Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden

Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden


Log-Analyse und Auswertung: Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 16.12.2013, 12:19   #5
microLotz
 
Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden - Standard

Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden


Hallo Schrauber,

ich habe alle genannten Programme ausgeführt. Anbei die Logs:

Malwarebytes:

Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.16.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Sebastian :: SEBASTIAN-PC [Administrator]

Schutz: Aktiviert

16.12.2013 11:40:11
mbam-log-2013-12-16 (11-40-11).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 237332
Laufzeit: 2 Minute(n), 30 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok (PUP.Optional.ATDheNetTVAp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

AdwCleaner:

Code:
ATTFilter
# AdwCleaner v3.015 - Bericht erstellt am 16/12/2013 um 11:53:24
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Sebastian - SEBASTIAN-PC
# Gestartet von : C:\Users\Sebastian\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[x] Nicht Gelöscht : C:\Users\Sebastian\AppData\Roaming\pdfforge
Datei Gelöscht : C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_video-thumbnails-maker_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_video-thumbnails-maker_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16448


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\61u2bfgx.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1880 octets] - [16/12/2013 11:47:28]
AdwCleaner[S0].txt - [1697 octets] - [16/12/2013 11:53:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1757 octets] ##########

Junkware Removal Tool:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Ultimate x64
Ran by Sebastian on 16.12.2013 at 11:59:37,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Sebastian\AppData\Roaming\pdfforge"



~~~ FireFox

Emptied folder: C:\Users\Sebastian\AppData\Roaming\mozilla\firefox\profiles\61u2bfgx.default\minidumps [18 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.12.2013 at 12:04:51,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Neues FRST Log:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02
Ran by Sebastian (administrator) on SEBASTIAN-PC on 16-12-2013 12:11:52
Running from C:\Users\Sebastian\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Stefan Hirschmann) D:\Anwendungen\No Sleep\NoSleep_1.4.2.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1783296 2006-07-23] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - "C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe"
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [NoSleep!] - D:\Anwendungen\No Sleep\NoSleep_1.4.2.exe [374272 2012-09-16] (Stefan Hirschmann)
HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-12-05] (AMD)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [P17RunE] - C:\Windows\\SysWOW64\P17RunE.dll [14848 2008-03-28] (Creative Technology Ltd.)
HKLM-x32\...\Run: [NBAgent] - D:\Anwendungen\Nero 11\Nero 11\Nero BackItUp\NBAgent.exe [1492264 2011-11-18] (Nero AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Anwendungen\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1124424 2009-09-24] (G DATA Software AG)
HKLM-x32\...\Run: [G DATA AntiVirus Trayapplication] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [924232 2009-09-18] (G Data Software AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D66C8FF6EB9CE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIE.dll (G Data Software AG)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
Toolbar: HKLM-x32 - G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIE.dll (G Data Software AG)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Hosts: 127.0.0.1 update.sft-loader.de
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\61u2bfgx.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - D:\Anwendungen\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - D:\Anwendungen\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - D:\Anwendungen\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: G Data WebFilter - C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}

