24 19:23 - 2013-11-24 19:22 - 06110144 _____ C:\Users\Verena\Downloads\HPPSdr.exe 2013-11-24 19:23 - 2013-05-13 14:09 - 00000000 ____D C:\ProgramData\HP 2013-11-23 19:26 - 2013-12-14 11:07 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-21 21:10 - 2013-11-21 21:10 - 00008253 _____ C:\Users\Verena\Unbenannt 1.odt 2013-11-21 21:10 - 2013-05-12 14:14 - 00000000 ____D C:\Users\Verena 2013-11-17 08:06 - 2013-11-17 08:05 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-28 22:49 ==================== End Of Log ============================ --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2013 Ran by Verena at 2013-12-14 13:49:03 Running from C:\Users\Verena\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton 360 (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton 360 (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton 360 (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} ==================== Installed Programs ====================== 3 Days: Zoo Mystery ABBYY FineReader OCR Engine für ScanWizard Adobe Flash Player 11 Plugin (Version: 11.9.900.170) Adobe Reader XI (11.0.02) - Deutsch (Version: 11.0.02) Ashampoo Burning Studio 2013 v.11.0.6 (Version: 11.0.6) Audacity 2.0.3 (Version: 2.0.3) Big Fish: Game Manager (Version: 3.2.0.6) CCleaner (Version: 3.25) Free Video to DVD Converter version 5.0.29.925 (Version: 5.0.29.925) Free YouTube to DVD Converter version 3.1.3.610 (Version: 3.1.3.610) Klassenmappe (HKCU Version: 3.0.2.0) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938) MozBackup 1.5.1 Mozilla Firefox 25.0.1 (x86 de) (Version: 25.0.1) Mozilla Maintenance Service (Version: 24.2.0) Mozilla Thunderbird 24.2.0 (x86 de) (Version: 24.2.0) Norton 360 (Version: 20.4.0.40) OpenOffice.org 3.2 (Version: 3.2.9483) Playway 3 (Version: 2.00.0000) Playway 4 (Version: 2.02.0000) ScanWizard 5 Spotify (HKCU Version: 0.9.4.185.g7545a404) Steam (Version: 1.0.0.0) The Clockwork Man TomTom HOME (Version: 2.9.7) TomTom HOME Visual Studio Merge Modules (Version: 1.0.2) VLC media player 1.0.5 (Version: 1.0.5) ==================== Restore Points ========================= 02-10-2013 16:26:06 Steam wird installiert 02-10-2013 16:26:52 Steam wird installiert 16-10-2013 18:23:48 Windows Update 24-10-2013 09:13:46 Installed TomTom HOME. 30-10-2013 09:33:32 Playway 3 wird installiert 30-10-2013 10:10:29 Windows-Sicherung 30-10-2013 10:27:36 Windows-Sicherung 14-11-2013 18:17:33 Windows Update 01-12-2013 09:37:27 Playway 4 wird installiert 01-12-2013 09:46:54 Playway 4 wird installiert 12-12-2013 19:31:00 Windows Update 14-12-2013 09:47:31 Windows Update 14-12-2013 10:07:59 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05E1348B-46D7-439E-A426-0B3B17C5AE1B} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360\Engine\20.4.0.40\symerr.exe [2013-06-04] (Symantec Corporation) Task: {08A3B6E0-1EDC-466D-83A2-A68218335C82} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360\Engine\20.4.0.40\wscstub.exe [2013-06-04] (Symantec Corporation) Task: {AB1D7DB8-9EF1-4154-BF5F-6A8F820767A7} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Engine\20.4.0.40\symerr.exe [2013-06-04] (Symantec Corporation) Task: {D3CC1759-3A25-4146-8E38-2579279C18D9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-11-23] (Piriform Ltd) Task: {F3D40D4D-F28D-4A30-99E7-19254ED28B0F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-06-11 14:53 - 2012-05-30 07:51 - 00699280 ____R () C:\PROGRAM FILES\NORTON 360\ENGINE\20.4.0.40\wincfi39.dll 2013-05-31 19:18 - 2007-01-05 13:05 - 00249856 _____ () C:\Program Files\ScanWizard 5\SFRes.dll 2009-10-20 20:02 - 2009-10-20 20:02 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll 2013-11-17 08:05 - 2013-11-17 08:06 - 03363952 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2013-06-11 14:53 - 2012-05-30 07:51 - 00699280 ____R () C:\Program Files\Norton 360\Engine\20.4.0.40\wincfi39.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F AlternateDataStreams: C:\ProgramData\TEMP:D5E0200E AlternateDataStreams: C:\ProgramData\TEMP:E1D06077 AlternateDataStreams: C:\ProgramData\TEMP:EF5B3572 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (12/14/2013 11:16:32 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (12/14/2013 11:16:31 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (12/14/2013 11:16:31 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (12/14/2013 11:16:31 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (12/14/2013 11:16:30 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (12/14/2013 11:16:30 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (12/14/2013 11:16:30 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (12/14/2013 11:16:29 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (12/14/2013 11:16:29 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (12/14/2013 11:16:29 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System errors: ============= Error: (12/14/2013 00:35:07 PM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Error: (12/14/2013 00:33:30 PM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Error: (12/14/2013 00:33:47 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 14.12.2013 um 12:31:56 unerwartet heruntergefahren. Error: (12/14/2013 10:58:26 AM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Error: (12/14/2013 10:57:08 AM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Error: (12/14/2013 10:57:15 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 14.12.2013 um 10:54:13 unerwartet heruntergefahren. Error: (12/14/2013 10:36:14 AM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Error: (12/14/2013 09:47:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 10 unter Windows 7 Service Pack 1 (KB2898785) Error: (12/14/2013 09:44:02 AM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Error: (12/14/2013 09:41:51 AM) (Source: Ntfs) (User: ) Description: Auf dem Volume "D:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten. Microsoft Office Sessions: ========================= Error: (12/14/2013 11:16:32 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/14/2013 11:16:31 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/14/2013 11:16:31 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/14/2013 11:16:31 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/14/2013 11:16:30 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/14/2013 11:16:30 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/14/2013 11:16:30 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/14/2013 11:16:29 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/14/2013 11:16:29 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/14/2013 11:16:29 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 ==================== Memory info =========================== Percentage of memory in use: 41% Total physical RAM: 3004.87 MB Available physical RAM: 1768.62 MB Total Pagefile: 6008.03 MB Available Pagefile: 4874.17 MB Total Virtual: 2047.88 MB Available Virtual: 1906.21 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:464.56 GB) (Free:417.62 GB) NTFS Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C5FB3B05) Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=465 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) ==================== End Of Log ============================ |
15.12.2013, 07:25 | #4 | |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunterCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
15.12.2013, 18:33 | #5 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Ich hoffe ich habe alles richtig gemacht. Norton ließ sich nicht so leicht deaktivieren, hoffe es war ok so. Hier die logfile Code:
