|
Plagegeister aller Art und deren Bekämpfung: Awesomhp Löschen.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
30.01.2014, 22:03 | #16 |
/// Malwareteam | Awesomhp Löschen. hi kein Problem, einfach die Logfiles sammeln und zusammen posten wenn du alles hast. Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.
Teile mir mit, ob das das Problem behoben hat. |
31.01.2014, 15:52 | #17 |
| Awesomhp Löschen. Log vom SC-cleaner
__________________Code:
ATTFilter Shortcut Cleaner 1.2.8 by Lawrence Abrams (Grinler) hxxp://www.bleepingcomputer.com/ Copyright 2008-2014 BleepingComputer.com More Information about Shortcut Cleaner can be found at this link: hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/ Windows Version: Windows 7 Home Premium Service Pack 1 Program started at: 01/31/2014 03:51:26 PM. Scanning for registry hijacks: * No issues found in the Registry. Searching for Hijacked Shortcuts: Searching C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\ * Shortcut Cleaned: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390482114&from=ild&uid=HitachiXHDS721010DLE630_MSK5235H0J8SBG0J8SBGX * Shortcut Cleaned: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe hxxp://www.awesomehp.com/?type=sc&ts=1390482114&from=ild&uid=HitachiXHDS721010DLE630_MSK5235H0J8SBG0J8SBGX * Shortcut Cleaned: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390482114&from=ild&uid=HitachiXHDS721010DLE630_MSK5235H0J8SBG0J8SBGX Searching C:\ProgramData\Microsoft\Windows\Start Menu\ Searching C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ * Shortcut Cleaned: C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390482114&from=ild&uid=HitachiXHDS721010DLE630_MSK5235H0J8SBG0J8SBGX * Shortcut Cleaned: C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe hxxp://www.awesomehp.com/?type=sc&ts=1390482114&from=ild&uid=HitachiXHDS721010DLE630_MSK5235H0J8SBG0J8SBGX Searching C:\Users\Public\Desktop\ Searching C:\Users\Daniel\Desktop 5 bad shortcuts found. Program finished at: 01/31/2014 03:51:28 PM Execution time: 0 hours(s), 0 minute(s), and 1 seconds(s) |
31.01.2014, 20:05 | #18 |
/// Malwareteam | Awesomhp Löschen. besteht das Proble weiter?
__________________erstelle bitte noch ein FRST Log
__________________ |
01.02.2014, 12:51 | #19 |
| Awesomhp Löschen. Das Problem bestand noch bis ich in dem Logfile gesehen hab das bei dem "Ziel" von Chrome was nicht passt. Hab das korrigiert jetzt ist es weg. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 03 Ran by Daniel (administrator) on DANIEL-PC on 01-02-2014 12:47:36 Running from C:\Users\Daniel\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe (Valve Corporation) D:\MW3\Steam.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Dropbox, Inc.) C:\Users\Daniel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrB.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe (McAfee, Inc.) C:\Program Files\McAfee\MSM\McSmtFwk.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12445288 2012-01-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1096480 2013-11-29] (NVIDIA Corporation) HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\Run: [Google Update] - C:\Users\Daniel\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-03-17] (Google Inc.) HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\Run: [Steam] - D:\MW3\steam.exe [1815976 2014-01-27] (Valve Corporation) HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\Run: [Spotify Web Helper] - C:\Users\Daniel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-15] (Spotify Ltd) HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\Run: [Spotify] - C:\Users\Daniel\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-15] (Spotify Ltd) HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony) HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\MountPoints2: {53a412c8-da3e-11e2-8aa5-50e549c46d82} - G:\.\Autorun.exe AUTORUN=1 HKU\S-1-5-21-297260316-3893129376-739266816-1000\...\MountPoints2: {bb27a562-fda4-11e2-8e8e-50e549c46d82} - G:\Startme.exe Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Daniel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - DefaultScope {1CB6FDFE-3002-45B4-93F4-8D3FF2E29FB2} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Daniel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Daniel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Daniel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF Extension: HDvid Codec 3 - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\profiles\extensions\hdvc3@hdvidcodec.com.xpi [2013-06-30] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2012-04-08] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2012-04-08] Chrome: ======= CHR HomePage: hxxp://www.google.at/ CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Daniel\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Daniel\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Daniel\AppData\Local\Google\Chrome\Application\32.0.1700.102\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll No File CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.1_0\McChPlg.dll No File CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) CHR Plugin: (Conduit Chrome Plugin) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.11.23.8_0\plugins/ConduitChromeApiPlugin.dll No File CHR Plugin: (Conduit Radio Plugin) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.11.23.8_0\plugins/np-cwmp.