==================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe [1128008 2009-12-07] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [397896 2009-08-08] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [1731504 2009-11-25] (G Data Software AG)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [1664560 2009-11-25] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe [302152 2009-11-26] (G Data Software AG)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [34760 2013-12-15] (G Data Software AG)
R3 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [74184 2013-12-15] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [57288 2013-12-15] (G DATA Software AG)
R1 gdwfpcd; C:\Windows\System32\DRIVERS\gdwfpcd64.sys [48584 2013-12-15] (G DATA Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106224 2012-09-16] (G Data Software)
R1 GRD; C:\Windows\SysWow64\drivers\GRD.sys [106224 2013-12-15] (G Data Software)
R3 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [42952 2013-12-15] (G Data Software AG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-16 12:11 - 2013-12-16 12:11 - 00013477 _____ C:\Users\Sebastian\Desktop\FRST.txt
2013-12-16 12:11 - 2013-12-16 12:11 - 00000000 ____D C:\Users\Sebastian\Desktop\FRST-OlderVersion
2013-12-16 12:04 - 2013-12-16 12:04 - 00000841 _____ C:\Users\Sebastian\Desktop\JRT.txt
2013-12-16 11:59 - 2013-12-16 11:59 - 00000000 ____D C:\Windows\ERUNT
2013-12-16 11:57 - 2013-12-16 11:57 - 01034531 _____ (Thisisu) C:\Users\Sebastian\Desktop\JRT.exe
2013-12-16 11:55 - 2013-12-16 11:53 - 00001845 _____ C:\Users\Sebastian\Desktop\AdwCleaner[S0].txt
2013-12-16 11:47 - 2013-12-16 11:53 - 00000000 ____D C:\AdwCleaner
2013-12-16 11:46 - 2013-12-16 11:46 - 01226750 _____ C:\Users\Sebastian\Desktop\adwcleaner.exe
2013-12-16 11:35 - 2013-12-16 11:35 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 11:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-16 11:30 - 2013-12-16 11:31 - 00000000 ____D C:\Users\Sebastian\Desktop\Trojaner
2013-12-16 00:51 - 2013-12-16 00:51 - 28314744 _____ (Any-Video-Converter.com                                     ) C:\Users\Sebastian\Desktop\avc-free_5.5.2.exe
2013-12-15 21:27 - 2013-12-15 21:31 - 00000000 ____D C:\ProgramData\G DATA
2013-12-15 21:27 - 2013-12-15 21:27 - 00042952 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2013-12-15 21:27 - 2013-12-15 21:27 - 00000000 ____D C:\Program Files (x86)\G Data
2013-12-15 16:56 - 2013-12-15 16:56 - 00000000 ____D C:\Users\Sebastian\AppData\Local\GHISLER
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\GHISLER
2013-12-15 12:32 - 2013-12-15 12:32 - 00024762 _____ C:\ComboFix.txt
2013-12-15 12:25 - 2013-12-15 12:32 - 00000000 ____D C:\Qoobox
2013-12-15 12:25 - 2013-12-15 12:31 - 00000000 ____D C:\Windows\erdnt
2013-12-15 12:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-15 12:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-15 12:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-14 20:00 - 2013-12-14 20:00 - 00717952 _____ C:\Windows\Minidump\121413-8065-01.dmp
2013-12-14 18:57 - 2013-12-16 12:11 - 01927940 _____ (Farbar) C:\Users\Sebastian\Desktop\FRST64.exe
2013-12-14 18:57 - 2013-12-16 12:11 - 00000000 ____D C:\FRST
2013-12-14 18:54 - 2013-12-14 18:54 - 00000172 _____ C:\Users\Sebastian\defogger_reenable
2013-12-14 15:14 - 2013-12-14 15:15 - 00007774 _____ C:\Windows\IE11_main.log
2013-12-14 15:10 - 2013-12-14 15:56 - 00019592 _____ C:\Windows\IE10_main.log
2013-12-14 15:00 - 2013-12-14 15:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 12:21 - 2013-12-12 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 00:25 - 2013-12-12 00:25 - 00000000 ____D C:\Program Files (x86)\Samsung SSD Magician
2013-12-11 11:45 - 2013-12-11 11:45 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-12-07 23:15 - 2013-12-07 23:17 - 00000000 ____D C:\Users\Sebastian\Documents\Einstellungsdatei von Fritz Box 7390 vom 07.12.2013
2013-12-04 21:34 - 2013-12-04 21:34 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201312042134222142.log
