![]() |
|
Plagegeister aller Art und deren Bekämpfung: Google zeigt keine Ergebnisse anWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Google zeigt keine Ergebnisse an Hallo, ich habe seit zwei Tagen ein Problem mit google! Es werden mir keine Suchergebnisse angezeigt. Ich benutze Firefox und es hat bisher auch immer funktioniert. Was ich bisher gemacht habe: 1. Ich habe das Programm Maleware mehrfach laufen lassen und auch mehrere Sachen gefunden: Der erste Durchgang: Malwarebytes Anti-Rootkit BETA 1.07.0.1008 www.malwarebytes.org Database version: v2014.01.11.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 :: RODENBER-BB844F [administrator] 11.01.2014 12:28:26 mbar-log-2014-01-11 (12-28-26).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 260390 Time elapsed: 16 minute(s), 14 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 18 HKLM\SOFTWARE\CLASSES\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\INTERFACE\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\TYPELIB\{D372567D-67C1-4B29-B3F0-159B52B3E967} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\INTERFACE\{1AD27395-1659-4DFF-A319-2CFA243861A5} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\YontooIEClient.Api.1 (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\YontooIEClient.Api (Adware.Yontoo) -> Delete on reboot. HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\YontooIEClient.Layers.1 (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\YontooIEClient.Layers (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} (Adware.Yontoo) -> Delete on reboot. HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} (Adware.Yontoo) -> Delete on reboot. HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} (Adware.Yontoo) -> Delete on reboot. HKLM\SOFTWARE\CLASSES\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\INPROCSERVER32 (Adware.Yontoo) -> Delete on reboot. HKCU\SOFTWARE\fcn (Rogue.Residue) -> Delete on reboot. HKCU\SOFTWARE\FirstRRRun (Bagle.Trace) -> Delete on reboot. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 1 HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Replace on reboot. Folders Detected: 1 C:\WINDOWS\system32\lowsec (Stolen.data) -> Delete on reboot. Files Detected: 6 C:\Programme\Yontoo Layers\YontooIEClient.dll (Adware.Yontoo) -> Delete on reboot. C:\Dokumente und Einstellungen\Rodenberg\Lokale Einstellungen\Temp\0.13117921485388673.exe (Exploit.Drop.2) -> Delete on reboot. C:\Dokumente und Einstellungen\Rodenberg\Lokale Einstellungen\Temp\60325cahp25ca0.exe (Trojan.Agent) -> Delete on reboot. C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Delete on reboot. C:\WINDOWS\system32\lowsec\local.ds (Stolen.data) -> Delete on reboot. C:\WINDOWS\system32\lowsec\user.ds (Stolen.data) -> Delete on reboot. Physical Sectors Detected: 0 (No malicious items detected) (end) Der zweite Duchgang: Malwarebytes Anti-Rootkit BETA 1.07.0.1008 www.malwarebytes.org Database version: v2014.01.11.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 :: RODENBER-BB844F [administrator] 11.01.2014 12:50:40 mbar-log-2014-01-11 (12-50-40).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 260592 Time elapsed: 15 minute(s), 25 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Delete on reboot. Physical Sectors Detected: 0 (No malicious items detected) (end) der dritte Durchgang: Malwarebytes Anti-Rootkit BETA 1.07.0.1008 www.malwarebytes.org Database version: v2014.01.11.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 :: RODENBER-BB844F [administrator] 11.01.2014 13:11:05 mbar-log-2014-01-11 (13-11-05).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 260596 Time elapsed: 15 minute(s), 10 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Delete on reboot. Physical Sectors Detected: 0 (No malicious items detected) (end) und der vierte Durchgang: Malwarebytes Anti-Rootkit BETA 1.07.0.1008 www.malwarebytes.org Database version: v2014.01.11.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 :: RODENBER-BB844F [administrator] 11.01.2014 13:32:34 mbar-log-2014-01-11 (13-32-34).