| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 7, PC extrem langsam, 50% Leerlaufauslastung, Verdacht auf Malware / VirusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
04.01.2014, 16:52
| #1 |
 |  Windows 7, PC extrem langsam, 50% Leerlaufauslastung, Verdacht auf Malware / Virus Hallo Schrauber, ich habe den IE zurückgesetzt und Google als Startseite definiert. Funktioniert jetzt wieder tadellos, auch die googleunterstützte Suche im Trojanerboard geht jetzt wieder. Vom Gefühl her ist der Rechner so wieder in Ordnung. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by ***** (administrator) on LAPTOPKATJA on 04-01-2014 16:44:47
Running from C:\Users\*****\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34088 2009-01-13] (TOSHIBA CORPORATION)
HKU\Default\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe [6203296 2009-08-12] (TOSHIBA)
HKU\Default User\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe [6203296 2009-08-12] (TOSHIBA)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0D268D4C-CB3F-4E53-B83E-2B11D91FEC26} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
SearchScopes: HKCU - {35B91AFE-3896-49EC-B6B7-2BB5B8530050} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {C4756C3C-67F4-4F79-B492-D1204FFF878E} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll No File
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3304768 2010-12-23] (devolo AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S4 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
==================== Drivers (Whitelisted) ====================
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2013-12-22] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-22] (Kaspersky Lab ZAO)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)
S3 RTL8187Se; C:\Windows\System32\DRIVERS\RTL8187Se.sys [427008 2009-06-10] (Realtek Semiconductor Corporation )
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2010-04-23] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27648 2010-04-23] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33280 2010-04-23] (LG Electronics Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-04 16:44 - 2014-01-04 16:44 - 01931368 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2014-01-04 16:44 - 2014-01-04 16:44 - 00000000 ____D C:\Users\*****\Downloads\FRST-OlderVersion
2014-01-04 16:38 - 2014-01-04 16:42 - 00003994 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C074724E-4E68-4C66-A37F-6D05CC73FA8F}
2014-01-04 16:33 - 2014-01-04 16:33 - 00000504 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2014-01-03 22:26 - 2014-01-03 22:27 - 00987410 _____ C:\Users\*****\Downloads\SecurityCheck.exe
2014-01-02 20:31 - 2014-01-03 23:43 - 00000000 ____D C:\Users\*****\Desktop\Log-Dateien
2014-01-02 20:02 - 2014-01-02 20:02 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-02 20:01 - 2014-01-02 20:02 - 01110476 _____ C:\Users\*****\Downloads\7z920.exe
2014-01-02 19:50 - 2014-01-02 19:50 - 01556172 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-02 19:38 - 2014-01-04 16:44 - 00010454 _____ C:\Users\*****\Downloads\FRST.txt
2014-01-02 19:30 - 2014-01-02 19:30 - 00117379 _____ C:\Users\*****\Documents\JRT.txt
2014-01-02 19:18 - 2014-01-02 19:18 - 00000000 ____D C:\Windows\ERUNT
2014-01-02 18:52 - 2014-01-02 19:05 - 00000000 ____D C:\AdwCleaner
2014-01-02 12:28 - 2014-01-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Roaming\Malwarebytes
2014-01-02 12:28 - 2014-01-02 12:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-02 12:28 - 2014-01-02 12:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-02 12:28 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-02 12:27 - 2014-01-02 12:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-02 12:07 - 2014-01-02 12:07 - 02053304 _____ () C:\Users\*****\Downloads\DownloadManagerSetup.exe
2013-12-31 10:06 - 2013-12-31 10:06 - 00024116 _____ C:\ComboFix.txt
2013-12-31 09:47 - 2013-12-31 10:06 - 00000000 ____D C:\Qoobox
2013-12-31 09:47 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-31 09:47 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-31 09:47 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-31 09:47 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-31 09:47 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-31 09:47 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-31 09:47 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-31 09:47 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-31 09:46 - 2013-12-31 10:04 - 00000000 ____D C:\Windows\erdnt
2013-12-31 09:42 - 2013-12-31 09:42 - 05159030 ____R (Swearware) C:\Users\*****\Desktop\ComboFix.exe
2013-12-29 11:52 - 2014-01-04 16:44 - 00000000 ____D C:\FRST
2013-12-29 11:44 - 2013-12-29 12:25 - 00004151 _____ C:\Users\*****\Downloads\FRST64.exe.27may85.partial
2013-12-29 11:44 - 2013-12-29 11:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\MusicNet