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\ProgramData\ATI
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-03 16:10 - 2013-12-04 21:21 - 00000000 ____D C:\Users\Sebastian\Desktop\Verhandlungen
2013-12-03 14:18 - 2013-12-03 14:18 - 00000000 ____D C:\Users\Sebastian\Documents\WB Games
2013-12-03 14:17 - 2013-12-03 14:17 - 00000000 ____D C:\Program Files (x86)\AMD
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:51 - 2013-11-29 18:51 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:49 - 2013-11-29 18:49 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-11-29 18:48 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-29 18:47 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-29 18:46 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-29 18:13 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
2013-11-17 19:22 - 2013-11-17 19:22 - 00000000 ____D C:\Users\Sebastian\Documents\Square Enix

==================== One Month Modified Files and Folders =======

2013-12-16 12:11 - 2013-12-16 12:11 - 00013477 _____ C:\Users\Sebastian\Desktop\FRST.txt
2013-12-16 12:11 - 2013-12-16 12:11 - 00000000 ____D C:\Users\Sebastian\Desktop\FRST-OlderVersion
2013-12-16 12:11 - 2013-12-14 18:57 - 01927940 _____ (Farbar) C:\Users\Sebastian\Desktop\FRST64.exe
2013-12-16 12:11 - 2013-12-14 18:57 - 00000000 ____D C:\FRST
2013-12-16 12:10 - 2009-07-14 18:58 - 00770016 _____ C:\Windows\system32\perfh007.dat
2013-12-16 12:10 - 2009-07-14 18:58 - 00174334 _____ C:\Windows\system32\perfc007.dat
2013-12-16 12:10 - 2009-07-14 06:13 - 01797560 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-16 12:06 - 2012-09-16 13:29 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-12-16 12:06 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-16 12:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-16 12:06 - 2009-07-14 05:51 - 00076086 _____ C:\Windows\setupact.log
2013-12-16 12:05 - 2012-09-16 13:04 - 01603537 _____ C:\Windows\WindowsUpdate.log
2013-12-16 12:04 - 2013-12-16 12:04 - 00000841 _____ C:\Users\Sebastian\Desktop\JRT.txt
2013-12-16 12:01 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-16 12:01 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-16 11:59 - 2013-12-16 11:59 - 00000000 ____D C:\Windows\ERUNT
2013-12-16 11:57 - 2013-12-16 11:57 - 01034531 _____ (Thisisu) C:\Users\Sebastian\Desktop\JRT.exe
2013-12-16 11:53 - 2013-12-16 11:55 - 00001845 _____ C:\Users\Sebastian\Desktop\AdwCleaner[S0].txt
2013-12-16 11:53 - 2013-12-16 11:47 - 00000000 ____D C:\AdwCleaner
2013-12-16 11:46 - 2013-12-16 11:46 - 01226750 _____ C:\Users\Sebastian\Desktop\adwcleaner.exe
2013-12-16 11:39 - 2012-09-16 22:26 - 00000000 ____D C:\Users\Sebastian\Documents\Outlook-Dateien
2013-12-16 11:35 - 2013-12-16 11:35 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 11:31 - 2013-12-16 11:30 - 00000000 ____D C:\Users\Sebastian\Desktop\Trojaner
2013-12-16 00:51 - 2013-12-16 00:51 - 28314744 _____ (Any-Video-Converter.com                                     ) C:\Users\Sebastian\Desktop\avc-free_5.5.2.exe
2013-12-16 00:35 - 2012-09-16 21:44 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\vlc
2013-12-15 23:44 - 2013-09-27 21:05 - 00000000 ____D C:\Users\Sebastian\Documents\FIFA 14
2013-12-15 21:42 - 2013-01-19 10:31 - 00106224 _____ (G Data Software) C:\Windows\SysWOW64\Drivers\GRD.sys
2013-12-15 21:38 - 2012-09-16 14:03 - 00074184 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-12-15 21:38 - 2012-09-16 14:03 - 00057288 _____ (G DATA Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2013-12-15 21:37 - 2012-09-16 14:03 - 00048584 _____ (G DATA Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2013-12-15 21:37 - 2012-09-16 14:03 - 00034760 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2013-12-15 21:31 - 2013-12-15 21:27 - 00000000 ____D C:\ProgramData\G DATA
2013-12-15 21:27 - 2013-12-15 21:27 - 00042952 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2013-12-15 21:27 - 2013-12-15 21:27 - 00000000 ____D C:\Program Files (x86)\G Data
2013-12-15 21:26 - 2012-09-16 13:04 - 00000000 ___RD C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-15 21:20 - 2013-01-26 19:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-15 21:15 - 2013-07-13 17:58 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\JAM Software
