Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
unbekanntes Fenster öffnet sich ständig in der Taskleiste

unbekanntes Fenster öffnet sich ständig in der Taskleiste


Log-Analyse und Auswertung: unbekanntes Fenster öffnet sich ständig in der Taskleiste

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 22.01.2014, 14:48   #1
Diamond
 
unbekanntes Fenster öffnet sich ständig in der Taskleiste - Standard

unbekanntes Fenster öffnet sich ständig in der Taskleiste


Hallo Leute,

bei mir öffnet sich in der Taskleiste ca. alle 20 Sekunden ein Fenster für nicht mal eine Sekunde und schließt sich wieder. Habe ein Antivirus-Programm und Anti-Malware laufen lassen, haben aber nichts gefunden.
Kann mir bitte jemand weiterhelfen?

Gruss

Alt 22.01.2014, 14:49   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
unbekanntes Fenster öffnet sich ständig in der Taskleiste - Standard

unbekanntes Fenster öffnet sich ständig in der Taskleiste


Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 22.01.2014, 15:06   #3
Diamond
 
unbekanntes Fenster öffnet sich ständig in der Taskleiste - Standard

unbekanntes Fenster öffnet sich ständig in der Taskleiste


Danke für die schnelle Antwort.

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 01
Ran by Vertrieb-2 (ATTENTION: The logged in user is not administrator) on HP-VERTRIEB-2 on 22-01-2014 14:56:20
Running from C:\Users\Vertrieb-2\Desktop\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\OUTLOOK.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\professional\2013\Framework.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2011-06-10] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-09-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1258504 2013-12-30] (Easybits)
HKLM-x32\...\Run: [F-Secure Hoster (666)] - C:\Program Files (x86)\F-Secure\fshoster32.exe [191528 2013-12-11] (F-Secure Corporation)
HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE [310312 2013-11-26] (F-Secure Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [Google Update] - C:\Users\Vertrieb-2\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-13] (Google Inc.)
MountPoints2: {6907e02b-6f65-11e2-a4a4-806e6f6e6963} - F:\MInst.exe
MountPoints2: {b560793a-6c9b-11e3-a790-a0b3cc77c566} - G:\AutoRun.exe
Startup: C:\Users\Vertrieb-2\Desktop\Startup\Lexware professional.lnk
ShortcutTarget: Lexware professional.lnk -> C:\Program Files (x86)\Lexware\professional\2013\Framework.exe (Haufe-Lexware GmbH & Co. KG)
Startup: C:\Users\Vertrieb-2\Desktop\Startup\Microsoft Office Outlook 2003.lnk
ShortcutTarget: Microsoft Office Outlook 2003.lnk -> C:\Windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\outicon.exe ()
Startup: C:\Users\Vertrieb-2\Desktop\Startup\Safari.lnk
ShortcutTarget: Safari.lnk -> C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.uk.msn.com/HPNOT/4
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.99
Tcpip\..\Interfaces\{69506F59-5F28-4D66-85B5-3FDC1E2848AB}: [NameServer]213.162.69.170 213.162.69.2

FireFox:
========
FF ProfilePath: C:\Users\Vertrieb-2\AppData\Roaming\Mozilla\Firefox\Profiles\qs7v3ng8.default
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Vertrieb-2\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Vertrieb-2\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [safesearch@f-secure.com] - C:\Users\Vertrieb-2\AppData\Roaming\F-Secure\SafeSearch\FFPlugIn\
FF Extension: F-Secure Search - C:\Users\Vertrieb-2\AppData\Roaming\F-Secure\SafeSearch\FFPlugIn\ []

