|
Log-Analyse und Auswertung: Hunderte Mails kommen bei mir an. Mail delivery failed: returning message to senderHaWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
02.01.2014, 08:44 | #1 |
| Hunderte Mails kommen bei mir an. Mail delivery failed: returning message to senderHa Hallo zusammen und Frohes neues Jahr! An Silvester sind auf einmal hunderte Mails angekommen mit dem oben genannten Betreff. Provider hat schon eine Mail geschickt, dass von der Mail Adresse viele Mails mit einem nicht bkannten Empfänger verschickt werden. Ist der Rechner infiziert? Danke & gruß Sorry, schicke gleich Infos nach Anleitung! Geändert von vuxi (02.01.2014 um 09:30 Uhr) |
02.01.2014, 09:56 | #2 |
| Hunderte Mails kommen bei mir an. Mail delivery failed: returning message to senderHa hier die log files
__________________ |
02.01.2014, 14:32 | #3 |
| Hunderte Mails kommen bei mir an. Mail delivery failed: returning message to senderHaCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01-01-2014 01 Ran by Ivonne at 2014-01-02 09:22:51 Running from E:\ Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG Anti-Virus 2011 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} AS: AVG Anti-Virus 2011 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Acrobat 9 Standard - English, Français, Deutsch (Version: 9.5.5 - Adobe Systems) Hidden Adobe Acrobat 9.5.5 - CPSID_83708 (Version: - Adobe Systems Incorporated) Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated) AVG 2011 (Version: 10.0.1432 - AVG Technologies) AVG 2011 (Version: 10.0.1432 - AVG Technologies) Hidden AVG 2011 (Version: 10.0.3658 - AVG Technologies) Hidden Broadcom Gigabit NetLink Controller (Version: 12.33.02 - Broadcom Corporation) Broadcom Management Programs (Version: 12.35.01 - Broadcom Corporation) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version: - Microsoft) Dell Backup and Recovery Manager (Version: 1.3 - Dell Inc.) Dell DataSafe Online (Version: 2.1.19634 - Dell) Dell Edoc Viewer (Version: 1.0.0 - Dell Inc) DirectX 9 Runtime (Version: 1.00.0000 - Sonic Solutions) Hidden HERMA Label Designer plus 1.1 (Version: 1.00.0000 - HERMA GmbH) Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1995 - Intel Corporation) Java 7 Update 25 (Version: 7.0.250 - Oracle) Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden MFCLOC (Version: 1.00.0000 - Dell Inc.) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Business 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) PhotoShowExpress (Version: 2.0.028 - Sonic Solutions) Hidden Realtek High Definition Audio Driver (Version: 6.0.1.5936 - ) RedMon - Redirection Port Monitor (Version: 1.90 - Ghostgum Software Pty Ltd) Roxio Activation Module (Version: 1.0 - Roxio) Hidden Roxio BackOnTrack (Version: 1.3.3 - Roxio) Hidden Roxio Burn (Version: 1.6 - Roxio) Hidden Roxio Creator Starter (Version: 1.0.311 - Roxio) Hidden Roxio Creator Starter (Version: 12.1.40.0 - Roxio) Roxio Creator Starter (Version: 5.0.0 - Roxio) Hidden Roxio Express Labeler 3 (Version: 3.2.2 - Roxio) Hidden Roxio File Backup (Version: 1.3.2 - Roxio) Hidden Sonic CinePlayer Decoder Pack (Version: 4.3.0 - Sonic Solutions) Hidden Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553065) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2566458) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version: - Microsoft) Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden YajHFC 0.5.3 (Version: 0.5.3 - Jonas Wolz) ==================== Restore Points ========================= 28-10-2013 09:26:52 Geplanter Prüfpunkt 04-11-2013 09:59:27 Geplanter Prüfpunkt 14-11-2013 09:17:38 Geplanter Prüfpunkt 15-11-2013 02:00:24 Windows Update 22-11-2013 08:31:13 Geplanter Prüfpunkt 03-12-2013 12:06:50 Windows Update 11-12-2013 10:57:42 Geplanter Prüfpunkt 12-12-2013 14:39:00 Windows Update 20-12-2013 07:45:21 Geplanter Prüfpunkt 27-12-2013 08:10:25 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:04 - 2013-05-22 13:54 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {2AFEB866-3DC6-4484-9C93-CAC3EC5729AB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-06-06 07:04 - 2009-02-27 16:39 - 00019968 _____ () C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.deu 2010-08-30 03:34 - 2010-08-30 03:34 - 00375280 _____ () c:\program files\common files\roxio shared\dllshared\SQLite352.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/19/2013 00:07:53 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0xdd8 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (12/19/2013 08:53:52 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0xbb8 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (12/19/2013 08:53:43 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0xe6c Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (12/19/2013 08:53:19 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0x164c Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (12/19/2013 08:53:07 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0xa6c Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (12/19/2013 08:52:54 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0x16f4 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (12/19/2013 08:52:45 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c Name des fehlerhaften Moduls: MSHTML.