2013-12-29 11:43 - 2013-12-29 11:43 - 00000000 ____D C:\Users\*****\Documents\My Received Files
2013-12-28 18:29 - 2013-12-28 18:29 - 00000000 _____ C:\autoexec.bat
2013-12-28 18:28 - 2013-12-28 18:28 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-12-28 18:27 - 2013-12-28 20:02 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-12-26 17:25 - 2013-12-26 17:25 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2013-12-23 20:32 - 2013-12-23 20:32 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2013-12-22 17:34 - 2013-12-22 17:34 - 00000000 ____D C:\Users\*****\AppData\Roaming\TeamViewer
2013-12-22 17:22 - 2013-12-22 17:22 - 00001133 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2013-12-22 17:22 - 2013-12-22 17:22 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-12-22 17:20 - 2013-12-22 17:21 - 06072408 _____ (TeamViewer GmbH) C:\Users\*****\Downloads\TeamViewer_Setup_de_9.0.24951.exe
2013-12-22 15:12 - 2013-12-22 15:16 - 00000000 ____D C:\Users\*****\AppData\Local\CANON_INC
2013-12-22 14:05 - 2013-12-22 14:05 - 00000000 ____D C:\Users\*****\AppData\Roaming\CANON INC
2013-12-22 13:57 - 2013-12-22 13:57 - 00000000 ____D C:\Users\*****\AppData\Roaming\Canon_Inc_IC
2013-12-22 13:56 - 2013-12-22 13:56 - 00001168 _____ C:\Users\Public\Desktop\Picture Style Editor.lnk
2013-12-22 13:56 - 2013-12-22 13:56 - 00001163 _____ C:\Users\Public\Desktop\ImageBrowser EX.lnk
2013-12-22 13:56 - 2013-12-22 13:56 - 00001038 _____ C:\Users\Public\Desktop\EOS Utility.lnk
2013-12-22 13:55 - 2013-12-22 15:22 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-22 13:55 - 2013-12-22 13:55 - 00001103 _____ C:\Users\Public\Desktop\Digital Photo Professional.lnk
2013-12-22 13:51 - 2013-12-22 15:43 - 00000000 ____D C:\Users\*****\AppData\Roaming\canon
2013-12-22 13:51 - 2013-12-22 13:51 - 00000000 ____D C:\ProgramData\Canon_Inc_IC
2013-12-19 18:04 - 2013-12-19 18:04 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-12-17 22:33 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-17 22:33 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-17 22:33 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-17 22:33 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-17 22:31 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-17 22:31 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-17 22:31 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-17 22:31 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-17 22:31 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-17 22:31 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-17 22:31 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-17 22:31 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-17 22:31 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-17 22:31 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-17 22:31 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-17 22:31 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-17 22:31 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-17 22:31 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-17 22:31 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-17 22:31 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-17 22:31 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-17 22:31 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-17 22:31 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-17 22:31 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-17 22:31 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-17 22:31 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-17 22:31 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-17 22:31 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-17 22:31 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-17 22:31 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-17 22:31 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-17 22:31 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-17 22:31 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-17 22:31 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-17 22:31 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-17 17:36 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-17 17:36 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-17 17:36 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-17 17:36 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-17 17:36 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-17 17:36 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-17 17:36 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-17 17:36 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-17 17:36 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-17 17:36 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-17 17:36 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-17 17:36 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-17 17:36 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-17 17:36 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-17 17:36 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-17 17:36 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-17 17:36 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-17 17:36 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-17 17:36 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-07 21:07 - 2013-12-07 21:07 - 00000000 ____D C:\Users\*****\Documents\MemTest4