Chrome: 
=======

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-09-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 fshoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [191528 2013-12-11] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2013-11-26] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-10] (F-Secure Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [671744 2013-02-05] ()
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$JTLWAWI; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 A2DDA; C:\EEK\RUN\a2ddax64.sys [26176 2013-08-20] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\EEK\RUN\cleanhlp64.sys [57024 2014-01-22] (Emsisoft GmbH)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [203304 2013-10-30] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [69296 2014-01-21] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2014-01-21] ()
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [82984 2013-11-08] (F-Secure Corporation)
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-06-24] ()
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [241152 2012-12-03] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-22 14:56 - 2014-01-22 14:56 - 00000000 ____D C:\FRST
2014-01-22 11:57 - 2014-01-22 11:57 - 00000546 _____ C:\Users\Admin\Desktop\Emsisoft Emergency Kit.lnk
2014-01-22 11:57 - 2014-01-22 11:57 - 00000000 ____D C:\EEK
2014-01-22 08:08 - 2014-01-22 08:08 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Nitro
2014-01-22 08:08 - 2014-01-22 08:08 - 00000000 ____D C:\Users\Admin\AppData\Roaming\FileOpen
2014-01-22 08:07 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-22 08:07 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-22 08:07 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-22 08:07 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-22 08:06 - 2014-01-22 08:07 - 00005466 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 08:05 - 2014-01-22 08:05 - 00000000 ____D C:\Users\Admin\AppData\Local\PDF24
2014-01-22 07:58 - 2014-01-22 07:58 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Canon
2014-01-22 07:57 - 2014-01-22 07:57 - 00000000 _____ C:\Users\Admin\Sti_Trace.log
2014-01-22 07:55 - 2014-01-22 07:59 - 00000000 ____D C:\Users\Admin\AppData\Roaming\NewSoft
2014-01-22 07:55 - 2014-01-22 07:55 - 00000000 ____D C:\Users\Admin\Documents\My PageManager
2014-01-22 07:55 - 2014-01-22 07:55 - 00000000 ____D C:\Users\Admin\AppData\Local\NewSoft
2014-01-22 07:53 - 2014-01-22 07:53 - 00000000 ____D C:\Users\Admin\AppData\Roaming\F-Secure
2014-01-22 07:53 - 2014-01-22 07:53 - 00000000 ____D C:\Users\Admin\AppData\Local\{8B9289CC-A531-4DA5-BDB4-1ABEA2273BF2}
2014-01-21 14:05 - 2014-01-21 14:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-21 14:05 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-21 12:22 - 2014-01-21 12:22 - 00000000 ____D C:\Users\Vertrieb-2\AppData\Roaming\F-Secure
2014-01-21 12:20 - 2014-01-21 12:20 - 00056016 _____ C:\Windows\system32\Drivers\fsbts.sys
2014-01-21 12:20 - 2014-01-21 12:20 - 00020450 _____ C:\Windows\prodsett_copy.ini
2014-01-21 12:20 - 2014-01-21 12:20 - 00000657 _____ C:\Windows\fsav_db_setup.log
2014-01-21 12:19 - 2014-01-21 12:20 - 04230558 _____ C:\Windows\FSISU.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00907804 _____ C:\Windows\FSSFM.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00739035 _____ C:\Windows\FSSETUP.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00121051 _____ C:\Windows\FSPROD.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00109088 _____ C:\Windows\RunSetup.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00103599 _____ C:\Windows\FSDEPH.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00072167 _____ C:\Windows\FSAVINST.LOG
2014-01-21 12:19 - 2014-01-21 12:20 - 00010503 _____ C:\Windows\FSAVCSIN.LOG
2014-01-21 12:19 - 2014-01-21 12:20 - 00004023 _____ C:\Windows\FSGKIAIN.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00002839 _____ C:\Windows\fsavunin.log
2014-01-21 12:19 - 2014-01-21 12:20 - 00002380 _____ C:\Windows\DAASINST.LOG
2014-01-21 12:19 - 2014-01-21 12:20 - 00001837 _____ C:\Windows\FSLDIN.LOG
2014-01-21 12:19 - 2014-01-21 12:19 - 00017290 _____ C:\Windows\fspplugin.log
2014-01-21 12:11 - 2014-01-22 07:42 - 00000000 ____D C:\Program Files (x86)\F-Secure
2014-01-21 12:11 - 2014-01-21 12:11 - 00001975 _____ C:\Users\Public\Desktop\F-Secure.lnk
2014-01-21 12:08 - 2014-01-21 12:20 - 00000000 ____D C:\ProgramData\F-Secure
2014-01-21 08:29 - 2014-01-21 08:29 - 00000085 _____ C:\Windows\wininit.ini
2014-01-21 08:21 - 2014-01-21 08:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-21 08:20 - 2014-01-22 07:42 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-20 16:33 - 2014-01-20 16:33 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-01-20 15:00 - 2014-01-20 15:00 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2014-01-20 15:00 - 2014-01-20 15:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 14:23 - 2014-01-20 14:23 - 00032256 _____ C:\Users\Vertrieb-2\Desktop\Orderlist Raymon.xls
2014-01-20 14:21 - 2014-01-20 14:24 - 00026624 _____ C:\Users\Vertrieb-2\Desktop\Orderlist Smith.xls
2014-01-20 10:14 - 2014-01-20 14:04 - 00032256 _____ C:\Users\Vertrieb-2\Desktop\Kopie von Artikelliste.xls