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll No File CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Java(TM) Platform SE 7 U4) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.40.255) - C:\Windows\SysWOW64\npDeployJava1.dll No File CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Google Update) - C:\Users\Daniel\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll () CHR Extension: (SiteAdvisor) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2012-08-03] CHR Extension: (AdBlock) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-05-03] CHR Extension: (DvdVideoSoft Free Youtube Download) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2012-10-03] CHR Extension: (Google Wallet) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Daniel\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-10-03] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2013-08-23] CHR StartMenuInternet: Google Chrome - C:\Users\Daniel\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= S2 0289981391252918mcinstcleanup; C:\Windows\TEMP\028998~1.EXE [834664 2013-07-30] (McAfee, Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-25] () R2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2013-02-08] (Hi-Rez Studios) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-11-28] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-12-05] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [184800 2013-12-05] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S2 MSSQL$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43010392 2009-03-30] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-17] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2013-08-17] () S4 SQLAgent$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [366936 2009-03-30] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-12-05] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R0 McPvDrv; C:\Windows\System32\drivers\McPvDrv.sys [74560 2013-09-09] (McAfee, Inc.) R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-12-05] (McAfee, Inc.) R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-12-05] (McAfee, Inc.) U3 mfeavfk01; No ImagePath U3 mfeavfk02; No ImagePath R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-12-05] (McAfee, Inc.) R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782616 2013-12-05] (McAfee, Inc.) U3 mfehidk01; No ImagePath R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.) U3 mfencbdc01; No ImagePath U3 mfencbdc02; No ImagePath S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.) R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-12-05] (McAfee, Inc.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) R3 rzdaendpt; C:\Windows\System32\DRIVERS\rzdaendpt.sys [33448 2013-11-15] (Razer Inc) R3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [30888 2013-11-15] (Razer Inc) S2 AODDriver4.1; \??\C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-01 12:47 - 2014-02-01 12:47 - 00023082 _____ () C:\Users\Daniel\Desktop\FRST.txt 2014-02-01 12:47 - 2014-02-01 12:47 - 00000000 ____D () C:\Users\Daniel\Desktop\FRST-OlderVersion 2014-01-31 15:51 - 2014-01-31 15:51 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Daniel\Downloads\sc-cleaner.exe 2014-01-31 15:51 - 2014-01-31 15:51 - 00004810 _____ () C:\sc-cleaner.txt 2014-01-30 09:51 - 2014-01-30 09:51 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-01-30 09:49 - 2014-01-30 09:49 - 02347384 _____ (ESET) C:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe 2014-01-30 09:32 - 2014-01-30 09:32 - 00001115 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-30 09:31 - 2014-01-30 09:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-1.75.0.1300 (1).exe 2014-01-30 09:25 - 2014-01-30 09:25 - 00448512 _____ (OldTimer Tools) C:\Users\Daniel\Desktop\TFC.exe 2014-01-29 21:31 - 2014-02-01 12:47 - 02080256 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2014-01-29 21:30 - 2014-01-29 21:30 - 01137152 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe 2014-01-29 11:10 - 2014-01-29 21:31 - 00021073 _____ () C:\Users\Daniel\Downloads\FRST.txt 2014-01-29 11:07 - 2014-01-29 11:07 - 00038261 _____ () C:\Users\Daniel\Downloads\Addition.zip 2014-01-29 10:48 - 2014-02-01 12:47 - 00000000 ____D () C:\FRST 2014-01-29 10:15 - 2014-01-29 10:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\LavasoftStatistics 2014-01-29 09:51 - 2014-01-30 09:32 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-29 09:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-29 09:49 - 2014-01-29 09:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-29 