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 260564 Time elapsed: 16 minute(s), 4 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Delete on reboot. Physical Sectors Detected: 0 (No malicious items detected) (end) Dann habe ich ADWCleaner benutzt. Da kann ich leider keine Ergebnisse zeigen, da ich nicht weis wo ich die Log Datei finde. Es wurde auf jeden Fall auch etwas gefunden. Als dritten Schritt habe ich dann das Programm Junkware Removal Tool benutzt mit diesem Ergebnis: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Microsoft Windows XP x86 Ran by Rodenberg on 11.01.2014 at 14:37:12,48 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Dokumente und Einstellungen\Rodenberg\Anwendungsdaten\mozilla\firefox\profiles\q38lzj9r.default\minidumps [11 files] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 11.01.2014 at 14:41:02,79 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Als letztes habe ich dann das Farbar Recovery Scan Tool benutzt. Das wurde jedoch nicht komplett ausgeführt und mit einem Problembericht beendet: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 02 Ran by Rodenberg (administrator) on RODENBER-BB844F on 11-01-2014 15:06:37 Running from C:\Dokumente und Einstellungen\Rodenberg\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Lexmark International, Inc.) C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.) C:\WINDOWS\system32\LEXPPS.EXE (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVM Berlin) C:\Programme\avmwlanstick\WLanNetService.exe (MAGIX AG) C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe (Oracle Corporation) D:\Programme\bin\jqs.exe () C:\Programme\Motorola\MotoHelper\MotoHelperService.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe () D:\Programme\PrfldSvc.exe () C:\WINDOWS\system32\cic32.exe () C:\Programme\Motorola\MotoHelper\MotoHelperAgent.exe (TomTom) D:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TuneUp Software) C:\WINDOWS\system32\TUProgSt.exe (Ulead Systems, Inc.) C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe (Lexmark International, Inc.) C:\Programme\Lexmark X6100 Series\lxbfbmgr.exe (AVM Berlin) C:\Programme\avmwlanstick\WLanGUI.exe (Lexmark International, Inc.) C:\Programme\Lexmark X6100 Series\lxbfbmon.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Samsung) C:\Programme\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung Electronics) C:\Programme\Samsung\Kies\KiesAirMessage.exe (Samsung) C:\Programme\Samsung\Kies\Kies.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Farbar) C:\Dokumente und Einstellungen\Rodenberg\Desktop\FRST(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.exe [16261632 2006-07-21] (Realtek Semiconductor Corp.) HKLM\...\Run: [SkyTel] - C:\WINDOWS\SkyTel.exe [2879488 2006-05-16] (Realtek Semiconductor Corp.) HKLM\...\Run: [Alcmtr] - C:\WINDOWS\Alcmtr.exe [69632 2005-05-03] (Realtek Semiconductor Corp.) HKLM\...\Run: [GBB36X Configure] - C:\WINDOWS\system32\JMRaidTool.exe [356352 2006-07-12] (Gigabyte Technology Corp.) HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [Lexmark X6100 Series] - C:\Programme\Lexmark X6100 Series\lxbfbmgr.exe [57344 2003-09-23] (Lexmark International, Inc.) HKLM\...\Run: [AVMWlanClient] - C:\Programme\avmwlanstick\WLanGUI.exe [1904640 2009-05-07] (AVM Berlin) HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) HKCU\...\Run: [] - C:\Programme\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung) HKCU\...\Run: [KiesAirMessage] - C:\Programme\Samsung\Kies\KiesAirMessage.exe [578560 2013-07-18] (Samsung Electronics) HKCU\...\Run: [KiesPreload] - C:\Programme\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung) HKCU\...