2014-01-15 09:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 09:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 09:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 09:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 09:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 09:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 09:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 09:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 09:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-03 19:14 - 2014-01-03 19:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{6831EC47-7F26-43B8-8E17-9A5EAF6A2A6A}
2014-01-03 19:14 - 2014-01-03 19:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{4D3B4531-08F6-4367-8D17-63EBD85C42EF}
2014-01-03 18:55 - 2014-01-03 18:55 - 00000000 ____D C:\Users\Admin\AppData\Local\{F193C8E3-2B4D-4A3C-8748-CD9BCC6AFD17}
2014-01-03 18:55 - 2014-01-03 18:55 - 00000000 ____D C:\Users\Admin\AppData\Local\{9B784FF4-6C95-4D5C-8761-A4B906012C69}
2014-01-02 11:40 - 2014-01-02 11:41 - 00000000 ____D C:\Users\Admin\AppData\Local\{3ECEBE91-4F03-4861-B248-C5FEFE022326}
2014-01-02 10:28 - 2014-01-02 10:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{E5A37F34-EF68-4A5D-BCDA-F818DC6E1029}
2014-01-01 12:01 - 2014-01-01 12:02 - 00000000 ____D C:\Users\Admin\AppData\Local\{CDE441C9-B088-4608-86BC-A7E703855AE5}
2014-01-01 11:56 - 2014-01-01 11:56 - 00000000 ____D C:\Users\Admin\AppData\Local\{1AC10558-8818-43CF-AEBB-99F92C43B4B8}
2014-01-01 11:50 - 2014-01-01 11:50 - 00000000 ____D C:\Users\Admin\AppData\Local\{3AEE0C28-39A8-4B54-9E35-B00D74808D5C}
2014-01-01 11:37 - 2014-01-01 11:37 - 00000000 ____D C:\Users\Admin\AppData\Local\{829EA4B1-B493-47BA-860A-DFA7F34E47F5}
2014-01-01 11:15 - 2014-01-01 11:15 - 00000000 ____D C:\Users\Admin\AppData\Local\{227B18CD-91E1-4C63-B1BC-BC11E049AACF}
2014-01-01 10:33 - 2014-01-01 10:33 - 00000000 ____D C:\Users\Admin\AppData\Local\{3DD0B56E-2CBA-4E75-904E-2CE1F28FB4F5}
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Admin\AppData\Local\{74AD43AC-D3C2-40D6-A10F-E55613A8AD17}
2013-12-31 07:29 - 2013-12-31 07:31 - 00000000 ____D C:\Users\Admin\AppData\Local\{66615CC4-5E98-448E-A0BB-70517261F3C6}
2013-12-30 21:43 - 2013-12-30 21:43 - 00000000 ____D C:\Users\Admin\AppData\Local\{6DBC97B1-5857-496F-A227-2FC7157B94D7}
2013-12-30 11:07 - 2013-12-30 11:12 - 00000000 ____D C:\ProgramData\Easybits Magic Desktop for HP
2013-12-30 09:33 - 2013-12-30 09:34 - 00000000 ____D C:\Users\Admin\AppData\Local\{9E58CEC5-4929-4ADA-8A17-289169D8A764}
2013-12-30 09:28 - 2013-12-30 09:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{5E44F898-DF35-4959-9A16-1F51641CE770}
2013-12-28 18:07 - 2013-12-28 18:07 - 00000000 ____D C:\Users\Admin\AppData\Local\{44D38895-D3D5-44CC-965A-F95166440EC4}
2013-12-28 17:07 - 2013-12-28 17:07 - 00000000 ____D C:\Users\Admin\AppData\Local\{2DB73983-9BBE-487D-B218-1A9EC8D98F11}
2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Users\Admin\AppData\Local\{D23F1855-5391-4E8B-868B-E9848CC4FA0D}
2013-12-28 16:47 - 2014-01-03 19:13 - 00000000 ____D C:\ProgramData\OnlineUpdate
2013-12-28 16:47 - 2013-12-28 16:47 - 00000000 ____D C:\ProgramData\log
2013-12-28 16:40 - 2013-12-28 16:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{ACEFCF81-A75B-4861-9CD6-B9B48AAF5B35}
2013-12-28 09:24 - 2013-12-28 09:35 - 00000000 ____D C:\Users\Admin\AppData\Local\Microsoft Games
2013-12-27 21:08 - 2014-01-22 07:52 - 00000000 ____D C:\Users\Admin\Tracing
2013-12-27 21:08 - 2013-12-27 21:08 - 00000000 ____D C:\Users\Admin\AppData\Local\{502254AB-FDFD-4EA0-9E10-342A2318E2EE}
2013-12-24 14:15 - 2013-12-24 14:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2013-12-24 14:15 - 2013-12-24 14:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2013-12-24 14:14 - 2013-12-24 14:14 - 00001201 _____ C:\Users\Admin\Desktop\Internet Manager.lnk
2013-12-24 14:14 - 2013-12-24 14:14 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2013-12-24 14:14 - 2013-12-24 14:14 - 00000000 ____D C:\ProgramData\Internet Manager
2013-12-24 14:14 - 2012-12-03 12:22 - 00241152 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2013-12-24 14:14 - 2012-12-03 11:40 - 00452608 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2013-12-24 14:14 - 2012-10-30 05:42 - 00014336 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2013-12-24 14:14 - 2012-10-29 12:44 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2013-12-24 14:14 - 2012-08-20 01:55 - 00104960 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2013-12-24 14:14 - 2012-08-20 01:55 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2013-12-24 14:14 - 2012-08-20 01:55 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2013-12-24 14:14 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2013-12-24 14:14 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2013-12-24 14:14 - 2011-12-31 02:20 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2013-12-24 14:14 - 2010-10-08 09:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2013-12-24 14:14 - 2010-09-26 11:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2013-12-24 14:14 - 2010-08-06 00:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2013-12-24 14:14 - 2010-07-27 02:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2013-12-24 14:12 - 2013-12-24 14:12 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2013-12-24 14:06 - 2013-12-24 14:14 - 00000000 ____D C:\ProgramData\DatacardService