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52947390 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00195e56 ID des fehlerhaften Prozesses: 0x1428 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (10/18/2013 11:09:38 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16720, Zeitstempel: 0x523cf127 Name des fehlerhaften Moduls: Acrobat.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x518aac2c Ausnahmecode: 0xc0000005 Fehleroffset: 0x53edb5dc ID des fehlerhaften Prozesses: 0x1134 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (10/18/2013 07:32:08 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16720, Zeitstempel: 0x523cf127 Name des fehlerhaften Moduls: Acrobat.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x518aac2c Ausnahmecode: 0xc0000005 Fehleroffset: 0x54c4b5dc ID des fehlerhaften Prozesses: 0x894 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (09/12/2013 08:20:33 AM) (Source: MsiInstaller) (User: BRENDA-PC) Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011004}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 System errors: ============= Error: (12/30/2013 00:17:54 PM) (Source: DCOM) (User: ) Description: {0006F03A-0000-0000-C000-000000000046} Error: (12/30/2013 10:05:31 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/30/2013 10:05:31 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/30/2013 10:02:02 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/27/2013 00:55:46 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/27/2013 00:55:46 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/19/2013 11:13:05 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/19/2013 11:13:05 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/16/2013 10:00:08 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (12/16/2013 10:00:08 AM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Microsoft Office Sessions: ========================= Error: (12/19/2013 00:07:53 PM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e56dd801cefc8f732f9edeC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllce117728-689d-11e3-93e2-842b2b8b0546 Error: (12/19/2013 08:53:52 AM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e56bb801cefc8f7387b1c8C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllb39f4ece-6882-11e3-93e2-842b2b8b0546 Error: (12/19/2013 08:53:43 AM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e56e6c01cefc8f503ab889C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllae38f777-6882-11e3-93e2-842b2b8b0546 Error: (12/19/2013 08:53:19 AM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e56164c01cefc8f5ff01702C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dll9fb1f2bd-6882-11e3-93e2-842b2b8b0546 Error: (12/19/2013 08:53:07 AM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e56a6c01cefc8a423c9eb6C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dll98a8901f-6882-11e3-93e2-842b2b8b0546 Error: (12/19/2013 08:52:54 AM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e5616f401cefc8f4fa72338C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dll908b634d-6882-11e3-93e2-842b2b8b0546 Error: (12/19/2013 08:52:45 AM) (Source: Application Error)(User: ) Description: iexplore.exe11.0.9600.16428525b664cMSHTML.dll11.0.9600.1647652947390c000000500195e56142801cefc88ef4901e7C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dll8b7ebf02-6882-11e3-93e2-842b2b8b0546 Error: (10/18/2013 11:09:38 AM) (Source: Application Error)(User: ) Description: iexplore.exe10.0.9200.16720523cf127Acrobat.dll_unloaded0.0.0.0518aac2cc000000553edb5dc113401cecbe7a0485d37C:\Program Files\Internet Explorer\iexplore.exeAcrobat.dll65391b2e-37dd-11e3-940a-842b2b8b0546 Error: (10/18/2013 07:32:08 AM) (Source: Application Error)(User: ) Description: iexplore.exe10.0.9200.16720523cf127Acrobat.dll_unloaded0.0.0.0518aac2cc000000554c4b5dc89401cecbc8efc3219fC:\Program Files\Internet Explorer\iexplore.exeAcrobat.dll02cd496a-37bf-11e3-940a-842b2b8b0546 Error: (09/12/2013 08:20:33 AM) (Source: MsiInstaller)(User: BRENDA-PC) Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011004}1625(NULL)(NULL)(NULL) ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 3036.8 MB Available physical RAM: 1809.71 MB Total Pagefile: 6071.9 MB Available Pagefile: 4966.95 MB Total Virtual: 2047.88 MB Available Virtual: 1897.73 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:220.08 GB) (Free:170.93 GB) NTFS Drive e: (USB DISK) (Removable) (Total:3.73 GB) (Free:3.73 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 40000000) Partition 1: (Not Active) - (Size=118 MB) - (Type=DE) Partition 2: (Active) - (Size=13 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=220 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=4 GB) - (Type=0B) ==================== End Of Log ============================ Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 09:21 on 02/01/2014 (Ivonne) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-01-2014 01 Ran by Ivonne (administrator) on BRENDA-PC on 02-01-2014 09:22:24 Running from E:\ Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG10\avgchsvx.