ATTFilter ComboFix 13-12-13.01 - Verena 15.12.2013 18:12:08.1.2 - x86 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3005.1575 [GMT 1:00] ausgeführt von:: c:\users\Verena\Desktop\ComboFix.exe AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((( Dateien erstellt von 2013-11-15 bis 2013-12-15 )))))))))))))))))))))))))))))) . . 2013-12-15 17:19 . 2013-12-15 17:19 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-12-14 12:47 . 2013-12-14 12:47 -------- d-----w- C:\FRST 2013-12-14 10:12 . 2013-12-14 10:12 -------- d-----w- c:\windows\Migration 2013-12-14 10:08 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\system32\wmploc.DLL 2013-12-14 10:08 . 2013-05-10 03:48 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2013-12-14 10:07 . 2013-11-23 18:26 417792 ----a-w- c:\windows\system32\WMPhoto.dll 2013-12-14 10:07 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll 2013-12-14 10:07 . 2013-10-04 01:58 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll 2013-12-14 10:07 . 2013-10-04 01:56 168960 ----a-w- c:\windows\system32\credui.dll 2013-12-14 10:07 . 2013-10-04 01:56 1796096 ----a-w- c:\windows\system32\authui.dll 2013-12-14 10:07 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll 2013-12-14 10:07 . 2013-08-28 00:57 434688 ----a-w- c:\windows\system32\scavengeui.dll 2013-12-14 10:07 . 2013-10-30 02:19 301568 ----a-w- c:\windows\system32\msieftp.dll 2013-12-14 10:07 . 2013-07-04 11:57 205824 ----a-w- c:\windows\system32\WebClnt.dll 2013-12-14 10:07 . 2013-07-04 11:51 81920 ----a-w- c:\windows\system32\davclnt.dll 2013-12-14 10:07 . 2013-07-04 09:48 115712 ----a-w- c:\windows\system32\drivers\mrxdav.sys 2013-12-14 10:06 . 2013-08-05 01:56 133056 ----a-w- c:\windows\system32\drivers\ataport.sys 2013-12-14 09:47 . 2013-09-04 01:15 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys 2013-12-14 09:47 . 2013-09-04 01:14 76288 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2013-12-14 09:47 . 2013-09-04 01:14 284672 ----a-w- c:\windows\system32\drivers\usbport.sys 2013-12-14 09:47 . 2013-09-04 01:14 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys 2013-12-14 09:47 . 2013-09-04 01:14 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2013-12-14 09:47 . 2013-09-04 01:14 6016 ----a-w- c:\windows\system32\drivers\usbd.sys 2013-12-14 09:47 . 2013-09-04 01:14 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys 2013-12-12 19:36 . 2013-12-12 19:36 640512 ----a-w- c:\windows\system32\advapi32.dll 2013-12-12 19:36 . 2013-12-12 19:36 619520 ----a-w- c:\windows\system32\tdh.dll 2013-12-12 19:36 . 2013-12-12 19:36 3969472 ----a-w- c:\windows\system32\ntkrnlpa.exe 2013-12-12 19:36 . 2013-12-12 19:36 3914176 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-12-12 19:36 . 2013-12-12 19:36 1289096 ----a-w- c:\windows\system32\ntdll.dll 2013-12-12 19:35 . 2013-12-12 19:35 338944 ----a-w- c:\windows\system32\drivers\afd.sys 2013-12-12 19:35 . 2013-12-12 19:35 231424 ----a-w- c:\windows\system32\mswsock.dll 2013-12-12 19:35 . 2013-12-12 19:35 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-12-12 19:35 . 2013-12-12 19:35 1505280 ----a-w- c:\windows\system32\d3d11.dll 2013-12-12 18:34 . 2013-12-14 08:45 -------- d-----w- c:\program files\Mozilla Thunderbird 2013-12-11 16:39 . 2013-10-19 01:36 159232 ----a-w- c:\windows\system32\imagehlp.dll 2013-12-11 16:39 . 2013-10-12 02:04 121856 ----a-w- c:\windows\system32\wshom.ocx 2013-12-11 16:39 . 2013-10-12 02:03 163840 ----a-w- c:\windows\system32\scrrun.dll 2013-12-11 16:39 . 2013-10-12 01:15 141824 ----a-w- c:\windows\system32\wscript.exe 2013-12-11 16:39 . 2013-10-12 01:15 126976 ----a-w- c:\windows\system32\cscript.exe 2013-12-11 16:39 . 2013-11-12 02:07 2048 ----a-w- c:\windows\system32\tzres.dll 2013-12-11 16:39 . 2013-10-30 01:27 2349056 ----a-w- c:\windows\system32\win32k.sys 2013-12-11 16:39 . 2013-10-04 01:49 81408 ----a-w- c:\windows\system32\drivers\drmk.sys 2013-12-11 16:39 . 2013-10-04 01:17 177152 ----a-w- c:\windows\system32\drivers\portcls.sys 2013-11-24 18:23 . 2013-11-24 18:23 -------- d-----w- c:\program files\HP . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-11 20:03 . 2013-05-20 11:11 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-12-11 20:03 . 2013-05-20 11:11 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-10-12 02:03 . 2013-11-13 14:05 656896 ----a-w- c:\windows\system32\nshwfp.dll 2013-10-12 02:01 . 2013-11-13 14:05 679424 ----a-w- c:\windows\system32\IKEEXT.DLL 2013-10-12 02:01 . 2013-11-13 14:05 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL 2013-10-05 19:57 . 2013-11-13 14:05 1168384 ----a-w- c:\windows\system32\crypt32.dll 2013-10-03 01:58 . 2013-11-13 14:05 305152 ----a-w- c:\windows\system32\gdi32.dll 2013-09-25 02:01 . 2013-11-13 14:05 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2013-09-25 02:01 . 2013-11-13 14:05 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2013-09-25 01:57 . 2013-11-13 14:05 99840 ----a-w- c:\windows\system32\sspicli.dll 2013-09-25 01:57 . 2013-11-13 14:05 22016 ----a-w- c:\windows\system32\secur32.dll 2013-09-25 01:57 . 2013-11-13 14:05 247808 ----a-w- c:\windows\system32\schannel.dll 2013-09-25 01:56 . 2013-11-13 14:05 220160 ----a-w- c:\windows\system32\ncrypt.dll 2013-09-25 01:56 . 2013-11-13 14:05 1038848 ----a-w- c:\windows\system32\lsasrv.dll 2013-09-25 00:49 . 2013-11-13 14:05 22016 ----a-w- c:\windows\system32\lsass.exe 2013-09-25 00:49 . 2013-11-13 14:05 15872 ----a-w- c:\windows\system32\sspisrv.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] 2013-06-10 16:19 279560 ----a-w- c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] "Steam"="c:\program files\Steam\Steam.exe" [2013-09-21 1814440] "RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2013-08-27 248208] "Spotify"="c:\users\Verena\AppData\Roaming\Spotify\Spotify.exe" [2013-11-02 4752384] "Spotify Web Helper"="c:\users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-11-02 1140736] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-18 946352] . c:\users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-12-15 384000] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Scanner Finder.lnk - c:\program files\ScanWizard 5\ScannerFinder.exe [2013-5-31 339968] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\1404000.028\SYMDS.SYS [2013-05-21 367704] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\1404000.028\SYMEFA.SYS [2013-05-23 934488] S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [2013-12-03 1098968] S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360\1404000.028\ccSetx86.sys [2013-04-16 134744] S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20131213.001\IDSvix86.sys [2013-12-14 394456] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\1404000.028\Ironx86.SYS [2013-03-05 175264] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [2013-04-25 339544] S2 N360;Norton 360;c:\program files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-05-21 144368] S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-11-21 108120] S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [2010-04-01 1009184] S3 yukonw7;NDIS6.2-Miniporttreiber für Marvell Yukon-Ethernet-Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296] . . Inhalt des "geplante Tasks" Ordners . 2013-12-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-20 20:03] . . ------- Zusätzlicher Suchlauf ------- . IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Free YouTube to DVD Converter - c:\users\Verena\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetodvdconverter.htm IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll TCP: DhcpNameServer = 192.168.100.1 FF - ProfilePath - c:\users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\ FF - prefs.js: browser.startup.homepage - hxxps://www.google.de FF - prefs.js: keyword.URL - hxxp://websearch.google.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=E0DCF02E-3C03-4C84-BB1C-1C9850EFFBA8&apn_ptnrs=U3&apn_sauid=5BB63DAD-6AF8-49E2-9F65-A95A4C1ED668&apn_dtid=OSJ000YYDE&&q= . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360] "ImagePath"="\"c:\program files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\20.4.0.40\diMaster.dll\" /prefetch:1" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-12-15 18:25:19 ComboFix-quarantined-files.txt 2013-12-15 17:25 . Vor Suchlauf: 8 Verzeichnis(se), 448.051.617.792 Bytes frei Nach Suchlauf: 11 Verzeichnis(se), 447.725.899.776 Bytes frei . - - End Of File - - 1B99EED4C0D3F255D4AF1351C7F8CC8C A36C5E4F47E84449FF07ED3517B43A31 |