\Run: [swg] - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-02-14] (Google Inc.) HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000 ==================== Internet (Whitelisted) ==================== ProxyServer: proxy.teleos-web.de:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Update_Check_Page = hxxp://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {4CCF9AF7-541E-449C-AB6A-84D81FAEBB7D} URL = hxxp://www.googIecrawler.com/search/?q={searchTerms}&lang=de SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D4945385352 43&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {0791432A-42E6-461F-9BA8-C16D5D665C73} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {0B56BA6D-113D-4CED-BFB8-252F03E60A61} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {455B9885-182E-49A8-9E59-5AAD85AFC2C6} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {4CCF9AF7-541E-449C-AB6A-84D81FAEBB7D} URL = hxxp://www.googIecrawler.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F674965637261776C65722E636F6D2F7365617263682F3F713D7B7365617263685465726D737D266C616E673D6465&st={searchTerms}&cl id=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {590AC977-63FF-47DE-A758-0D26BE5A9F1C} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E677561 67657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26736F7572636569643D696537&s t={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {afdbefaa-5d2f-42ee-b78c-185a7026615b} URL = hxxp://partners.webmasterplan.com.anonymize-me.de/?anonymto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st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {afdbefaa-5d3f-42ee-b78c-185a7012215b} URL = hxxp://www.goomonkey.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F6D6F6E6B65792E636F6D2F7365617263682F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {afdbefaa-5d3f-42ee-b78c-185a7025515b} URL = hxxp://www.googIecrawler.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F674965637261776C65722E636F6D2F7365617263682F3F713D7B7365617263685465726D737D266C616E673D6465&st={searchTerms}&cl id=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {afdbefaa-5d3f-42ee-b79c-185a7066615b} URL = hxxp://www.amazon.de.anonymize-me.de/?anonymto=687474703A2F2F7777772E616D617A6F6E2E64652F67702F6173736F6369617465732F6C696E6B2D74797065732F736561726368626F782E68746D6C3F7461673D6D7230392D 32312663726561746976653D373032362663616D706169676E3D3138373426616469643D3159393152313837595354574D3137524E475751266D6F64653D626C656E646564266B6579776F 72643D7B7365617263685465726D737D265375626D69742E783D3931265375626D69742E793D38265375626D69743D476F&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 SearchScopes: HKCU - {C42D1FDF-3DCA-4AD7-BBB1-3A12727C9A07} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {CBAF4BD5-C00C-42E0-A489-030D1E142B03} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E677561 67657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26736F7572636569643D69653726 726C7A3D314937474749535F6465&st={searchTerms}&clid=9703b27f-00a8-4bf3-9ba8-3a0c01c081d5&pid=freewarede&k=0 BHO: No Name - {24A63CCA-4F35-4CCB-AD66-EBEC3ADD59E4} - radioiehelper.dll No File BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programme\bin\ssv.dll (Oracle Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Programme\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - &Browser_Radio - {0F08F55E-A4D7-4D3A-8264-8F85008100C2} - radiojockeyorg.dll No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://www.fujidirekt.de/ips-opdata/objects/jordan-canvasx.cab DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://express.foto.com/ImageUploader5.cab DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1177662123435 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Winsock: Catalog9 01 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 26 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Rodenberg\Anwendungsdaten\Mozilla\Firefox\Profiles\yrr9xm24.Lars FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_39.