==================== One Month Modified Files and Folders =======

2014-01-22 14:57 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-22 14:57 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-22 14:56 - 2014-01-22 14:56 - 00000000 ____D C:\FRST
2014-01-22 14:26 - 2013-02-18 08:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-22 14:07 - 2013-05-13 09:32 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-961748315-2781032460-2055338865-1001UA.job
2014-01-22 13:39 - 2012-03-24 00:15 - 01813962 _____ C:\Windows\WindowsUpdate.log
2014-01-22 11:57 - 2014-01-22 11:57 - 00000546 _____ C:\Users\Admin\Desktop\Emsisoft Emergency Kit.lnk
2014-01-22 11:57 - 2014-01-22 11:57 - 00000000 ____D C:\EEK
2014-01-22 08:55 - 2013-02-05 10:45 - 00000000 ____D C:\ProgramData\Lexware
2014-01-22 08:08 - 2014-01-22 08:08 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Nitro
2014-01-22 08:08 - 2014-01-22 08:08 - 00000000 ____D C:\Users\Admin\AppData\Roaming\FileOpen
2014-01-22 08:07 - 2014-01-22 08:06 - 00005466 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 08:07 - 2013-09-26 07:05 - 00000000 ____D C:\ProgramData\Oracle
2014-01-22 08:07 - 2013-09-26 07:04 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-22 08:05 - 2014-01-22 08:05 - 00000000 ____D C:\Users\Admin\AppData\Local\PDF24
2014-01-22 07:59 - 2014-01-22 07:55 - 00000000 ____D C:\Users\Admin\AppData\Roaming\NewSoft
2014-01-22 07:58 - 2014-01-22 07:58 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Canon
2014-01-22 07:57 - 2014-01-22 07:57 - 00000000 _____ C:\Users\Admin\Sti_Trace.log
2014-01-22 07:57 - 2013-02-05 09:09 - 00000000 ____D C:\Users\Admin
2014-01-22 07:55 - 2014-01-22 07:55 - 00000000 ____D C:\Users\Admin\Documents\My PageManager
2014-01-22 07:55 - 2014-01-22 07:55 - 00000000 ____D C:\Users\Admin\AppData\Local\NewSoft
2014-01-22 07:55 - 2013-10-07 15:24 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Nitro PDF
2014-01-22 07:53 - 2014-01-22 07:53 - 00000000 ____D C:\Users\Admin\AppData\Roaming\F-Secure
2014-01-22 07:53 - 2014-01-22 07:53 - 00000000 ____D C:\Users\Admin\AppData\Local\{8B9289CC-A531-4DA5-BDB4-1ABEA2273BF2}
2014-01-22 07:52 - 2013-12-27 21:08 - 00000000 ____D C:\Users\Admin\Tracing
2014-01-22 07:42 - 2014-01-21 12:11 - 00000000 ____D C:\Program Files (x86)\F-Secure
2014-01-22 07:42 - 2014-01-21 08:20 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-01-22 07:42 - 2010-11-21 04:47 - 00401806 _____ C:\Windows\PFRO.log
2014-01-22 07:42 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-22 07:42 - 2009-07-14 05:51 - 00081986 _____ C:\Windows\setupact.log
2014-01-21 16:53 - 2013-03-05 12:31 - 00000000 ____D C:\Users\Vertrieb-2\AppData\Local\CrashDumps
2014-01-21 16:31 - 2013-08-05 09:10 - 00063488 _____ C:\Users\Vertrieb-2\Desktop\Marge.xls
2014-01-21 15:07 - 2013-05-13 09:32 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-961748315-2781032460-2055338865-1001Core.job
2014-01-21 14:06 - 2014-01-21 14:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-21 12:22 - 2014-01-21 12:22 - 00000000 ____D C:\Users\Vertrieb-2\AppData\Roaming\F-Secure
2014-01-21 12:20 - 2014-01-21 12:20 - 00056016 _____ C:\Windows\system32\Drivers\fsbts.sys
2014-01-21 12:20 - 2014-01-21 12:20 - 00020450 _____ C:\Windows\prodsett_copy.ini
2014-01-21 12:20 - 2014-01-21 12:20 - 00000657 _____ C:\Windows\fsav_db_setup.log
2014-01-21 12:20 - 2014-01-21 12:19 - 04230558 _____ C:\Windows\FSISU.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00907804 _____ C:\Windows\FSSFM.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00739035 _____ C:\Windows\FSSETUP.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00121051 _____ C:\Windows\FSPROD.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00109088 _____ C:\Windows\RunSetup.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00103599 _____ C:\Windows\FSDEPH.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00072167 _____ C:\Windows\FSAVINST.LOG
2014-01-21 12:20 - 2014-01-21 12:19 - 00010503 _____ C:\Windows\FSAVCSIN.LOG
2014-01-21 12:20 - 2014-01-21 12:19 - 00004023 _____ C:\Windows\FSGKIAIN.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00002839 _____ C:\Windows\fsavunin.log
2014-01-21 12:20 - 2014-01-21 12:19 - 00002380 _____ C:\Windows\DAASINST.LOG
2014-01-21 12:20 - 2014-01-21 12:19 - 00001837 _____ C:\Windows\FSLDIN.LOG
2014-01-21 12:20 - 2014-01-21 12:08 - 00000000 ____D C:\ProgramData\F-Secure
2014-01-21 12:19 - 2014-01-21 12:19 - 00017290 _____ C:\Windows\fspplugin.log
2014-01-21 12:11 - 2014-01-21 12:11 - 00001975 _____ C:\Users\Public\Desktop\F-Secure.lnk
2014-01-21 08:29 - 2014-01-21 08:29 - 00000085 _____ C:\Windows\wininit.ini
2014-01-21 08:29 - 2014-01-21 08:21 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-21 08:10 - 2013-07-16 07:22 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe
2014-01-21 08:08 - 2013-02-08 09:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-21 08:08 - 2011-10-22 14:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-20 16:33 - 2014-01-20 16:33 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-01-20 15:00 - 2014-01-20 15:00 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2014-01-20 15:00 - 2014-01-20 15:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 14:24 - 2014-01-20 14:21 - 00026624 _____ C:\Users\Vertrieb-2\Desktop\Orderlist Smith.xls