16.12.2013, 11:34 | #6 |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter |
16.12.2013, 20:02 | #7 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Hier die erste Logfile Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.16.06 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16476 Verena :: VERENA-PC [Administrator] 16.12.2013 19:09:00 mbam-log-2013-12-16 (19-09-00).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 199336 Laufzeit: 5 Minute(n), 13 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\Verena\Desktop\FreeVideoToDVDConverter.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Die restlichen poste ich gleich. Hier die zweite, von adwcleaner Code:
ATTFilter # AdwCleaner v3.015 - Bericht erstellt am 16/12/2013 um 19:31:20 # Updated 10/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits) # Benutzername : Verena - VERENA-PC # Gestartet von : C:\Users\Verena\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\Verena\AppData\Roaming\dvdvideosoftiehelpers Datei Gelöscht : C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\searchplugins\safesearch.xml ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki Schlüssel Gelöscht : HKCU\Software\Classes\Directory\shell\pokki Schlüssel Gelöscht : HKCU\Software\Classes\Drive\shell\pokki Schlüssel Gelöscht : HKCU\Software\Classes\lnkfile\shell\pokki Schlüssel Gelöscht : HKCU\Software\Classes\pokki Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v25.0.1 (de) [ Datei : C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\prefs.js ] Zeile gelöscht : user_pref("icqtoolbar.allowSendURL", false); Zeile gelöscht : user_pref("icqtoolbar.engineVerified", true); Zeile gelöscht : user_pref("icqtoolbar.hiddenElements", "itb_options"); Zeile gelöscht : user_pref("icqtoolbar.history", "icq%20toolbar%20deinstallieren"); Zeile gelöscht : user_pref("icqtoolbar.installTime", "1279915792"); Zeile gelöscht : user_pref("icqtoolbar.newtab_state", "1"); Zeile gelöscht : user_pref("icqtoolbar.numberOfSearches", 0); Zeile gelöscht : user_pref("icqtoolbar.skip_default_search", "no"); Zeile gelöscht : user_pref("icqtoolbar.suggestions", false); Zeile gelöscht : user_pref("icqtoolbar.uninstStatSent", true); Zeile gelöscht : user_pref("icqtoolbar.uniqueID", "127990874612799092271279915792089"); Zeile gelöscht : user_pref("icqtoolbar.usageStatstTimestamp", 1279915794); Zeile gelöscht : user_pref("icqtoolbar.xmlEnableSuggestions", false); Zeile gelöscht : user_pref("icqtoolbar.xmlLanguage", "de"); Zeile gelöscht : user_pref("keyword.URL", "hxxp://websearch.google.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=E0DCF02E-3C03-4C84-BB1C-1C9850EFFBA8&apn_ptnrs=U3&apn_sauid=5BB63DAD-6AF8-49E2-9F65-A95A4C1ED6[...] ************************* AdwCleaner[R0].txt - [3093 octets] - [16/12/2013 19:25:58] AdwCleaner[S0].txt - [3016 octets] - [16/12/2013 19:31:20] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3076 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 7 Home Premium x86 Ran by Verena on 16.12.2013 at 19:43:58,59 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\big fish" Successfully deleted: [Folder] "C:\Users\Verena\appdata\local\big fish" Successfully deleted: [Folder] "C:\bigfishcache" ~~~ FireFox Emptied folder: C:\Users\Verena\AppData\Roaming\mozilla\firefox\profiles\n3p6m2oj.default\minidumps [29 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 16.12.2013 at 19:47:10,60 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-12-2013 02 Ran by Verena (administrator) on VERENA-PC on 16-12-2013 19:52:08 Running from C:\Users\Verena\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccsvchst.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccsvchst.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (Spotify Ltd) C:\Users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files\ScanWizard 5\ScannerFinder.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated) HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1814440 2013-09-21] (Valve Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom) HKCU\...\Run: [Spotify] - C:\Users\Verena\AppData\Roaming\Spotify\spotify.exe [4752384 2013-11-02] (Spotify Ltd) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-11-02] (Spotify Ltd) Startup: C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.100.1 FireFox: ======== FF ProfilePath: C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default FF SearchEngineOrder.1: Google.com FF Homepage: https://www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: SQLiteManager - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi FF Extension: No Name - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\coFFPlgn\ FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\IPSFF ========================== Services (Whitelisted) ================= R2 N360; C:\Program Files\Norton 360\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation) ==================== Drivers (Whitelisted) ==================== R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-11-21] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-11-21] (Symantec Corporation) R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20131213.001\IDSvix86.sys [394456 2013-12-14] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20131215.005\NAVENG.SYS [93272 2013-08-29] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20131215.005\NAVEX15.SYS [1612376 2013-08-29] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\N360\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-19] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [339544 2013-04-25] (Symantec Corporation) R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Verena\AppData\Local\Temp\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-16 19:51 - 2013-12-16 19:51 - 00000000 ____D C:\Users\Verena\Desktop\FRST-OlderVersion 2013-12-16 19:47 - 2013-12-16 19:47 - 00000942 _____ C:\Users\Verena\Desktop\JRT.txt 2013-12-16 19:43 - 2013-12-16 19:43 - 00000000 ____D C:\Windows\ERUNT 2013-12-16 19:42 - 2013-12-16 19:42 - 01034531 _____ (Thisisu) C:\Users\Verena\Desktop\JRT.exe 2013-12-16 19:25 - 2013-12-16 19:31 - 00000000 ____D C:\AdwCleaner 2013-12-16 19:23 - 2013-12-16 19:23 - 01226750 _____ C:\Users\Verena\Desktop\adwcleaner.exe 2013-12-16 19:06 - 2013-12-16 19:06 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-16 19:05 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-16 19:03 - 2013-12-16 19:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Verena\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-15 18:25 - 2013-12-15 18:25 - 00011500 _____ C:\ComboFix.txt 2013-12-15 18:10 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-12-15 18:10 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-12-15 18:10 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-12-15 18:04 - 2013-12-15 18:25 - 00000000 ____D C:\Qoobox 