2013-12-15 21:13 - 2012-09-16 13:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-15 16:56 - 2013-12-15 16:56 - 00000000 ____D C:\Users\Sebastian\AppData\Local\GHISLER
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\GHISLER
2013-12-15 14:04 - 2012-09-16 13:29 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-12-15 12:33 - 2012-09-16 16:42 - 00194698 _____ C:\Windows\PFRO.log
2013-12-15 12:32 - 2013-12-15 12:32 - 00024762 _____ C:\ComboFix.txt
2013-12-15 12:32 - 2013-12-15 12:25 - 00000000 ____D C:\Qoobox
2013-12-15 12:31 - 2013-12-15 12:25 - 00000000 ____D C:\Windows\erdnt
2013-12-15 12:30 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-14 20:00 - 2013-12-14 20:00 - 00717952 _____ C:\Windows\Minidump\121413-8065-01.dmp
2013-12-14 20:00 - 2012-09-25 17:09 - 729686930 _____ C:\Windows\MEMORY.DMP
2013-12-14 20:00 - 2012-09-25 17:09 - 00000000 ____D C:\Windows\Minidump
2013-12-14 18:54 - 2013-12-14 18:54 - 00000172 _____ C:\Users\Sebastian\defogger_reenable
2013-12-14 18:54 - 2012-09-16 13:04 - 00000000 ____D C:\Users\Sebastian
2013-12-14 16:00 - 2012-09-16 20:57 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-14 15:58 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-12-14 15:56 - 2013-12-14 15:10 - 00019592 _____ C:\Windows\IE10_main.log
2013-12-14 15:16 - 2012-09-18 20:20 - 01770904 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-14 15:15 - 2013-12-14 15:14 - 00007774 _____ C:\Windows\IE11_main.log
2013-12-14 15:01 - 2013-12-14 15:00 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 14:59 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-13 23:36 - 2013-01-28 15:11 - 00000000 ____D C:\Users\Sebastian\Documents\Eintracht Frankfurt Museum
2013-12-12 12:49 - 2012-09-16 17:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-12 12:21 - 2013-12-12 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 00:25 - 2013-12-12 00:25 - 00000000 ____D C:\Program Files (x86)\Samsung SSD Magician
2013-12-11 13:39 - 2012-09-16 10:07 - 00000000 ____D C:\Users\Sebastian\Documents\Kreditkarte Rechnungen
2013-12-11 11:45 - 2013-12-11 11:45 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-12-10 11:29 - 2012-09-16 20:15 - 00000000 ____D C:\Program Files\DivX
2013-12-10 11:29 - 2012-09-16 20:15 - 00000000 ____D C:\Program Files (x86)\DivX
2013-12-10 11:29 - 2012-09-16 20:09 - 00000000 ____D C:\ProgramData\DivX
2013-12-07 23:17 - 2013-12-07 23:15 - 00000000 ____D C:\Users\Sebastian\Documents\Einstellungsdatei von Fritz Box 7390 vom 07.12.2013
2013-12-04 21:34 - 2013-12-04 21:34 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201312042134222142.log
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\ProgramData\ATI
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-04 21:34 - 2012-11-04 19:54 - 00000000 ____D C:\ProgramData\AMD
2013-12-04 21:34 - 2012-09-16 13:13 - 00000000 ____D C:\Program Files\ATI Technologies
2013-12-04 21:33 - 2012-09-17 09:03 - 00000000 ____D C:\AMD
2013-12-04 21:32 - 2013-04-26 16:51 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-04 21:21 - 2013-12-03 16:10 - 00000000 ____D C:\Users\Sebastian\Desktop\Verhandlungen
2013-12-03 14:18 - 2013-12-03 14:18 - 00000000 ____D C:\Users\Sebastian\Documents\WB Games
2013-12-03 14:17 - 2013-12-03 14:17 - 00000000 ____D C:\Program Files (x86)\AMD
2013-12-03 14:17 - 2012-09-16 14:01 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Downloaded Installations
2013-12-03 14:15 - 2012-09-18 16:23 - 00372479 _____ C:\Windows\DirectX.log
2013-12-01 14:42 - 2012-09-16 15:49 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2011-12-06 03:11 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:52 - 2011-12-06 04:16 - 01319064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-11-29 18:51 - 2013-11-29 18:51 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:50 - 2011-12-06 03:51 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:49 - 2013-11-29 18:49 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-11-29 18:48 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-29 18:47 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-29 18:46 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-29 18:13 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