2014-01-20 14:23 - 2014-01-20 14:23 - 00032256 _____ C:\Users\Vertrieb-2\Desktop\Orderlist Raymon.xls
2014-01-20 14:04 - 2014-01-20 10:14 - 00032256 _____ C:\Users\Vertrieb-2\Desktop\Kopie von Artikelliste.xls
2014-01-16 15:45 - 2013-05-17 09:11 - 00000000 ____D C:\Users\Vertrieb-2\AppData\Roaming\Nitro PDF
2014-01-16 07:47 - 2009-07-14 05:45 - 00299080 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 17:00 - 2009-07-14 03:34 - 00000499 _____ C:\Windows\win.ini
2014-01-15 16:59 - 2013-08-14 15:20 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 16:57 - 2013-02-07 09:13 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-07 07:53 - 2011-10-23 00:15 - 00754470 _____ C:\Windows\system32\perfh007.dat
2014-01-07 07:53 - 2011-10-23 00:15 - 00172230 _____ C:\Windows\system32\perfc007.dat
2014-01-07 07:53 - 2009-07-14 06:13 - 01762330 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-06 15:17 - 2013-09-02 08:43 - 00000000 ____D C:\Users\Vertrieb-2\Desktop\Sonstiges
2014-01-06 07:52 - 2013-05-14 11:18 - 00000000 ____D C:\Users\Vertrieb-2\Desktop\Mitarbeiter
2014-01-05 17:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-03 19:14 - 2014-01-03 19:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{6831EC47-7F26-43B8-8E17-9A5EAF6A2A6A}
2014-01-03 19:14 - 2014-01-03 19:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{4D3B4531-08F6-4367-8D17-63EBD85C42EF}
2014-01-03 19:13 - 2013-12-28 16:47 - 00000000 ____D C:\ProgramData\OnlineUpdate
2014-01-03 18:55 - 2014-01-03 18:55 - 00000000 ____D C:\Users\Admin\AppData\Local\{F193C8E3-2B4D-4A3C-8748-CD9BCC6AFD17}
2014-01-03 18:55 - 2014-01-03 18:55 - 00000000 ____D C:\Users\Admin\AppData\Local\{9B784FF4-6C95-4D5C-8761-A4B906012C69}
2014-01-02 21:54 - 2013-10-20 12:33 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2014-01-02 11:41 - 2014-01-02 11:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{3ECEBE91-4F03-4861-B248-C5FEFE022326}
2014-01-02 10:28 - 2014-01-02 10:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{E5A37F34-EF68-4A5D-BCDA-F818DC6E1029}
2014-01-01 13:27 - 2013-03-04 08:23 - 00000000 ____D C:\Users\Vertrieb-2\Desktop\Eigene Dateien
2014-01-01 12:02 - 2014-01-01 12:01 - 00000000 ____D C:\Users\Admin\AppData\Local\{CDE441C9-B088-4608-86BC-A7E703855AE5}
2014-01-01 11:56 - 2014-01-01 11:56 - 00000000 ____D C:\Users\Admin\AppData\Local\{1AC10558-8818-43CF-AEBB-99F92C43B4B8}
2014-01-01 11:50 - 2014-01-01 11:50 - 00000000 ____D C:\Users\Admin\AppData\Local\{3AEE0C28-39A8-4B54-9E35-B00D74808D5C}
2014-01-01 11:37 - 2014-01-01 11:37 - 00000000 ____D C:\Users\Admin\AppData\Local\{829EA4B1-B493-47BA-860A-DFA7F34E47F5}
2014-01-01 11:15 - 2014-01-01 11:15 - 00000000 ____D C:\Users\Admin\AppData\Local\{227B18CD-91E1-4C63-B1BC-BC11E049AACF}
2014-01-01 10:33 - 2014-01-01 10:33 - 00000000 ____D C:\Users\Admin\AppData\Local\{3DD0B56E-2CBA-4E75-904E-2CE1F28FB4F5}
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Admin\AppData\Local\{74AD43AC-D3C2-40D6-A10F-E55613A8AD17}
2013-12-31 07:31 - 2013-12-31 07:29 - 00000000 ____D C:\Users\Admin\AppData\Local\{66615CC4-5E98-448E-A0BB-70517261F3C6}
2013-12-30 21:43 - 2013-12-30 21:43 - 00000000 ____D C:\Users\Admin\AppData\Local\{6DBC97B1-5857-496F-A227-2FC7157B94D7}
2013-12-30 11:12 - 2013-12-30 11:07 - 00000000 ____D C:\ProgramData\Easybits Magic Desktop for HP
2013-12-30 09:34 - 2013-12-30 09:33 - 00000000 ____D C:\Users\Admin\AppData\Local\{9E58CEC5-4929-4ADA-8A17-289169D8A764}
2013-12-30 09:28 - 2013-12-30 09:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{5E44F898-DF35-4959-9A16-1F51641CE770}
2013-12-28 18:07 - 2013-12-28 18:07 - 00000000 ____D C:\Users\Admin\AppData\Local\{44D38895-D3D5-44CC-965A-F95166440EC4}
2013-12-28 17:07 - 2013-12-28 17:07 - 00000000 ____D C:\Users\Admin\AppData\Local\{2DB73983-9BBE-487D-B218-1A9EC8D98F11}
2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Users\Admin\AppData\Local\{D23F1855-5391-4E8B-868B-E9848CC4FA0D}
2013-12-28 16:47 - 2013-12-28 16:47 - 00000000 ____D C:\ProgramData\log
2013-12-28 16:40 - 2013-12-28 16:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{ACEFCF81-A75B-4861-9CD6-B9B48AAF5B35}
2013-12-28 09:35 - 2013-12-28 09:24 - 00000000 ____D C:\Users\Admin\AppData\Local\Microsoft Games
2013-12-27 21:08 - 2013-12-27 21:08 - 00000000 ____D C:\Users\Admin\AppData\Local\{502254AB-FDFD-4EA0-9E10-342A2318E2EE}
2013-12-24 14:15 - 2013-12-24 14:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2013-12-24 14:15 - 2013-12-24 14:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2013-12-24 14:14 - 2013-12-24 14:14 - 00001201 _____ C:\Users\Admin\Desktop\Internet Manager.lnk
2013-12-24 14:14 - 2013-12-24 14:14 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2013-12-24 14:14 - 2013-12-24 14:14 - 00000000 ____D C:\ProgramData\Internet Manager
2013-12-24 14:14 - 2013-12-24 14:06 - 00000000 ____D C:\ProgramData\DatacardService
2013-12-24 14:12 - 2013-12-24 14:12 - 00000000 ____D C:\Program Files (x86)\T-Mobile

Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\AskSLib.dll
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Admin\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Admin\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Admin\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Admin\AppData\Local\Temp\sdapskill.exe
C:\Users\Vertrieb-2\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
--- --- ---



Addition.txt

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2014 01
Ran by Vertrieb-2 at 2014-01-22 14:58:28
Running from C:\Users\Vertrieb-2\Desktop\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Anti-Virus (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Anti-Virus (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629 - Adobe Systems, Inc.)
AMD APP SDK Runtime (Version: 2.5.775.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 3.0.847.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2011.0928.607.9079 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.60928.0618 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.02.0000 - AMD) Hidden
AMD System Monitor (x32 Version: 1.0.9 - Advanced Micro Devices, Inc.)
AMD VISION Engine Control Center (x32 Version: 2011.0928.607.9079 - Ihr Firmenname) Hidden
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bing Bar (x32 Version: 7.3.124.0 - Microsoft Corporation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Canon LBP3300 (Version:  - )
Canon MF4200-Serie (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Computer Security 14.99.103.0 (release) (x32 Version: 14.99.103.0 - F-Secure Corporation) Hidden
CyberLink YouCam (x32 Version: 3.5.0.4528 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.0.4528 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deinst. f. Druckertreiber UFR II (Version: 6, 0, 0, 0 - Canon Inc.)
ESU for Microsoft Windows 7 SP1 (x32 Version: 2.1.1 - Hewlett-Packard)
Evernote v. 4.2.3 (x32 Version: 4.2.3.22 - Evernote Corp.)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2 - FileZilla Project)
Free PDF to Word Doc Converter v1.1 (x32 Version: 1.1 - www.hellopdf.com)
F-Secure (x32 Version: 1.99.192.0 - F-Secure Corporation)
F-Secure (x32 Version: 1.99.192.0 - F-Secure Corporation) Hidden
F-Secure CCF Reputation (x32 Version: 1.1.25.2280 - F-Secure) Hidden
F-Secure CCF Scanning 1.37.103.151 (release) (x32 Version: 1.37.103.151 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.134 (x32 Version: 1.02.134 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.01.107.0 (release) (x32 Version: 1.01.107.0 - F-Secure Corporation) Hidden
Google Chrome (HKCU Version: 32.0.1700.76 - Google Inc.)
Hewlett-Packard ACLM.NET v1.1.2.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Documentation (x32 Version: 1.1.0.0 - Hewlett-Packard)
HP On Screen Display (x32 Version: 1.3.5 - Hewlett-Packard Company)
HP Power Manager (x32 Version: 1.4.4 - Hewlett-Packard Company)
HP Quick Launch (x32 Version: 2.5.2 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
HP Security Assistant (Version: 1.0.12 - Hewlett-Packard)
HP Setup (x32 Version: 9.0.15076.3891 - Hewlett-Packard Company)
HP Setup Manager (x32 Version: 1.2.14901.3869 - Hewlett-Packard Company)
HP Software Framework (x32 Version: 4.5.1.1 - Hewlett-Packard Company)
HP Support Assistant (x32 Version: 6.1.12.1 - Hewlett-Packard Company)
IDT Audio (x32 Version: 1.0.6341.0 - IDT)
Internet Manager (x32 Version: 22.001.18.02.123 - Huawei Technologies Co.,Ltd)
IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JTL-Wawi (x32 Version: 0.99890 - )
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lexware Info Service (x32 Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)
Lexware warenwirtschaft pro 2013 (x32 Version: 13.03.01.0159 - Haufe-Lexware GmbH & Co.KG)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft  File Transfer Manager (x32 Version: 5.00.34 - Microsoft)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (x32 Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (JTLWAWI) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Nitro Reader 3 (Version: 3.5.2.10 - Nitro)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
PDF24 Creator 5.7.0 (x32 Version:  - PDF24.org)
Presto! PageManager 7.15.16 (x32 Version: 7.15.16 - NewSoft Technology Corporation)
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.40.126.2011 - Realtek)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.83 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (x32 Version: 1.00.11.0706 - REALTEK Semiconductor Corp.)
Safari (x32 Version: 5.34.57.2 - Apple Inc.)
ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020 - Nuance Communications, Inc.)
Skype™ 6.3 (x32 Version: 6.3.107 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.3.11.0 - Synaptics Incorporated)
Tools für Microsoft SQL Server 2005 Express Edition (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (x32 Version: 9.00.5000.00 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
XnView 2.03 (x32 Version: 2.03 - Gougelet Pierre-e)