2013-12-15 18:03 - 2013-12-15 18:23 - 00000000 ____D C:\Windows\erdnt 2013-12-15 18:01 - 2013-12-15 18:03 - 05154339 ____R (Swearware) C:\Users\Verena\Desktop\ComboFix.exe 2013-12-14 13:49 - 2013-12-14 13:49 - 00015704 _____ C:\Users\Verena\Desktop\Addition.txt 2013-12-14 13:47 - 2013-12-16 19:52 - 00007478 _____ C:\Users\Verena\Desktop\FRST.txt 2013-12-14 13:47 - 2013-12-16 19:51 - 01060997 _____ (Farbar) C:\Users\Verena\Desktop\FRST.exe 2013-12-14 13:47 - 2013-12-16 19:51 - 00000000 ____D C:\FRST 2013-12-14 11:19 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-14 11:19 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-14 11:19 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-14 11:19 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-14 11:19 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-14 11:19 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-14 11:19 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-14 11:19 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-14 11:19 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-14 11:19 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-14 11:19 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-14 11:19 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-14 11:19 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-14 11:19 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-14 11:19 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-14 11:19 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-14 11:19 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-14 11:19 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-14 11:19 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-14 11:08 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-14 11:08 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-14 11:07 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-14 11:07 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-14 11:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-12-14 11:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-12-14 11:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-12-14 11:07 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-12-14 11:07 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-12-14 11:07 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-12-14 11:07 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-12-14 11:07 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-12-14 11:07 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-12-14 11:06 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-12-14 10:47 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-12-12 20:37 - 2013-12-12 20:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-12 20:37 - 2013-12-12 20:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-12 20:37 - 2013-12-12 20:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-12 20:37 - 2013-12-12 20:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-12 20:31 - 2013-12-12 20:43 - 00012246 _____ C:\Windows\IE11_main.log 2013-12-12 19:34 - 2013-12-14 09:45 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-12-11 17:39 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 17:39 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 17:39 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 17:39 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 17:39 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 17:39 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 17:39 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 17:39 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 17:39 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-01 10:48 - 2013-12-01 10:48 - 00002705 _____ C:\Users\Public\Desktop\Playway 4 CD-ROM.lnk 2013-11-28 17:54 - 2013-11-28 17:54 - 00000000 ____D C:\Users\Verena\Documents\PagesConverter0.6 2013-11-24 19:23 - 2013-11-24 19:23 - 00001966 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk 2013-11-24 19:23 - 2013-11-24 19:23 - 00000000 ____D C:\Program Files\HP 2013-11-24 19:22 - 2013-11-24 19:23 - 06110144 _____ C:\Users\Verena\Downloads\HPPSdr.exe 2013-11-21 21:10 - 2013-11-21 21:10 - 00008253 _____ C:\Users\Verena\Unbenannt 1.odt 2013-11-17 08:05 - 2013-11-17 08:06 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2013-12-16 19:52 - 2013-12-14 13:47 - 00007478 _____ C:\Users\Verena\Desktop\FRST.txt 2013-12-16 19:51 - 2013-12-16 19:51 - 00000000 ____D C:\Users\Verena\Desktop\FRST-OlderVersion 2013-12-16 19:51 - 2013-12-14 13:47 - 01060997 _____ (Farbar) C:\Users\Verena\Desktop\FRST.exe 2013-12-16 19:51 - 2013-12-14 13:47 - 00000000 ____D C:\FRST 2013-12-16 19:47 - 2013-12-16 19:47 - 00000942 _____ C:\Users\Verena\Desktop\JRT.txt 2013-12-16 19:43 - 2013-12-16 19:43 - 00000000 ____D C:\Windows\ERUNT 2013-12-16 19:42 - 2013-12-16 19:42 - 01034531 _____ (Thisisu) C:\Users\Verena\Desktop\JRT.exe 2013-12-16 19:40 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-16 19:40 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-16 19:36 - 2013-05-12 14:14 - 02095198 _____ C:\Windows\WindowsUpdate.log 2013-12-16 19:33 - 2013-11-02 18:17 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Spotify 2013-12-16 19:33 - 2013-10-02 17:27 - 00000000 ____D C:\Program Files\Steam 2013-12-16 19:32 - 2013-09-14 11:09 - 00091028 _____ C:\Windows\PFRO.log 2013-12-16 19:32 - 2013-09-14 11:09 - 00004022 _____ C:\Windows\setupact.log 2013-12-16 19:32 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-16 19:31 - 2013-12-16 19:25 - 00000000 ____D C:\AdwCleaner 2013-12-16 19:23 - 2013-12-16 19:23 - 01226750 _____ C:\Users\Verena\Desktop\adwcleaner.exe 2013-12-16 19:21 - 2013-09-26 18:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-16 19:06 - 2013-12-16 19:06 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-16 19:03 - 2013-12-16 19:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Verena\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-15 18:29 - 2013-05-12 14:15 - 00000000 ____D C:\Users\Verena\AppData\Local\Apps\2.0 2013-12-15 18:25 - 2013-12-15 18:25 - 00011500 _____ C:\ComboFix.txt 2013-12-15 18:25 - 2013-12-15 18:04 - 00000000 ____D C:\Qoobox 2013-12-15 18:25 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default 2013-12-15 18:25 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public 2013-12-15 18:23 - 2013-12-15 18:03 - 00000000 ____D C:\Windows\erdnt 2013-12-15 18:19 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini 2013-12-15 18:03 - 2013-12-15 18:01 - 05154339 ____R (Swearware) C:\Users\Verena\Desktop\ComboFix.exe 2013-12-15 17:51 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-12-14 17:35 - 2013-05-12 16:55 - 00000000 ____D C:\Users\Verena\Desktop\Schule 2013-12-14 13:49 - 2013-12-14 13:49 - 00015704 _____ C:\Users\Verena\Desktop\Addition.txt 2013-12-14 12:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-12-14 11:15 - 2013-05-12 14:17 - 01642430 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-14 10:36 - 2013-05-12 14:58 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-14 09:45 - 2013-12-12 19:34 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-12-14 09:44 - 2009-07-14 05:33 - 00291096 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-12 20:49 - 2013-09-16 14:21 - 00000000 ____D C:\Windows\system32\MRT 2013-12-12 20:45 - 2013-05-12 15:41 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-12 20:43 - 2013-12-12 20:31 - 00012246 _____ C:\Windows\IE11_main.log 2013-12-12 20:37 - 2013-12-12 20:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-12 20:37 - 2013-12-12 20:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-12 20:37 - 2013-12-12 20:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-12 20:37 - 2013-12-12 20:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-11 21:03 - 2013-05-20 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-12-11 21:03 - 2013-05-20 12:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-12-10 15:00 - 2013-05-15 14:07 - 00000000 ____D C:\Users\Verena\AppData\Roaming\vlc 2013-12-03 14:12 - 2013-08-13 17:59 - 00000000 ____D C:\Users\Verena\AppData\Local\CrashDumps 2013-12-01 10:48 - 2013-12-01 10:48 - 00002705 _____ C:\Users\Public\Desktop\Playway 4 CD-ROM.lnk 2013-12-01 10:47 - 2013-10-30 10:33 - 00000000 ____D C:\Program Files\Klett 2013-11-28 17:54 - 2013-11-28 17:54 - 00000000 ____D C:\Users\Verena\Documents\PagesConverter0.6 2013-11-26 11:11 - 2013-12-14 11:19 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 10:23 - 2013-12-14 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 10:22 - 2013-12-14 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 09:53 - 2013-12-14 11:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 09:52 - 2013-12-14 11:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 09:38 - 2013-12-14 11:19 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 09:38 - 2013-12-14 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 09:36 - 2013-12-14 11:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 09:32 - 2013-12-14 11:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 09:29 - 2013-12-14 11:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 09:29 - 2013-12-14 11:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 09:28 - 2013-12-14 11:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:16 - 2013-12-14 11:19 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:13 - 2013-12-14 11:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 08:32 - 2013-12-14 11:19 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:26 - 2013-12-14 11:19 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 07:34 - 2013-12-14 11:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:33 - 2013-12-14 11:19 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:27 - 2013-12-14 11:19 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-24 19:23 - 2013-11-24 19:23 - 00001966 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk 2013-11-24 19:23 - 2013-11-24 19:23 - 00000000 ____D C:\Program Files\HP 2013-11-24 19:23 - 2013-11-24 19:22 - 06110144 _____ C:\Users\Verena\Downloads\HPPSdr.exe 2013-11-24 19:23 - 2013-05-13 14:09 - 00000000 ____D C:\ProgramData\HP 2013-11-23 19:26 - 2013-12-14 11:07 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-21 21:10 - 2013-11-21 21:10 - 00008253 _____ C:\Users\Verena\Unbenannt 1.odt 2013-11-21 21:10 - 2013-05-12 14:14 - 00000000 ____D C:\Users\Verena 2013-11-17 08:06 - 2013-11-17 08:05 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-28 22:49 ==================== End Of Log ============================ --- --- --- Vielen Dank bisher! |
17.12.2013, 10:38 | #8 |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunterESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.12.2013, 17:26 | #9 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunterCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=bcc54d764ffb5344add212c7cad0807f # engine=16298 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-17 03:49:06 # local_time=2013-12-17 04:49:06 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=3592 16777213 100 93 278114 137957842 0 0 # compatibility_mode=5893 16776574 66 85 13311312 138926537 0 0 # scanned=131345 # found=1 # cleaned=0 # scan_time=11809 sh=14CBAF27CA0549CA8C19DFCE6906FBD50CEC36C9 ft=1 fh=962605af7bec1ee5 vn="Win32/Adware.1ClickDownload.AM application" ac=I fn="F:\Downloads\Smash.S01E14.exe" Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED! FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-12-2013 01 Ran by Verena (administrator) on VERENA-PC on 17-12-2013 17:02:29 Running from C:\Users\Verena\Desktop Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccsvchst.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (Symantec Corporation) C:\Program Files\Norton 360\Engine\20.4.0.40\ccsvchst.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (Spotify Ltd) C:\Users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files\ScanWizard 5\ScannerFinder.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated) HKCU\...\Run: [Steam] - C:\Program Files\Steam\Steam.exe [1814440 2013-09-21] (Valve Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom) HKCU\...\Run: [Spotify] - C:\Users\Verena\AppData\Roaming\Spotify\spotify.exe [4752384 2013-11-02] (Spotify Ltd) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Verena\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-11-02] (Spotify Ltd) Startup: C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\ips\ipsbho.dll (Symantec Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coieplg.dll (Symantec Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.100.1 FireFox: ======== FF ProfilePath: C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default FF SearchEngineOrder.1: Google.com FF Homepage: https://www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: SQLiteManager - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi FF Extension: No Name - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\n3p6m2oj.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\coFFPlgn\ FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\IPSFF ========================== Services (Whitelisted) ================= R2 N360; C:\Program Files\Norton 360\Engine\20.4.0.40\diMaster.dll [556336 2013-05-30] (Symantec Corporation) ==================== Drivers (Whitelisted) ==================== R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [134744 2013-04-16] (Symantec Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-11-21] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-11-21] (Symantec Corporation) R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20131216.001\IDSvix86.sys [394456 2013-12-14] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20131216.038\NAVENG.SYS [93272 2013-08-29] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20131216.038\NAVEX15.SYS [1612376 2013-08-29] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\N360\1404000.028\SRTSP.SYS [603224 2013-05-16] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [32344 2013-03-05] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360\1404000.028\SYMDS.SYS [367704 2013-05-21] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360\1404000.028\SYMEFA.SYS [934488 2013-05-23] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-06-19] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [175264 2013-03-05] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [339544 2013-04-25] (Symantec Corporation) R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Verena\AppData\Local\Temp\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-17 16:57 - 2013-12-17 16:57 - 00891200 _____ C:\Users\Verena\Desktop\SecurityCheck.exe 2013-12-17 13:27 - 2013-12-17 13:27 - 02347384 _____ (ESET) C:\Users\Verena\Desktop\esetsmartinstaller_enu.exe 2013-12-16 19:51 - 2013-12-17 17:02 - 00000000 ____D C:\Users\Verena\Desktop\FRST-OlderVersion 2013-12-16 19:47 - 2013-12-16 19:47 - 00000942 _____ C:\Users\Verena\Desktop\JRT.txt 2013-12-16 19:43 - 2013-12-16 19:43 - 00000000 ____D C:\Windows\ERUNT 2013-12-16 19:42 - 2013-12-16 19:42 - 01034531 _____ (Thisisu) C:\Users\Verena\Desktop\JRT.exe 2013-12-16 19:25 - 2013-12-16 19:31 - 00000000 ____D C:\AdwCleaner 2013-12-16 19:23 - 2013-12-16 19:23 - 01226750 _____ C:\Users\Verena\Desktop\adwcleaner.exe 2013-12-16 19:06 - 2013-12-16 19:06 