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG10\avgwdsvc.exe (Broadcom Corp.) C:\Program Files\Broadcom\BPowMon\BPowMon.exe (Dell, Inc.) C:\Program Files\Dell\Dell Datasafe Online\NOBuAgent.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG10\avgam.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe () C:\Program Files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG10\avgtray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG10\avgcsrvx.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7739936 2009-09-12] (Realtek Semiconductor) HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [Dell DataSafe Online] - C:\Program Files\Dell\Dell Datasafe Online\NOBuClient.exe [927576 2010-08-25] (Dell, Inc.) HKLM\...\Run: [RoxWatchTray] - C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-09-04] (Sonic Solutions) HKLM\...\Run: [Desktop Disc Tool] - C:\Program Files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [518640 2010-09-03] () HKLM\...\Run: [AVG_TRAY] - C:\Program Files\AVG\AVG10\avgtray.exe [2345592 2012-08-01] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /syncC:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.nl/ SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {599D95C0-C893-491B-BB8B-C777D4C9E967} URL = SearchScopes: HKCU - {599D95C0-C893-491B-BB8B-C777D4C9E967} URL = BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll No File BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll No File Tcpip\..\Interfaces\{63576270-6614-4248-A25A-15533DA91DAB}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\qwjw6wkd.default-1346924256165 FF Homepage: www.google.nl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: SearchPreview - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\qwjw6wkd.default-1346924256165\Extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} FF Extension: AmazonFox - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\qwjw6wkd.default-1346924256165\Extensions\{5274f9d8-138e-462e-8437-1d790141a7da}.xpi FF Extension: Adblock Plus - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\qwjw6wkd.default-1346924256165\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension ========================== Services (Whitelisted) ================= R2 avgwd; C:\Program Files\AVG\AVG10\avgwdsvc.exe [269520 2011-02-08] (AVG Technologies CZ, s.r.o.) R2 NOBU; C:\Program Files\Dell\Dell Datasafe Online\NOBuAgent.exe [2075480 2010-08-25] (Dell, Inc.) S3 RoxMediaDB12OEM; C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [1116656 2010-09-04] (Sonic Solutions) S2 RoxWatch12; C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [219632 2010-09-04] (Sonic Solutions) ==================== Drivers (Whitelisted) ==================== R0 AVGIDSEH; C:\Windows\System32\DRIVERS\AVGIDSEH.Sys [22992 2011-02-22] (AVG Technologies CZ, s.r.o. ) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [255968 2012-11-12] (AVG Technologies CZ, s.r.o.) R1 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [34896 2011-03-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [32592 2011-03-16] (AVG Technologies CZ, s.r.o.) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Ivonne\AppData\Local\Temp\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-02 09:22 - 2014-01-02 09:22 - 00000000 ____D C:\FRST 2014-01-02 09:21 - 2014-01-02 09:21 - 00000000 _____ C:\Users\Ivonne\defogger_reenable 2013-12-23 08:36 - 2013-12-23 08:36 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-12 15:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-12 15:42 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-12 15:42 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-12 15:42 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-12 15:42 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-12 15:42 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-12 15:42 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-12 15:42 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-12 15:42 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-12 15:42 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-12 15:42 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-12 15:42 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-12 15:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-12 15:42 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-12 15:42 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-12 15:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-12 15:42 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-12 15:42 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-12 15:42 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-12 15:39 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-12 15:39 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-12 15:31 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 15:31 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 15:31 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 15:31 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 15:31 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 15:31 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 15:31 