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - D:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - D:\Programme\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - D:\Programme\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @veetle.com/veetlePlugin,version=0.9.11 - C:\Programme\Veetle\plugins\npVeetle.dll (Veetle, Inc.) FF Plugin: @videolan.org/vlc;version=0.9.11 - C:\Programme\Veetle\VLC\npvlc.dll (VideoLAN Team) FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Dokumente und Einstellungen\Rodenberg\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - D:\Programme\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.) FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ FF Extension: Firefox Synchronisation Extension - C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-30] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664 2011-02-18] (Apple Inc.) R2 AVM WLAN Connection Service; C:\Programme\avmwlanstick\WlanNetService.exe [368640 2009-05-07] (AVM Berlin) R2 Fabs; C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG) S3 FirebirdServerMAGIXInstance; C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2010-08-01] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2010-08-01] (Google Inc.) S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2013-03-08] (Google) S3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [820520 2011-03-07] (Apple Inc.) R2 LexBceS; C:\WINDOWS\system32\LEXBCES.EXE [303104 2003-09-23] (Lexmark International, Inc.) R2 MotoHelper; C:\Programme\Motorola\MotoHelper\MotoHelperService.exe [223088 2011-04-26] () S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2013-12-20] (Mozilla Foundation) S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation) R2 prfldsvc; D:\Programme\PrfldSvc.exe [69632 2006-04-21] () S3 ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia) R2 snevol32; C:\WINDOWS\system32\cic32.exe [70656 2013-07-08] () R2 TomTomHOMEService; D:\Programme\TomTom HOME 2\TomTomHOMEService.exe [92008 2010-08-24] (TomTom) S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [361216 2009-10-20] (TuneUp Software) R2 TuneUp.ProgramStatisticsSvc; C:\Windows\System32\TUProgSt.exe [604416 2009-10-20] (TuneUp Software) R2 UleadBurningHelper; C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe [67056 2007-03-03] (Ulead Systems, Inc.) R2 JavaQuickStarterService; "D:\Programme\bin\jqs.exe" -service -config "D:\Programme\lib\deploy\jqs\jqs.conf" S3 nosGetPlusHelper; C:\Programme\NOS\bin\getPlus_Helper_3004.dll [x] S3 WMPNetworkSvc; "C:\Programme\Windows Media Player\WMPNetwk.exe" [x] ==================== Drivers (Whitelisted) ==================== S3 61883; C:\Windows\System32\DRIVERS\61883.sys [48128 2008-04-13] (Microsoft Corporation) S3 AVCSTRM; C:\Windows\System32\DRIVERS\avcstrm.sys [13696 2008-04-13] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-30] (Avira Operations GmbH & Co. KG) S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) R2 cFosNT; C:\Windows\System32\Drivers\cFosNT.sys [260657 2002-10-21] (cFos Software GmbH) S3 DVC; C:\Windows\System32\Drivers\DVC.sys [38741 2002-04-25] (Samsung Electronics Co., Ltd) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG) S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [37344 2013-07-18] () R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2009-05-07] (AVM GmbH) R0 JGOGO; C:\Windows\System32\DRIVERS\JGOGO.sys [6912 2006-02-07] (JMicron ) R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [41728 2006-07-20] (JMicron Technology Corp.) S3 MotDev; C:\Windows\System32\DRIVERS\motodrv.sys [42752 2009-05-08] (Motorola Inc) S3 MSTAPE; C:\Windows\System32\DRIVERS\mstape.sys [49024 2008-04-13] (Microsoft Corporation) S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2003-09-19] (Padus, Inc.) R2 Prvflder; C:\Windows\System32\DRIVERS\prvflder.sys [70912 2006-04-21] (Windows (R) 2000 DDK provider) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-11-30] (Avira GmbH) R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-21] () R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [186592 2007-06-17] (Jungo) R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [248192 2006-07-12] (Marvell) S3 avmeject; system32\drivers\avmeject.sys [x] S4 IntelIde; No ImagePath S3 ProcObsrv; \??