2013-12-07 21:00 - 2014-01-02 20:32 - 00000000 ____D C:\Users\*****\Desktop\Testprogramme
2013-12-07 19:33 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-07 19:27 - 2013-12-07 19:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-07 19:27 - 2013-12-07 19:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-07 19:27 - 2013-12-07 19:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-07 19:27 - 2013-12-07 19:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-07 19:27 - 2013-12-07 19:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-07 19:27 - 2013-12-07 19:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-07 19:27 - 2013-12-07 19:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
==================== One Month Modified Files and Folders =======
2014-01-04 16:45 - 2014-01-02 19:38 - 00010454 _____ C:\Users\*****\Downloads\FRST.txt
2014-01-04 16:44 - 2014-01-04 16:44 - 01931368 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2014-01-04 16:44 - 2014-01-04 16:44 - 00000000 ____D C:\Users\*****\Downloads\FRST-OlderVersion
2014-01-04 16:44 - 2013-12-29 11:52 - 00000000 ____D C:\FRST
2014-01-04 16:43 - 2012-05-09 19:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 16:42 - 2014-01-04 16:38 - 00003994 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C074724E-4E68-4C66-A37F-6D05CC73FA8F}
2014-01-04 16:42 - 2013-11-07 22:36 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2014-01-04 16:33 - 2014-01-04 16:33 - 00000504 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2014-01-04 16:32 - 2009-07-14 05:45 - 00016080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-04 16:32 - 2009-07-14 05:45 - 00016080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-04 16:28 - 2009-10-18 19:24 - 01049783 _____ C:\Windows\WindowsUpdate.log
2014-01-04 16:24 - 2012-03-15 18:40 - 00000000 ___RD C:\Users\*****\Dropbox
2014-01-04 16:24 - 2012-03-15 18:35 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox
2014-01-04 16:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-04 16:23 - 2009-07-14 05:51 - 00119903 _____ C:\Windows\setupact.log
2014-01-04 09:50 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-03 23:43 - 2014-01-02 20:31 - 00000000 ____D C:\Users\*****\Desktop\Log-Dateien
2014-01-03 23:13 - 2011-06-13 16:50 - 00000000 ____D C:\Users\*****\Documents\Outlook-Dateien
2014-01-03 22:39 - 2009-10-18 19:19 - 00721602 _____ C:\Windows\PFRO.log
2014-01-03 22:27 - 2014-01-03 22:26 - 00987410 _____ C:\Users\*****\Downloads\SecurityCheck.exe
2014-01-03 22:02 - 2010-11-09 22:02 - 00000278 _____ C:\Windows\Tasks\Epson Printer Software Downloader.job
2014-01-02 20:32 - 2013-12-07 21:00 - 00000000 ____D C:\Users\*****\Desktop\Testprogramme
2014-01-02 20:32 - 2013-10-27 09:51 - 00000000 ____D C:\Users\*****\Desktop\Neuer Ordner
2014-01-02 20:02 - 2014-01-02 20:02 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-02 20:02 - 2014-01-02 20:01 - 01110476 _____ C:\Users\*****\Downloads\7z920.exe
2014-01-02 20:01 - 2011-07-17 12:24 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live
2014-01-02 19:50 - 2014-01-02 19:50 - 01556172 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-02 19:50 - 2009-07-14 18:58 - 00672560 _____ C:\Windows\system32\perfh007.dat
2014-01-02 19:50 - 2009-07-14 18:58 - 00135844 _____ C:\Windows\system32\perfc007.dat
2014-01-02 19:30 - 2014-01-02 19:30 - 00117379 _____ C:\Users\*****\Documents\JRT.txt
2014-01-02 19:18 - 2014-01-02 19:18 - 00000000 ____D C:\Windows\ERUNT
2014-01-02 19:05 - 2014-01-02 18:52 - 00000000 ____D C:\AdwCleaner
2014-01-02 12:44 - 2013-11-11 21:38 - 00005566 _____ C:\Users\*****\daemonprocess.txt
2014-01-02 12:28 - 2014-01-02 12:28 - 00000000 ____D C:\Users\*****\AppData\Roaming\Malwarebytes
2014-01-02 12:28 - 2014-01-02 12:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-02 12:28 - 2014-01-02 12:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-02 12:27 - 2014-01-02 12:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-02 12:07 - 2014-01-02 12:07 - 02053304 _____ () C:\Users\*****\Downloads\DownloadManagerSetup.exe
2013-12-31 10:06 - 2013-12-31 10:06 - 00024116 _____ C:\ComboFix.txt
2013-12-31 10:06 - 2013-12-31 09:47 - 00000000 ____D C:\Qoobox
2013-12-31 10:04 - 2013-12-31 09:46 - 00000000 ____D C:\Windows\erdnt
2013-12-31 10:03 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-31 09:42 - 2013-12-31 09:42 - 05159030 ____R (Swearware) C:\Users\*****\Desktop\ComboFix.exe