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 15:31 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 15:31 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 15:31 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 15:31 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-03 13:08 - 2013-12-03 13:08 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 13:08 - 2013-12-03 13:08 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 13:08 - 2013-12-03 13:08 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 13:08 - 2013-12-03 13:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 13:07 - 2013-12-03 13:10 - 00010261 _____ C:\Windows\IE11_main.log ==================== One Month Modified Files and Folders ======= 2014-01-02 09:22 - 2014-01-02 09:22 - 00000000 ____D C:\FRST 2014-01-02 09:21 - 2014-01-02 09:21 - 00000000 _____ C:\Users\Ivonne\defogger_reenable 2014-01-02 09:21 - 2011-01-21 10:08 - 00000000 ____D C:\Users\Ivonne 2014-01-02 09:08 - 2009-07-14 05:34 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-02 09:08 - 2009-07-14 05:34 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-02 09:05 - 2010-12-28 16:46 - 01536862 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-02 09:05 - 2009-07-14 05:39 - 00073341 _____ C:\Windows\setupact.log 2014-01-02 09:04 - 2009-07-14 05:55 - 02073703 _____ C:\Windows\WindowsUpdate.log 2014-01-02 09:02 - 2013-10-24 07:04 - 00000000 ____D C:\Users\Ivonne\.yajhfc 2014-01-02 09:02 - 2010-12-28 16:56 - 00000000 ____D C:\ProgramData\Sonic 2014-01-02 09:01 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-30 12:59 - 2012-09-20 08:19 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-30 12:48 - 2011-01-24 15:56 - 00000000 ____D C:\Windows\system32\Drivers\AVG 2013-12-27 10:34 - 2012-05-29 14:05 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-23 08:36 - 2013-12-23 08:36 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-19 09:16 - 2013-06-27 09:38 - 00000000 ____D C:\Users\Ivonne\Documents\Messe NL 2013-12-18 09:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-12-13 10:50 - 2009-07-14 05:33 - 00463056 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-13 10:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-12-12 15:42 - 2011-01-21 10:18 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-12 15:41 - 2013-08-14 12:08 - 00000000 ____D C:\Windows\system32\MRT 2013-12-12 15:40 - 2012-11-23 15:56 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-11 11:59 - 2012-09-20 08:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-12-11 11:59 - 2011-05-20 09:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-12-09 12:14 - 2013-01-25 12:26 - 00000000 ____D C:\Users\Ivonne\Documents\Privat 2013-12-05 15:24 - 2012-12-12 11:22 - 00000000 ____D C:\Users\Ivonne\Desktop\Alina 2013-12-04 12:20 - 2013-04-05 08:01 - 00000000 ____D C:\Users\Ivonne\Documents\NL Handler 2013-12-03 13:10 - 2013-12-03 13:07 - 00010261 _____ C:\Windows\IE11_main.log 2013-12-03 13:08 - 2013-12-03 13:08 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 13:08 - 2013-12-03 13:08 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 13:08 - 2013-12-03 13:08 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 13:08 - 2013-12-03 13:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 13:08 - 2013-12-03 13:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 13:08 - 2013-12-03 13:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe Some content of TEMP: ==================== C:\Users\Ivonne\AppData\Local\Temp\ICReinstall_Setup.exe C:\Users\Ivonne\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 12:00 ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2014-01-02 09:54:27 Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD2500AAJS-75M0A0 rev.02.03E02 232,83GB Running: gmer_2.1.19163.exe; Driver: C:\Users\Ivonne\AppData\Local\Temp\awdiipog.sys ---- Kernel code sections - GMER 2.1 ---- .text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 82A40A15 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82A7A212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} ---- Devices - GMER 2.1 ---- AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys ---- EOF - GMER 2.1 ---- |
07.09.2014, 14:39 | #4 |
Administrator /// technical service | Hunderte Mails kommen bei mir an. Mail delivery failed: returning message to senderHa Hallo, leider wurde Dein Thema aus (technischen Gründen) übersehen. Da mehrere Antworten in Deinem Thema vorhanden waren, wurde es versehentlich als 'bereits in Arbeit' eingestuft. Dies bitten wir zu entschuldigen. Wir versuchen jedem Hilfesuchenden binnen kurzer Zeit zu antworten und Lösungen für das Problem anzubieten. Bitte erstelle ggf. ein neues Thema, damit sich ein Teammitglied deinem Problem annehmen kann. Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten? Vielen Dank für Dein Verständnis. |
Themen zu Hunderte Mails kommen bei mir an. Mail delivery failed: returning message to senderHa |
adresse, angekommen, auf einmal, delivery, empfänger, failed, frohes, geschickt, hallo zusammen, hunderte, infiziert, mail delivery, mail delivery failed, mails, message, neues, rechner, silvester, verschickt, zusammen |