\D:\Programme\Glary Utilities 4\ProcObsrv.sys [x] U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-11 15:05 - 2014-01-11 15:06 - 00023146 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\FRST.txt 2014-01-11 15:04 - 2014-01-11 15:04 - 01220096 _____ (Farbar) C:\Dokumente und Einstellungen\Rodenberg\Desktop\FRST(1).exe 2014-01-11 14:41 - 2014-01-11 14:41 - 00000743 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\JRT.txt 2014-01-11 14:37 - 2014-01-11 14:37 - 00000000 ____D C:\WINDOWS\ERUNT 2014-01-11 14:20 - 2014-01-11 14:31 - 00000000 ____D C:\AdwCleaner 2014-01-11 14:16 - 2014-01-11 14:16 - 00000000 ____D C:\FRST 2014-01-11 12:28 - 2014-01-11 13:32 - 00104664 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-01-11 12:28 - 2014-01-11 12:28 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes 2014-01-11 12:27 - 2014-01-11 13:49 - 00000000 ____D C:\Dokumente und Einstellungen\Rodenberg\Desktop\mbar 2014-01-11 12:27 - 2014-01-11 13:32 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-01-08 15:48 - 2014-01-08 15:48 - 00000000 __SHD C:\found.002 2014-01-07 22:09 - 2014-01-08 16:47 - 00000000 ____D C:\WINDOWS\pss 2014-01-07 18:42 - 2014-01-07 18:42 - 00000000 __SHD C:\found.001 2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\K-Lite Codec Pack 2013-12-27 12:42 - 2013-12-01 14:10 - 00218200 _____ C:\WINDOWS\system32\unrar.dll 2013-12-27 12:27 - 2014-01-08 16:53 - 00000000 ____D C:\Dokumente und Einstellungen\Rodenberg\Anwendungsdaten\GlarySoft 2013-12-20 11:33 - 2013-12-20 11:33 - 00000000 ____D C:\Programme\Mozilla Firefox 2013-12-19 17:15 - 2013-12-19 17:15 - 00001893 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk 2013-12-19 17:15 - 2013-12-19 17:15 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Earth ==================== One Month Modified Files and Folders ======= 2014-01-11 15:06 - 2014-01-11 15:05 - 00023146 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\FRST.txt 2014-01-11 15:06 - 2013-02-16 15:57 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-01-11 15:04 - 2014-01-11 15:04 - 01220096 _____ (Farbar) C:\Dokumente und Einstellungen\Rodenberg\Desktop\FRST(1).exe 2014-01-11 15:00 - 2009-10-20 14:32 - 00000500 _____ C:\WINDOWS\Tasks\1-Klick-Wartung.job 2014-01-11 14:41 - 2014-01-11 14:41 - 00000743 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\JRT.txt 2014-01-11 14:37 - 2014-01-11 14:37 - 00000000 ____D C:\WINDOWS\ERUNT 2014-01-11 14:34 - 2012-08-06 15:43 - 00000374 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2014-01-11 14:33 - 2007-03-06 12:31 - 01397141 _____ C:\WINDOWS\WindowsUpdate.log 2014-01-11 14:33 - 2004-08-04 13:00 - 00002422 _____ C:\WINDOWS\system32\wpa.dbl 2014-01-11 14:32 - 2011-06-06 15:32 - 00000378 _____ C:\WINDOWS\Tasks\Final Media Player Update Checker.job 2014-01-11 14:32 - 2010-08-01 15:45 - 00001092 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-11 14:32 - 2007-03-06 12:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2014-01-11 14:32 - 2007-03-06 12:14 - 00000157 _____ C:\WINDOWS\wiadebug.log 2014-01-11 14:32 - 2007-03-06 12:14 - 00000050 _____ C:\WINDOWS\wiaservc.log 2014-01-11 14:31 - 2014-01-11 14:20 - 00000000 ____D C:\AdwCleaner 2014-01-11 14:31 - 2007-03-06 12:47 - 00032552 _____ C:\WINDOWS\SchedLgU.Txt 2014-01-11 14:22 - 2007-03-06 12:12 - 00000000 ___RD C:\Programme 2014-01-11 14:16 - 2014-01-11 14:16 - 00000000 ____D C:\FRST 2014-01-11 14:13 - 2010-08-01 15:45 - 00001096 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-11 13:50 - 2007-03-21 16:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB931836$ 2014-01-11 13:49 - 2014-01-11 12:27 - 00000000 ____D C:\Dokumente und Einstellungen\Rodenberg\Desktop\mbar 2014-01-11 13:32 - 2014-01-11 12:28 - 00104664 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-01-11 13:32 - 2014-01-11 12:27 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-01-11 12:28 - 2014-01-11 12:28 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes 2014-01-11 11:25 - 2007-04-21 12:16 - 00002607 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\Microsoft Office Outlook 2003.lnk 2014-01-10 17:17 - 2007-03-06 13:03 - 00000000 ___RD C:\Dokumente und Einstellungen\Rodenberg\Startmenü\Programme 2014-01-09 20:17 - 2007-03-06 13:03 - 00000000 ___RD C:\Dokumente und