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-961748315-2781032460-2055338865-1001Core.job => C:\Users\Vertrieb-2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-961748315-2781032460-2055338865-1001UA.job => C:\Users\Vertrieb-2\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/22/2014 01:26:33 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 63024

Error: (01/22/2014 01:26:33 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 63024

Error: (01/22/2014 01:26:33 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/22/2014 01:26:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 61745

Error: (01/22/2014 01:26:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 61745

Error: (01/22/2014 01:26:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/22/2014 01:26:29 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 59639

Error: (01/22/2014 01:26:29 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 59639

Error: (01/22/2014 01:26:29 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/22/2014 01:26:25 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 54787


System errors:
=============
Error: (01/22/2014 11:15:16 AM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{C759A0BF-DB4B-48FE-8827-5EF44030E533}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (01/22/2014 07:54:39 AM) (Source: DCOM) (User: )
Description: 1053BBUpdate-Service{D6381B4A-D254-46EB-9018-A62E0F4BA6BA}

Error: (01/22/2014 07:54:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BBUpdate" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/22/2014 07:54:38 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BBUpdate erreicht.

Error: (01/22/2014 07:45:20 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IPsec-Richtlinien-Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/22/2014 07:45:20 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst IPsec-Richtlinien-Agent erreicht.

Error: (01/22/2014 07:43:02 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/22/2014 07:43:02 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.

Error: (01/21/2014 00:47:59 PM) (Source: F-Secure Gatekeeper) (User: )
Description: \Device\HarddiskVolume2\Program Files (x86)\F-Secure\apps\ComputerSecuri...bdcore.dll

Error: (01/21/2014 07:58:46 AM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{C759A0BF-DB4B-48FE-8827-5EF44030E533}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.


Microsoft Office Sessions:
=========================
Error: (01/22/2014 01:26:33 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 63024

Error: (01/22/2014 01:26:33 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 63024

Error: (01/22/2014 01:26:33 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/22/2014 01:26:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 61745

Error: (01/22/2014 01:26:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 61745

Error: (01/22/2014 01:26:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/22/2014 01:26:29 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 59639

Error: (01/22/2014 01:26:29 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 59639

Error: (01/22/2014 01:26:29 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/22/2014 01:26:25 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 54787


==================== Memory info =========================== 

Percentage of memory in use: 68%
Total physical RAM: 5609.41 MB
Available physical RAM: 1793.61 MB
Total Pagefile: 11216.99 MB
Available Pagefile: 6286.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:441.08 GB) (Free:369.76 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.52 GB) (Free:2.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:3.95 GB) FAT32
Drive i: (Volume) (Network) (Total:28.77 GB) (Free:7.67 GB) NTFS
Drive l: () (Network) (Total:39.06 GB) (Free:25.71 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
__________________
Alt 22.01.2014, 16:00   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
unbekanntes Fenster öffnet sich ständig in der Taskleiste - Standard

unbekanntes Fenster öffnet sich ständig in der Taskleiste


Zitat:
Ran by Vertrieb-2 (ATTENTION: The logged in user is not administrator) on HP-VERTRIEB-2 on 22-01-2014 14:56:20
Running from C:\Users\Vertrieb-2\Desktop\Downloads
1. unsere Tools benötigen immer Admirnechte. Ohne diese ist eine Bereinigung unmöglich
2. Vertrieb? Ist das ein gewerblich genutztes System?