2013-11-21 16:14 - 2012-09-20 09:37 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-11-19 03:33 - 2012-09-16 14:42 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-17 19:22 - 2013-11-17 19:22 - 00000000 ____D C:\Users\Sebastian\Documents\Square Enix
2013-11-17 18:53 - 2012-09-16 17:01 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-17 18:53 - 2012-09-16 17:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-17 18:49 - 2012-09-17 09:02 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Adobe

Some content of TEMP:
====================
C:\Users\Sebastian\AppData\Local\Temp\Quarantine.exe
C:\Users\Sebastian\AppData\Local\Temp\vlc-2.1.2-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 12:54

==================== End Of Log ============================
--- --- ---

--- --- ---



Danke für die bisherige Hilfe & gruß
microLotz


 

Themen zu Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden
antivirus, branding, computer, cpu, excel, firefox, flash player, helper, iexplore.exe, karte, launch, mozilla, programm, pup.optional.1clickdownload.a, pup.optional.atdhenettvap.a, realtek, required, rundll, scan, services.exe, sicherheitsexperten, software, usb, windows


« Windows 7: Chrome öffnet weiße Popup Fenster | Windows XP - Die Ausnahme "Unbekannter Softwarefehler" von Avira-Scan, Windowas Firewall geht und svchost.exe verursacht hohe CPU Auslastung »


Ähnliche Themen: Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden


  1. Windows 7: Firefox öffnet selbstständig Tabs mit Umfragen
    Log-Analyse und Auswertung - 08.08.2015 (20)
  2. Windows 7 / Firefox: Werbung öffnet sich selbstständig in neuem Tab
    Log-Analyse und Auswertung - 03.01.2015 (9)
  3. Windows 7: Firefox öffnet selbstständig in kurzen Abständen URL: http://98uj8.de/[...]
    Log-Analyse und Auswertung - 22.08.2014 (19)
  4. Windows 8: Firefox öffnet selbstständig neue Tabs mit Werbung
    Plagegeister aller Art und deren Bekämpfung - 20.06.2014 (11)
  5. Windows 7: Firefox öffnet selbstständig neuen TAB
    Log-Analyse und Auswertung - 19.02.2014 (9)
  6. Win 8 Firefox öffnet selbstständig neuen TAB
    Plagegeister aller Art und deren Bekämpfung - 16.02.2014 (1)
  7. Windows Vista: Firefox öffnet dauernd selbstständig neue Tabs mit Werbung, Datingseiten und Aufforderungen Programme zu installieren
    Plagegeister aller Art und deren Bekämpfung - 23.01.2014 (3)
  8. Windows 7 (64 bit): Firefox öffnet selbstständig "Werbe-Tabs"
    Log-Analyse und Auswertung - 24.11.2013 (7)
  9. Problem mit Windows 7 64 Bit -Firefox öffnet ungewollt Tabs mit der überschrift "ads" Proxyeinstellungen werden selbstständig geändert.
    Plagegeister aller Art und deren Bekämpfung - 16.06.2013 (9)
  10. Firefox öffnet selbstständig 209.59.195.20
    Log-Analyse und Auswertung - 17.09.2010 (21)
  11. IE öffnet selbstständig bei laufenden Firefox
    Log-Analyse und Auswertung - 04.07.2010 (15)
  12. Firefox öffnet Werbetabs&Internet Explorer öffnet sich selbstständig
    Log-Analyse und Auswertung - 09.05.2010 (64)
  13. HILFE: Firefox öffnet Werbetabs&Internet Explorer öffnet sich selbstständig
    Log-Analyse und Auswertung - 07.05.2010 (6)
  14. Firefox öffnet selbstständig Werbefenster
    Log-Analyse und Auswertung - 11.04.2010 (2)
  15. Firefox öffnet selbstständig Werbeseiten
    Log-Analyse und Auswertung - 08.01.2010 (6)
  16. firefox öffnet selbstständig werbeseiten
    Log-Analyse und Auswertung - 08.12.2008 (8)
  17. Firefox öffnet selbstständig werbeseiten
    Log-Analyse und Auswertung - 02.02.2006 (12)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden - Hallo Schrauber, ich habe alle genannten Programme ausgeführt. Anbei die Logs: Malwarebytes: Code: Alles auswählen Aufklappen ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.16.04 Windows 7 Service Pack 1 - Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden...
Archiv
Du betrachtest: Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19