2013-12-29 12:25 - 2013-12-29 11:44 - 00004151 _____ C:\Users\*****\Downloads\FRST64.exe.27may85.partial
2013-12-29 12:05 - 2009-07-14 06:13 - 01527002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-29 11:44 - 2013-12-29 11:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\MusicNet
2013-12-29 11:43 - 2013-12-29 11:43 - 00000000 ____D C:\Users\*****\Documents\My Received Files
2013-12-28 20:02 - 2013-12-28 18:27 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-12-28 18:57 - 2009-09-11 09:13 - 00002083 _____ C:\Users\Public\Desktop\Toshiba-Garantieregistrierung.lnk
2013-12-28 18:29 - 2013-12-28 18:29 - 00000000 _____ C:\autoexec.bat
2013-12-28 18:28 - 2013-12-28 18:28 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-12-26 17:25 - 2013-12-26 17:25 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2013-12-23 20:32 - 2013-12-23 20:32 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2013-12-22 20:54 - 2013-11-07 15:09 - 00007599 _____ C:\Users\*****\AppData\Local\Resmon.ResmonCfg
2013-12-22 18:28 - 2012-05-09 19:23 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-22 18:28 - 2012-05-09 19:23 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-22 18:28 - 2011-07-13 06:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-22 18:25 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-22 18:25 - 2009-07-14 05:45 - 00427872 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-22 17:35 - 2010-11-09 13:35 - 00111288 _____ C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-22 17:34 - 2013-12-22 17:34 - 00000000 ____D C:\Users\*****\AppData\Roaming\TeamViewer
2013-12-22 17:22 - 2013-12-22 17:22 - 00001133 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2013-12-22 17:22 - 2013-12-22 17:22 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-12-22 17:21 - 2013-12-22 17:20 - 06072408 _____ (TeamViewer GmbH) C:\Users\*****\Downloads\TeamViewer_Setup_de_9.0.24951.exe
2013-12-22 15:43 - 2013-12-22 13:51 - 00000000 ____D C:\Users\*****\AppData\Roaming\canon
2013-12-22 15:22 - 2013-12-22 13:55 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-22 15:16 - 2013-12-22 15:12 - 00000000 ____D C:\Users\*****\AppData\Local\CANON_INC
2013-12-22 14:05 - 2013-12-22 14:05 - 00000000 ____D C:\Users\*****\AppData\Roaming\CANON INC
2013-12-22 13:57 - 2013-12-22 13:57 - 00000000 ____D C:\Users\*****\AppData\Roaming\Canon_Inc_IC
2013-12-22 13:56 - 2013-12-22 13:56 - 00001168 _____ C:\Users\Public\Desktop\Picture Style Editor.lnk
2013-12-22 13:56 - 2013-12-22 13:56 - 00001163 _____ C:\Users\Public\Desktop\ImageBrowser EX.lnk
2013-12-22 13:56 - 2013-12-22 13:56 - 00001038 _____ C:\Users\Public\Desktop\EOS Utility.lnk
2013-12-22 13:55 - 2013-12-22 13:55 - 00001103 _____ C:\Users\Public\Desktop\Digital Photo Professional.lnk
2013-12-22 13:51 - 2013-12-22 13:51 - 00000000 ____D C:\ProgramData\Canon_Inc_IC
2013-12-22 13:38 - 2013-11-07 22:36 - 00620640 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-12-22 13:38 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-12-22 13:17 - 2011-01-06 17:24 - 00005924 _____ C:\ProgramData\flcd_proxy.log
2013-12-19 18:04 - 2013-12-19 18:04 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-12-17 22:30 - 2013-08-16 16:09 - 00000000 ____D C:\Windows\system32\MRT
2013-12-17 22:28 - 2010-11-11 21:15 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-07 21:07 - 2013-12-07 21:07 - 00000000 ____D C:\Users\*****\Documents\MemTest4
2013-12-07 19:39 - 2010-11-09 13:42 - 00001432 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-07 19:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-07 19:34 - 2013-11-30 09:43 - 00025796 _____ C:\Windows\IE11_main.log
2013-12-07 19:27 - 2013-12-07 19:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-07 19:27 - 2013-12-07 19:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-07 19:27 - 2013-12-07 19:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-07 19:27 - 2013-12-07 19:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-07 19:27 - 2013-12-07 19:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-07 19:27 - 2013-12-07 19:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-07 19:27 - 2013-12-07 19:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-07 19:27 - 2013-12-07 19:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-07 19:27 - 2013-12-07 19:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-15 13:25
==================== End Of Log ============================
Vielen Dank für die tatkräftige Unterstützung. Kann ich den Rechner jetzt meiner Tochter wieder freigeben? Freundliche Grüße Schleyerling |
|
| Themen zu Windows 7, PC extrem langsam, 50% Leerlaufauslastung, Verdacht auf Malware / Virus |
| aufruf, cpu-auslastung, ergebnis, hallo zusammen, internet, kaspersky, kostenlose, langsam, löschen, malware, pc extrem langsam, problem, programm, rechner, scan, security, taskmanager, toshiba, verdacht, version, virus, windows, windows 7, wirklich, woche |
Hybrid-Darstellung