Zitat:
AV: Anti-Virus (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
Warum laufen da zwei Virenscanner gleichzeitig? Das sollte man niemals machen!
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 22.01.2014, 16:15   #5
Diamond
 
unbekanntes Fenster öffnet sich ständig in der Taskleiste - Standard

unbekanntes Fenster öffnet sich ständig in der Taskleiste


ja das ist ein gewerblich genutztes System. Die Adminrechte besitze ich.
Eines der Antivirus-Programme habe ich gelöscht.
Was muss ich als nächstes tun?


Alt 22.01.2014, 16:32   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
unbekanntes Fenster öffnet sich ständig in der Taskleiste - Standard

unbekanntes Fenster öffnet sich ständig in der Taskleiste


Zitat:
ja das ist ein gewerblich genutztes System.
Solche Systeme werden hier eigentlich nicht bereinigt

Siehe => http://www.trojaner-board.de/108422-...-anfragen.html

Zitat:
3. Grundsätzlich bereinigen wir keine gewerblich genutzten Rechner. Dafür ist die IT Abteilung eurer Firma zuständig.

Bei Kleinunternehmen, welche keinen IT Support haben, machen wir da eine Ausnahme und helfen gerne ( kleine Spende hilft auch uns ).
Voraussetzung: Ihr teilt uns dies in eurer ersten Antwort mit.

Bedenkt jedoch, dass Logfiles viele heikle Informationen enthalten können ( Kundendaten, Bankdaten, etc ) sowie das Malware die Möglichkeit besitzt, diese auszuspähen und zu missbrauchen. Hier legen wir euch ein Formatieren und Neuaufsetzen nahe.
__________________
--> unbekanntes Fenster öffnet sich ständig in der Taskleiste

Antwort

Themen zu unbekanntes Fenster öffnet sich ständig in der Taskleiste
anti-malware, fenster, gefunde, laufe, laufen, leute, nichts, schließ, schließt, sekunden, taskleiste, unbekanntes, weiterhelfen, öffnet, öffnet sich ständig


« selbstständig öffnende Browser-Werbefenster und "DataMngr" konnte nicht entfernt werden | Win7 Laptop unbenutzbar langsam - Hardware- oder Softwareproblem? »


Ähnliche Themen: unbekanntes Fenster öffnet sich ständig in der Taskleiste


  1. Firefox öffnet ständig Fenster
    Log-Analyse und Auswertung - 14.04.2015 (30)
  2. ad.adserverplus.com Trojaner..Ständig öffnet sich Fenster mit diesem Link
    Log-Analyse und Auswertung - 23.09.2012 (1)
  3. Ständig öffnet sich weißes IE-Fenster / Trojan.Generic.6779472 gefunden / Outlook funktioniert nicht
    Log-Analyse und Auswertung - 06.01.2012 (61)
  4. Unbekanntes Fenster öffnet und schliesst sich sofort wieder!Virus?Bitte Hilfe!
    Plagegeister aller Art und deren Bekämpfung - 18.11.2011 (50)
  5. WE öffnet ständig bei Computerstart zwei Fenster
    Log-Analyse und Auswertung - 24.01.2009 (2)
  6. cid fenster öffnet sich ständig!bitte hijack this log analysieren
    Log-Analyse und Auswertung - 12.01.2009 (2)
  7. IE öffnet ständig neue Fenster
    Log-Analyse und Auswertung - 09.01.2009 (1)
  8. Explorer öffnet ständig CID Fenster
    Mülltonne - 30.12.2008 (0)
  9. Firefox öffnet ständig zweites Fenster
    Plagegeister aller Art und deren Bekämpfung - 21.12.2008 (4)
  10. firefox öffnet ständig neue fenster
    Plagegeister aller Art und deren Bekämpfung - 18.12.2008 (2)
  11. Explorer Fenster öffnet sich ständig von selbst
    Log-Analyse und Auswertung - 09.11.2008 (8)
  12. Firefox öffnet ständig neue Fenster
    Log-Analyse und Auswertung - 24.10.2008 (6)
  13. IE öffnet ständig neue Fenster
    Log-Analyse und Auswertung - 25.03.2008 (9)
  14. Unbekanntes Fenster öffnet sich und schließt sofort wieder
    Log-Analyse und Auswertung - 16.02.2008 (3)
  15. ie7 öffnet ständig unerwünschte fenster
    Log-Analyse und Auswertung - 30.01.2008 (3)
  16. iExplorer öffnet ständig irgendwelche Fenster
    Log-Analyse und Auswertung - 19.11.2005 (1)
  17. Ständig öffnet sich IE - Fenster
    Plagegeister aller Art und deren Bekämpfung - 03.03.2005 (7)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema unbekanntes Fenster öffnet sich ständig in der Taskleiste - Hallo Leute, bei mir öffnet sich in der Taskleiste ca. alle 20 Sekunden ein Fenster für nicht mal eine Sekunde und schließt sich wieder. Habe ein Antivirus-Programm und Anti-Malware laufen - unbekanntes Fenster öffnet sich ständig in der Taskleiste...
Archiv
Du betrachtest: unbekanntes Fenster öffnet sich ständig in der Taskleiste auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19