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-16 19:05 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-16 19:03 - 2013-12-16 19:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Verena\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-15 18:25 - 2013-12-15 18:25 - 00011500 _____ C:\ComboFix.txt 2013-12-15 18:10 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-12-15 18:10 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-12-15 18:10 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-12-15 18:10 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-12-15 18:04 - 2013-12-15 18:25 - 00000000 ____D C:\Qoobox 2013-12-15 18:03 - 2013-12-15 18:23 - 00000000 ____D C:\Windows\erdnt 2013-12-15 18:01 - 2013-12-15 18:03 - 05154339 ____R (Swearware) C:\Users\Verena\Desktop\ComboFix.exe 2013-12-14 13:49 - 2013-12-14 13:49 - 00015704 _____ C:\Users\Verena\Desktop\Addition.txt 2013-12-14 13:47 - 2013-12-17 17:02 - 01061167 _____ (Farbar) C:\Users\Verena\Desktop\FRST.exe 2013-12-14 13:47 - 2013-12-17 17:02 - 00007402 _____ C:\Users\Verena\Desktop\FRST.txt 2013-12-14 13:47 - 2013-12-17 17:02 - 00000000 ____D C:\FRST 2013-12-14 11:19 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-14 11:19 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-14 11:19 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-14 11:19 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-14 11:19 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-14 11:19 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-14 11:19 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-14 11:19 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-14 11:19 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-14 11:19 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-14 11:19 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-14 11:19 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-14 11:19 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-14 11:19 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-14 11:19 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-14 11:19 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-14 11:19 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-14 11:19 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-14 11:19 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-14 11:08 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-14 11:08 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-14 11:07 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-14 11:07 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-14 11:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-12-14 11:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-12-14 11:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-12-14 11:07 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-12-14 11:07 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-12-14 11:07 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-12-14 11:07 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-12-14 11:07 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-12-14 11:07 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-12-14 11:06 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-12-14 10:47 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-12-14 10:47 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-12-12 20:37 - 2013-12-12 20:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-12 20:37 - 2013-12-12 20:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-12 20:37 - 2013-12-12 20:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-12 20:37 - 2013-12-12 20:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-12 20:31 - 2013-12-12 20:43 - 00012246 _____ C:\Windows\IE11_main.log 2013-12-12 19:34 - 2013-12-14 09:45 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-12-11 17:39 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 17:39 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 17:39 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 17:39 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 17:39 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 17:39 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 17:39 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 17:39 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 17:39 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-01 10:48 - 2013-12-01 10:48 - 00002705 _____ C:\Users\Public\Desktop\Playway 4 CD-ROM.lnk 2013-11-28 17:54 - 2013-11-28 17:54 - 00000000 ____D C:\Users\Verena\Documents\PagesConverter0.6 2013-11-24 19:23 - 2013-11-24 19:23 - 00001966 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk 2013-11-24 19:23 - 2013-11-24 19:23 - 00000000 ____D C:\Program Files\HP 2013-11-24 19:22 - 2013-11-24 19:23 - 06110144 _____ C:\Users\Verena\Downloads\HPPSdr.exe 2013-11-21 21:10 - 2013-11-21 21:10 - 00008253 _____ C:\Users\Verena\Unbenannt 1.odt 2013-11-17 08:05 - 2013-11-17 08:06 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2013-12-17 17:02 - 2013-12-16 19:51 - 00000000 ____D C:\Users\Verena\Desktop\FRST-OlderVersion 2013-12-17 17:02 - 2013-12-14 13:47 - 01061167 _____ (Farbar) C:\Users\Verena\Desktop\FRST.exe 2013-12-17 17:02 - 2013-12-14 13:47 - 00007402 _____ C:\Users\Verena\Desktop\FRST.txt 2013-12-17 17:02 - 2013-12-14 13:47 - 00000000 ____D C:\FRST 2013-12-17 16:57 - 2013-12-17 16:57 - 00891200 _____ C:\Users\Verena\Desktop\SecurityCheck.exe 2013-12-17 16:28 - 2013-09-26 18:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-17 16:28 - 2013-05-12 14:14 - 01056710 _____ C:\Windows\WindowsUpdate.log 2013-12-17 13:28 - 2013-05-12 14:17 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-17 13:27 - 2013-12-17 13:27 - 02347384 _____ (ESET) C:\Users\Verena\Desktop\esetsmartinstaller_enu.exe 2013-12-16 19:47 - 2013-12-16 19:47 - 00000942 _____ C:\Users\Verena\Desktop\JRT.txt 2013-12-16 19:43 - 2013-12-16 19:43 - 00000000 ____D C:\Windows\ERUNT 2013-12-16 19:42 - 2013-12-16 19:42 - 01034531 _____ (Thisisu) C:\Users\Verena\Desktop\JRT.exe 2013-12-16 19:40 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-16 19:40 - 2009-07-14 05:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-16 19:33 - 2013-11-02 18:17 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Spotify 2013-12-16 19:33 - 2013-10-02 17:27 - 00000000 ____D C:\Program Files\Steam 2013-12-16 19:32 - 2013-09-14 11:09 - 00091028 _____ C:\Windows\PFRO.log 2013-12-16 19:32 - 2013-09-14 11:09 - 00004022 _____ C:\Windows\setupact.log 2013-12-16 19:32 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-16 19:31 - 2013-12-16 19:25 - 00000000 ____D C:\AdwCleaner 2013-12-16 19:23 - 2013-12-16 19:23 - 01226750 _____ C:\Users\Verena\Desktop\adwcleaner.exe 2013-12-16 19:06 - 2013-12-16 19:06 - 00000000 ____D C:\Users\Verena\AppData\Roaming\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-16 19:05 - 2013-12-16 19:05 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-16 19:03 - 2013-12-16 19:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Verena\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-15 18:29 - 2013-05-12 14:15 - 00000000 ____D C:\Users\Verena\AppData\Local\Apps\2.0 2013-12-15 18:25 - 2013-12-15 18:25 - 00011500 _____ C:\ComboFix.txt 2013-12-15 18:25 - 2013-12-15 18:04 - 00000000 ____D C:\Qoobox 2013-12-15 18:25 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default 2013-12-15 18:25 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public 2013-12-15 18:23 - 2013-12-15 18:03 - 00000000 ____D C:\Windows\erdnt 2013-12-15 18:19 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini 2013-12-15 18:03 - 2013-12-15 18:01 - 05154339 ____R (Swearware) C:\Users\Verena\Desktop\ComboFix.exe 2013-12-15 17:51 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-12-14 17:35 - 2013-05-12 16:55 - 00000000 ____D C:\Users\Verena\Desktop\Schule 2013-12-14 13:49 - 2013-12-14 13:49 - 00015704 _____ C:\Users\Verena\Desktop\Addition.txt 2013-12-14 12:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-12-14 10:36 - 2013-05-12 14:58 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-14 09:45 - 2013-12-12 19:34 - 00000000 ____D C:\Program Files\Mozilla Thunderbird 2013-12-14 09:44 - 2009-07-14 05:33 - 00291096 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-12 20:49 - 2013-09-16 14:21 - 00000000 ____D C:\Windows\system32\MRT 2013-12-12 20:45 - 2013-05-12 15:41 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-12 20:43 - 2013-12-12 20:31 - 00012246 _____ C:\Windows\IE11_main.log 2013-12-12 20:37 - 2013-12-12 20:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-12 20:37 - 2013-12-12 20:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-12 20:37 - 2013-12-12 20:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-12 20:37 - 2013-12-12 20:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-12 20:37 - 2013-12-12 20:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-12 20:37 - 2013-12-12 20:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-12-12 20:36 - 2013-12-12 20:36 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-12-12 20:36 - 2013-12-12 20:36 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-12-12 20:35 - 2013-12-12 20:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-12-12 20:35 - 2013-12-12 20:35 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-12-11 21:03 - 2013-05-20 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-12-11 21:03 - 2013-05-20 12:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-12-10 15:00 - 2013-05-15 14:07 - 00000000 ____D C:\Users\Verena\AppData\Roaming\vlc 2013-12-03 14:12 - 2013-08-13 17:59 - 00000000 ____D C:\Users\Verena\AppData\Local\CrashDumps 2013-12-01 10:48 - 2013-12-01 10:48 - 00002705 _____ C:\Users\Public\Desktop\Playway 4 CD-ROM.lnk 2013-12-01 10:47 - 2013-10-30 10:33 - 00000000 ____D C:\Program Files\Klett 2013-11-28 17:54 - 2013-11-28 17:54 - 00000000 ____D C:\Users\Verena\Documents\PagesConverter0.6 2013-11-26 11:11 - 2013-12-14 11:19 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 10:23 - 2013-12-14 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 10:22 - 2013-12-14 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 09:53 - 2013-12-14 11:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 09:52 - 2013-12-14 11:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 09:38 - 2013-12-14 11:19 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 09:38 - 2013-12-14 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 09:36 - 2013-12-14 11:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 09:32 - 2013-12-14 11:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 09:29 - 2013-12-14 11:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 09:29 - 2013-12-14 11:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 09:28 - 2013-12-14 11:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:16 - 2013-12-14 11:19 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:13 - 2013-12-14 11:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 08:32 - 2013-12-14 11:19 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:26 - 2013-12-14 11:19 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 07:34 - 2013-12-14 11:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:33 - 2013-12-14 11:19 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:27 - 2013-12-14 11:19 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-24 19:23 - 2013-11-24 19:23 - 00001966 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk 2013-11-24 19:23 - 2013-11-24 19:23 - 00000000 ____D C:\Program Files\HP 2013-11-24 19:23 - 2013-11-24 19:22 - 06110144 _____ C:\Users\Verena\Downloads\HPPSdr.exe 2013-11-24 19:23 - 2013-05-13 14:09 - 00000000 ____D C:\ProgramData\HP 2013-11-23 19:26 - 2013-12-14 11:07 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-21 21:10 - 2013-11-21 21:10 - 00008253 _____ C:\Users\Verena\Unbenannt 1.odt 2013-11-21 21:10 - 2013-05-12 14:14 - 00000000 ____D C:\Users\Verena 2013-11-17 08:06 - 2013-11-17 08:05 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-28 22:49 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Der PC fährt nun sauber herunter und wieder hoch! Leider besteht das Problem mit den Minianwendungen weiterhin. Die Uhr will sich einfach nicht mehr auf den Desktop ziehen lassen. Lasse ich die Maus los, verschwindet sie sofort. Die Wetter-App bleibt, allerdings ist der Hindergrund nicht dargestellt, Schrift und Farbe sind verändert. Ich habe gerade nochmal den Task-Manager gecheckt und mir ist aufgefallen, dass sidebar.exe eine sehr hohe auslastung hat, mehr als das geöffnete mailprogramm, fast so viel wie der Browser in dem ich gerade arbeite. Merkwürdig, da doch nur der Kalender geöffnet ist. |
18.12.2013, 10:20 | #10 |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Downloade dir bitte Windows Repair (All In One) von hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.12.2013, 18:03 | #11 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Ich habe alles so gemacht wie beschrieben, das Programm hat mittlerweile eine etwas neuere Version, die anders aussieht als auf den Fotos. Hoffe alles war richtig. Das Problem mit den Minianwendungen besteht weiterhin. |
19.12.2013, 12:10 | #12 |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.12.2013, 14:27 | #13 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Hallo, ich habe mir die Anleitungen hinter dem Link gründlich durchgelesen. Leider besitze ich nur die Windows7 Recovery CD, mit der das Inplaceupgrade wohl nicht funktioniert. Das System nochmal komplett neu aufsetzen möchte ich nicht unbedingt. Das habe ich vor ca. 6 Monaten nach einem Trojaner machen müssen und hatte ziemliche Schwierigkeiten beim Partitionieren der Festplatte. Siehst du noch eine andere Möglichkeit? Viele Grüße |
20.12.2013, 09:31 | #14 |
/// the machine /// TB-Ausbilder | Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter Schuss ins Blaue: Scan mit SystemLook Lade SystemLook von jpshortstuff vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.12.2013, 17:14 | #15 |
| Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunterCode:
ATTFilter SystemLook 30.07.11 by jpshortstuff Log created at 17:12 on 21/12/2013 by Verena Administrator - Elevation successful ========== reg ========== [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones] @="" "SecuritySafe"= 0x0000000001 (1) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] "2004"= 0x0000000003 (3) "2001"= 0x0000000003 (3) @="" "DisplayName"="Computer" "PMDisplayName"="Computer [Protected Mode]" "Description"="Your computer" "Icon"="shell32.dll#0016" "LowIcon"="inetcpl.cpl#005422" "CurrentLevel"= 0x0000000000 (0) "Flags"= 0x0000000021 (33) "1200"= 0x0000000000 (0) "1400"= 0x0000000000 (0) "2007"= 0x0000000003 (3) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] "2004"= 0x0000000000 (0) "2001"= 0x0000000000 (0) @="" "DisplayName"="Local intranet" "PMDisplayName"="Local intranet [Protected Mode]" "Description"="This zone contains all Web sites that are on your organization's intranet." "Icon"="shell32.dll#0018" "LowIcon"="inetcpl.cpl#005423" "CurrentLevel"= 0x0000010500 (66816) "Flags"= 0x0000000143 (323) "1200"= 0x0000000000 (0) "1400"= 0x0000000000 (0) "2500"= 0x0000000003 (3) "2007"= 0x0000010000 (65536) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] "2001"= 0x0000000000 (0) "2004"= 0x0000000000 (0) @="" "DisplayName"="Trusted sites" "PMDisplayName"="Trusted sites [Protected Mode]" "Description"="This zone contains Web sites that you trust not to damage your computer or data." "Icon"="inetcpl.cpl#00004480" "LowIcon"="inetcpl.cpl#005424" "CurrentLevel"= 0x0000011000 (69632) "Flags"= 0x0000000047 (71) "1200"= 0x0000000000 (0) "1400"= 0x0000000000 (0) "1001"= 0x0000000001 (1) "1004"= 0x0000000003 (3) "1201"= 0x0000000003 (3) "1206"= 0x0000000003 (3) "1207"= 0x0000000000 (0) "1208"= 0x0000000000 (0) "1209"= 0x0000000003 (3) "120A"= 0x0000000003 (3) "1402"= 0x0000000000 (0) "1405"= 0x0000000000 (0) "1406"= 0x0000000003 (3) "1407"= 0x0000000001 (1) "1408"= 0x0000000000 (0) "1409"= 0x0000000000 (0) "1601"= 0x0000000000 (0) "1604"= 0x0000000000 (0) "1605"= 0x0000000000 (0) "1606"= 0x0000000000 (0) "1607"= 0x0000000003 (3) "1608"= 0x0000000000 (0) "1609"= 0x0000000001 (1) "160A"= 0x0000000000 (0) "1800"= 0x0000000001 (1) "1802"= 0x0000000000 (0) "1803"= 0x0000000000 (0) "1804"= 0x0000000001 (1) "1809"= 0x0000000000 (0) "1A00"= 0x0000020000 (131072) "1A02"= 0x0000000000 (0) "1A03"= 0x0000000000 (0) "1A04"= 0x0000000003 (3) "1A05"= 0x0000000001 (1) "1A06"= 0x0000000000 (0) "1C00"= 0x0000010000 (65536) "2000"= 0x0000000000 (0) "2005"= 0x0000000000 (0) "2100"= 0x0000000000 (0) "2101"= 0x0000000000 (0) "2102"= 0x0000000003 (3) "2103"= 0x0000000000 (0) "2104"= 0x0000000000 (0) "2105"= 0x0000000000 (0) "2106"= 0x0000000000 (0) "2200"= 0x0000000003 (3) "2201"= 0x0000000003 (3) "2300"= 0x0000000001 (1) "2301"= 0x0000000000 (0) "2400"= 0x0000000000 (0) "2401"= 0x0000000000 (0) "2402"= 0x0000000000 (0) "2600"= 0x0000000000 (0) "2700"= 0x0000000003 (3) "2007"= 0x0000010000 (65536) "2107"= 0x0000000000 (0) "2701"= 0x0000000000 (0) "2702"= 0x0000000000 (0) "2703"= 0x0000000000 (0) "2708"= 0x0000000003 (3) "2709"= 0x0000000003 (3) "1812"= 0x0000000000 (0) "140A"= 0x0000000000 (0) "2302"= 0x0000000003 (3) "270B"= 0x0000000000 (0) "160B"= 0x0000000000 (0) "2704"= 0x0000000000 (0) "2108"= 0x0000000003 (3) "120B"= 0x0000000000 (0) "270C"= 0x0000000003 (3) "270D"= 0x0000000000 (0) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] "2004"= 0x0000000000 (0) "2001"= 0x0000000000 (0) "{AEBA21FA-782A-4A90-978D-B72164C80120}"=1a 37 61 59 23 52 35 0c 7a 5f 20 17 2f 1e 1a 19 0e 2b 01 73 1e 28 1a 04 1b 0c 3b c2 21 27 53 0d 36 05 2c 05 04 3d 4f 3a 4a 44 33 3a 0a 06 12 68 53 7c 20 13 35 5d 4c 10 27 01 56 7a 2d 3f 38 4f 79 0f 16 26 75 53 1c 31 00 56 7a 3e 32 24 4f 79 1b 00 33 71 4d 23 32 29 7c 6a 35 31 34 40 72 3b 01 2e 5d 4c 2a 07 15 48 72 38 12 00 56 7a 3e 16 3c 71 4d 24 33 35 7c 72 35 0e 3c 1a 41 44 19 0f 31 3a 56 7a 2e 3e 31 0c 7c 6a 10 27 0c 05 5d 4c 39 19 12 15 61 54 2e 00 33 32 40 52 03 25 1f 05 5d 4c 2c 0c 0a 15 61 54 1a 26 1f 05 5d 4c 10 21 1d 1b 71 4d 3b 24 3a 21 6d 72 24 16 3c 32 40 72 21 0f 3a 1a 41 44 1b 1e 01 01 71 4d 32 23 30 27 6d 4d 1f 28 10 3c 56 7a 2f 2e 32 16 7c 6a 3a 12 3b 28 75 53 0b 3f 12 01 71 4d 23 32 29 27 75 53 12 30 32 1e 4f 79 12 38 17 01 71 4d 30 3e 37 27 6d 72 38 12 3f 04 41 44 0a 0e 32 28 49 5f 1c 24 0b 1b 36 21 41 7b 5b 24 39 31 7c 6a 2b 0e 25 75 53 1a 2e 26 41 72 34 16 26 71 4d 30 30 3a 7c 6a 07 33 1a 56 7a 3a 00 33 71 4d 23 32 29 7c 6a 1a 26 1a 40 52 24 3f 1a 6d 4d 1c 22 28 75 53 13 25 20 41 44 0a 0e (REG_BINARY) "1A10"= 0x0000000001 (1) "{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=1a 37 61 59 23 52 35 0c 7a 5f 20 17 2f 1e 1a 19 0e 2b 01 73 1e 28 1a 04 1b 0c 3b c2 21 2d 53 49 07 25 0f 29 01 7c 50 68 3a 3b 34 4f 79 08 39 0d 49 72 33 1f 39 5d 4c 17 37 05 56 7a 2f 2e 32 4f 79 1f 12 3b 75 53 0b 3f 12 56 7a 3a 20 23 4f 79 12 05 33 71 4d 3a 31 29 7c 6a 2b 08 21 40 72 38 12 3f 5d 4c 39 1d 17 48 72 21 0f 03 56 7a 2f 06 22 32 40 52 2c 29 05 3a 56 7a 2e 3e 31 0c 7c 6a 2b 06 25 32 40 52 33 24 01 32 75 53 0b 3f 32 04 4f 79 1b 3b 1f 0c 40 72 3b 01 2d 1a 75 53 12 30 3f 04 4f 79 08 3f 09 0c 75 53 13 25 20 04 75 53 07 37 17 05 5d 4c 36 0a 1b 3a 56 72 35 0e 3c 3c 56 7a 2d 3f 38 16 7c 6a 17 37 01 1b 5d 4c 2a 0d 18 1f 61 54 12 12 3b 28 40 52 3f 3a 19 34 48 72 20 0c 17 01 71 4d 1a 26 1a 1b 5d 4c 2c 0c 17 01 71 4d 30 3e 37 27 6d 4d 1b 3b 0c 1b 5d 4c 39 1d 17 3c 56 7a 3b 2f 3f 16 15 39 5f 7b 42 29 1d 3c 71 4d 30 06 22 71 4d 32 23 30 7c 6a 2a 1e 19 75 53 1c 31 20 41 72 24 12 3b 71 4d 23 32 24 7c 6a 03 25 17 56 7a 25 05 33 71 4d 3a 31 29 7c 6a 10 21 09 40 52 27 2c 0b 6d 4d 0f 28 2a 75 53 08 3e 23 41 44 1b 1e (REG_BINARY) @="" "DisplayName"="Internet" "PMDisplayName"="Internet [Protected Mode]" "Description"="This zone contains all Web sites you haven't placed in other zones" "Icon"="inetcpl.cpl#001313" "LowIcon"="inetcpl.cpl#005425" "CurrentLevel"= 0x0000011500 (70912) "Flags"= 0x0000000001 (1) "1200"= 0x0000000000 (0) "1400"= 0x0000000000 (0) "1001"= 0x0000000001 (1) "1004"= 0x0000000003 (3) "1201"= 0x0000000003 (3) "1206"= 0x0000000003 (3) "1207"= 0x0000000003 (3) "1208"= 0x0000000003 (3) "1209"= 0x0000000003 (3) "120A"= 0x0000000003 (3) "1402"= 0x0000000000 (0) "1405"= 0x0000000000 (0) "1406"= 0x0000000003 (3) "1407"= 0x0000000001 (1) "1408"= 0x0000000003 (3) "1409"= 0x0000000000 (0) "1601"= 0x0000000000 (0) "1604"= 0x0000000000 (0) "1605"= 0x0000000000 (0) "1606"= 0x0000000000 (0) "1607"= 0x0000000003 (3) "1608"= 0x0000000000 (0) "1609"= 0x0000000001 (1) "160A"= 0x0000000003 (3) "1800"= 0x0000000001 (1) "1802"= 0x0000000000 (0) "1803"= 0x0000000000 (0) "1804"= 0x0000000001 (1) "1809"= 0x0000000000 (0) "1A00"= 0x0000020000 (131072) "1A02"= 0x0000000000 (0) "1A03"= 0x0000000000 (0) "1A04"= 0x0000000003 (3) "1A05"= 0x0000000001 (1) "1A06"= 0x0000000000 (0) "1C00"= 0x0000010000 (65536) "2000"= 0x0000000000 (0) "2005"= 0x0000000003 (3) "2100"= 0x0000000000 (0) "2101"= 0x0000000000 (0) "2102"= 0x0000000003 (3) "2103"= 0x0000000003 (3) "2104"= 0x0000000003 (3) "2105"= 0x0000000003 (3) "2106"= 0x0000000000 (0) "2200"= 0x0000000003 (3) "2201"= 0x0000000003 (3) "2300"= 0x0000000001 (1) "2301"= 0x0000000000 (0) "2400"= 0x0000000003 (3) "2401"= 0x0000000000 (0) "2402"= 0x0000000003 (3) "2600"= 0x0000000000 (0) "2700"= 0x0000000000 (0) "2007"= 0x0000010000 (65536) "2107"= 0x0000000003 (3) "2701"= 0x0000000000 (0) "2702"= 0x0000000000 (0) "2703"= 0x0000000003 (3) "2708"= 0x0000000003 (3) "2709"= 0x0000000003 (3) "1812"= 0x0000000001 (1) "140A"= 0x0000000000 (0) "2302"= 0x0000000003 (3) "270B"= 0x0000000003 (3) "160B"= 0x0000000000 (0) "2704"= 0x0000000000 (0) "120B"= 0x0000000003 (3) "270C"= 0x0000000000 (0) "270D"= 0x0000000003 (3) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] "2004"= 0x0000000003 (3) "2001"= 0x0000000003 (3) "1400"= 0x0000000003 (3) "1C00"= 0x0000000000 (0) "{AEBA21FA-782A-4A90-978D-B72164C80120}"=1a 37 61 59 23 52 35 0c 7a 5f 20 17 2f 1e 1a 19 0e 2b 01 73 13 37 13 12 14 1a 15 39 (REG_BINARY) "1A10"= 0x0000000003 (3) "{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=1a 37 61 59 23 52 35 0c 7a 5f 20 17 2f 1e 1a 19 0e 2b 01 73 13 37 13 12 14 1a 15 39 (REG_BINARY) @="" "DisplayName"="Restricted sites" "PMDisplayName"="Restricted sites [Protected Mode]" "Description"="This zone contains Web sites that could potentially damage your computer or data." "Icon"="inetcpl.cpl#00004481" "LowIcon"="inetcpl.cpl#005426" "CurrentLevel"= 0x0000012000 (73728) "Flags"= 0x0000000003 (3) "1200"= 0x0000000003 (3) "2007"= 0x0000000003 (3) [] Hive unrecognized. -= EOF =- |
Themen zu Windows 7 Minianwendungen fehlerhaft und PC fährt nicht richtig herunter |
besucht, bildschirm, explorer, fehlerhaft, gen, herunterfahren, internet, internet explorer, internet explorer 10, mails, minianwendung win 7, neu, nicht mehr, norton, norton 360°, ratlos, service, sicherheitssystem, system, unbekannte, update, updates, verdächtige, websites, win, win7, windows, windows 7 |