Einstellungen\Rodenberg\Startmenü\Programme\Autostart 2014-01-09 18:01 - 2010-07-26 16:33 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2014-01-09 17:53 - 2007-04-14 19:00 - 00000000 ____D C:\Dokumente und Einstellungen\Rodenberg\Lokale Einstellungen\Anwendungsdaten\Adobe 2014-01-09 17:21 - 2007-03-06 13:03 - 00000000 ___RD C:\Dokumente und Einstellungen\Rodenberg\Eigene Dateien\Eigene Bilder 2014-01-09 17:01 - 2013-10-27 16:49 - 00001744 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\Kies Air Discovery Service.lnk 2014-01-09 14:57 - 2007-04-01 17:46 - 00000654 _____ C:\WINDOWS\lexstat.ini 2014-01-09 14:47 - 2007-04-21 12:16 - 00002509 _____ C:\Dokumente und Einstellungen\Rodenberg\Desktop\Microsoft Office Word 2003.lnk 2014-01-08 16:53 - 2013-12-27 12:27 - 00000000 ____D C:\Dokumente und Einstellungen\Rodenberg\Anwendungsdaten\GlarySoft 2014-01-08 16:53 - 2007-03-06 12:12 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2014-01-08 16:51 - 2009-10-20 14:32 - 00000000 ____D C:\Programme\TuneUp Utilities 2009 2014-01-08 16:47 - 2014-01-07 22:09 - 00000000 ____D C:\WINDOWS\pss 2014-01-08 16:47 - 2007-03-06 13:10 - 00000211 ___SH C:\boot.ini 2014-01-08 16:47 - 2004-08-04 13:00 - 00000654 _____ C:\WINDOWS\win.ini 2014-01-08 16:47 - 2004-08-04 13:00 - 00000227 _____ C:\WINDOWS\system.ini 2014-01-08 15:48 - 2014-01-08 15:48 - 00000000 __SHD C:\found.002 2014-01-07 20:02 - 2009-04-16 16:57 - 00000000 ____D C:\WINDOWS\system32\NtmsData 2014-01-07 18:42 - 2014-01-07 18:42 - 00000000 __SHD C:\found.001 2014-01-07 18:39 - 2007-03-06 12:29 - 00000000 ____D C:\WINDOWS\Registration 2014-01-02 11:22 - 2012-12-19 13:37 - 00000801 _____ C:\Dokumente und Einstellungen\All Users\Desktop\1&1 Control-Center.lnk 2014-01-02 11:22 - 2012-12-19 13:37 - 00000785 _____ C:\Dokumente und Einstellungen\All Users\Desktop\1&1 Webmailer.lnk 2014-01-02 11:22 - 2012-12-19 13:37 - 00000661 _____ C:\Dokumente und Einstellungen\All Users\Desktop\1&1 EasyLogin.lnk 2014-01-02 10:58 - 2007-07-07 15:56 - 00108544 ___SH C:\Dokumente und Einstellungen\Rodenberg\Eigene Dateien\Thumbs.db 2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\K-Lite Codec Pack 2013-12-27 12:37 - 2011-11-18 14:10 - 00000000 ____D C:\Programme\K-Lite Codec Pack 2013-12-27 12:36 - 2012-12-17 19:20 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-12-27 12:36 - 2011-12-12 20:35 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-12-27 12:08 - 2007-03-06 13:03 - 00000000 ____D C:\Dokumente und Einstellungen\Rodenberg 2013-12-27 12:08 - 2007-03-06 12:47 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService 2013-12-27 12:08 - 2007-03-06 12:35 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService 2013-12-27 12:04 - 2007-03-06 13:48 - 00000000 ___HD C:\Programme\InstallShield Installation Information 2013-12-27 12:04 - 2007-03-06 12:12 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü 2013-12-20 11:36 - 2012-10-05 09:29 - 00000000 ____D C:\Programme\Mozilla Maintenance Service 2013-12-20 11:33 - 2013-12-20 11:33 - 00000000 ____D C:\Programme\Mozilla Firefox 2013-12-19 17:15 - 2013-12-19 17:15 - 00001893 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk 2013-12-19 17:15 - 2013-12-19 17:15 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Earth 2013-12-19 17:15 - 2007-04-24 12:09 - 00000000 ____D C:\Programme\Google 2013-12-18 10:53 - 2013-11-30 17:18 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2013-12-18 10:53 - 2013-11-30 17:18 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys Dann war ich es leid und habe Firfox gelöscht. Bei dem Versuch mit dem Internetexplorer zu arbeiten tritt jedoch das selber Problem auf! Ich brauche dringend Hilfe!!! |
Themen zu Google zeigt keine Ergebnisse an |
adware.yontoo, avira, bagle.trace, einstellungen, exploit.drop.2, flash player, home, installation, junkware, mozilla, plug-in, pum.disabled.securitycenter, pup.optional.bundleinstaller.a, pup.optional.freemium, pup.optional.installiq.a, pup.optional.opencandy, pup.optional.softonic, realtek, rogue.residue, security, stolen.data, system, trojan.agent |