09:49 - 2014-01-29 09:49 - 01727624 _____ () C:\Users\Daniel\Downloads\Adaware_Installer.exe 2014-01-29 09:49 - 2014-01-29 09:49 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-01-29 09:24 - 2014-01-29 09:24 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Daniel\Downloads\SpyHunter-Installer (1).exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-29 09:05 - 2014-01-29 21:20 - 00000000 ____D () C:\AdwCleaner 2014-01-29 09:04 - 2014-01-29 09:04 - 01166132 _____ () C:\Users\Daniel\Downloads\adwcleaner.exe 2014-01-25 19:42 - 2014-01-25 20:07 - 00000000 ____D () C:\Users\Daniel\Documents\DayZ 2014-01-25 19:42 - 2014-01-25 19:47 - 00000000 ____D () C:\Users\Daniel\AppData\Local\DayZ 2014-01-24 20:07 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2014-01-20 12:06 - 2014-01-20 12:06 - 00212992 _____ () C:\Users\Daniel\Downloads\U200-6m.par 2014-01-15 18:03 - 2014-01-15 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_rzudd_01009.Wdf 2014-01-15 18:03 - 2014-01-15 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_rzdaendpt_01009.Wdf 2014-01-15 17:59 - 2014-01-15 18:02 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-01-15 17:59 - 2014-01-15 17:59 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Razer 2014-01-15 17:59 - 2014-01-15 17:59 - 00000000 ____D () C:\ProgramData\Razer 2014-01-15 17:58 - 2014-01-15 17:58 - 13163200 _____ (Razer Inc.) C:\Users\Daniel\Downloads\Razer_Synapse_Framework_V1.16.06.exe 2014-01-15 15:48 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 15:48 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 15:48 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 15:48 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 15:48 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 15:48 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 15:48 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 15:48 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 15:48 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 02:53 - 2014-01-14 02:53 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2014-01-14 02:53 - 2014-01-14 02:53 - 00088576 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevinfo.dll 2014-01-13 18:16 - 2014-01-13 18:16 - 00024581 _____ () C:\Users\Daniel\Downloads\lastenheft.zip 2014-01-08 16:28 - 2014-01-08 16:28 - 00000101 _____ () C:\Users\Daniel\Downloads\64036.txt ==================== One Month Modified Files and Folders ======= 2014-02-01 12:47 - 2014-02-01 12:47 - 00023082 _____ () C:\Users\Daniel\Desktop\FRST.txt 2014-02-01 12:47 - 2014-02-01 12:47 - 00000000 ____D () C:\Users\Daniel\Desktop\FRST-OlderVersion 2014-02-01 12:47 - 2014-01-29 21:31 - 02080256 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2014-02-01 12:47 - 2014-01-29 10:48 - 00000000 ____D () C:\FRST 2014-02-01 12:45 - 2013-01-18 10:00 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Spotify 2014-02-01 12:28 - 2012-04-18 17:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-01 12:08 - 2012-04-06 10:42 - 00000000 ____D () C:\Program Files\Common Files\McAfee 2014-02-01 12:07 - 2012-03-17 10:14 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-297260316-3893129376-739266816-1000UA.job 2014-02-01 11:40 - 2009-07-14 05:45 - 00022048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-01 11:40 - 2009-07-14 05:45 - 00022048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-01 11:34 - 2013-12-09 15:42 - 00000000 __RSD () C:\Users\Daniel\Documents\McAfee-Tresore 2014-02-01 11:32 - 2012-08-14 14:23 - 00000000 ___RD () C:\Users\Daniel\Dropbox 2014-02-01 11:32 - 2012-08-14 14:19 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Dropbox 2014-02-01 11:32 - 2009-07-14 05:51 - 00116708 _____ () C:\Windows\setupact.log 2014-02-01 11:31 - 2012-03-14 08:01 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-01 11:31 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-01-31 18:30 - 2012-03-13 17:52 - 01528983 _____ () C:\Windows\WindowsUpdate.log 2014-01-31 15:53 - 2012-03-17 10:15 - 00002370 _____ () C:\Users\Daniel\Desktop\Google Chrome.lnk 2014-01-31 15:51 - 2014-01-31 15:51 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Daniel\Downloads\sc-cleaner.exe 2014-01-31 15:51 - 2014-01-31 15:51 - 00004810 _____ () C:\sc-cleaner.txt 2014-01-31 15:51 - 2012-03-13 18:04 - 00001427 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-31 15:50 - 2012-03-14 08:03 - 00319898 _____ () C:\Windows\DPINST.LOG 2014-01-30 19:07 - 2012-03-17 10:14 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-297260316-3893129376-739266816-1000Core.job 2014-01-30 09:51 - 2014-01-30 09:51 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-01-30 09:49 - 2014-01-30 09:49 - 02347384 _____ (ESET) C:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe 2014-01-30 09:43 - 2010-11-21 04:47 - 00156968 _____ () C:\Windows\PFRO.log 2014-01-30 09:32 - 2014-01-30 09:32 - 00001115 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-30 09:32 - 2014-01-29 09:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-30 09:31 - 2014-01-30 09:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-1.75.0.1300 (1).exe 2014-01-30 09:25 - 2014-01-30 09:25 - 00448512 _____ (OldTimer Tools) C:\Users\Daniel\Desktop\TFC.exe 2014-01-29 21:31 - 2014-01-29 11:10 - 00021073 _____ () C:\Users\Daniel\Downloads\FRST.txt 2014-01-29 21:30 - 2014-01-29 21:30 - 01137152 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe 2014-01-29 21:20 - 2014-01-29 09:05 - 00000000 ____D () C:\AdwCleaner 2014-01-29 12:06 - 2012-03-13 17:53 - 00000000 ____D () C:\Users\Daniel 2014-01-29 12:04 - 2013-11-24 10:01 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-01-29 12:04 - 2013-08-30 15:39 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-01-29 12:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-01-29 11:07 - 2014-01-29 11:07 - 00038261 _____ () C:\Users\Daniel\Downloads\Addition.zip 2014-01-29 10:15 - 2014-01-29 10:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\LavasoftStatistics 2014-01-29 09:49 - 2014-01-29 09:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Daniel\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-29 09:49 - 2014-01-29 09:49 - 01727624 _____ () C:\Users\Daniel\Downloads\Adaware_Installer.exe 2014-01-29 09:49 - 2014-01-29 09:49 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-01-29 09:24 - 2014-01-29 09:24 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Daniel\Downloads\SpyHunter-Installer (1).exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-29 09:20 - 2014-01-29 09:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-29 09:04 - 2014-01-29 09:04 - 01166132 _____ () C:\Users\Daniel\Downloads\adwcleaner.exe 2014-01-28 21:20 - 2013-01-18 10:00 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Spotify 2014-01-25 20:07 - 2014-01-25 19:42 - 00000000 ____D () C:\Users\Daniel\Documents\DayZ 2014-01-25 19:47 - 2014-01-25 19:42 - 00000000 ____D () C:\Users\Daniel\AppData\Local\DayZ 2014-01-22 12:24 - 2013-08-17 18:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-01-21 12:34 - 2012-04-05 10:01 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe 2014-01-21 12:30 - 2012-04-18 17:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-21 12:30 - 2012-04-18 17:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-21 12:30 - 2012-03-17 10:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-20 12:06 - 2014-01-20 12:06 - 00212992 _____ () C:\Users\Daniel\Downloads\U200-6m.par 2014-01-16 17:57 - 2010-11-21 07:50 - 00762792 _____ () C:\Windows\system32\perfh007.dat 2014-01-16 17:57 - 2010-11-21 07:50 - 00173178 _____ () C:\Windows\system32\perfc007.dat 2014-01-16 17:57 - 2009-07-14 06:13 - 01799210 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-16 15:44 - 2009-07-14 05:45 - 04947856 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-15 20:16 - 2013-08-15 02:01 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-15 20:14 - 2012-03-14 08:22 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 19:00 - 2012-07-31 17:48 - 00000000 ____D () C:\Users\Daniel\AppData\Local\PMB Files 2014-01-15 19:00 - 2012-07-31 17:48 - 00000000 ____D () C:\ProgramData\PMB Files 2014-01-15 18:03 - 2014-01-15 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_rzudd_01009.Wdf 2014-01-15 18:03 - 2014-01-15 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_rzdaendpt_01009.Wdf 2014-01-15 18:02 - 2014-01-15 17:59 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-01-15 18:02 - 2012-03-13 17:53 - 00094960 _____ () C:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-15 17:59 - 2014-01-15 17:59 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Razer 2014-01-15 17:59 - 2014-01-15 17:59 - 00000000 ____D () C:\ProgramData\Razer 2014-01-15 17:58 - 2014-01-15 17:58 - 13163200 _____ (Razer Inc.) C:\Users\Daniel\Downloads\Razer_Synapse_Framework_V1.16.06.exe 2014-01-14 02:53 - 2014-01-14 02:53 - 00296448 _____ (Razer Inc) C:\Windows\SysWOW64\rzaudiodll.dll 2014-01-14 02:53 - 2014-01-14 02:53 - 00088576 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevinfo.dll 2014-01-13 18:17 - 2012-11-27 13:52 - 00000000 ____D () C:\Users\Daniel\Documents\Informatik 2014-01-13 18:16 - 2014-01-13 18:16 - 00024581 _____ () C:\Users\Daniel\Downloads\lastenheft.zip 2014-01-08 16:28 - 2014-01-08 16:28 - 00000101 _____ () C:\Users\Daniel\Downloads\64036.txt 2014-01-07 15:45 - 2012-08-14 14:23 - 00001029 _____ () C:\Users\Daniel\Desktop\Dropbox.lnk 2014-01-07 15:45 - 2012-08-14 14:20 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-07 15:45 - 2012-03-13 18:04 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-29 12:35 ==================== End Of Log ============================ --- --- --- |
02.02.2014, 18:23 | #20 |
/// Malwareteam | Awesomhp Löschen. Schritt 1: Die Reihenfolge ist hier entscheidend.
Schritt 2: Wunderbar dein System ist soweit ich das sehen kann sauber. Hier noch ein paar Tipps zur Absicherung deines Systems. Benutzerkonto Einstellungen: Wir sehen immer wieder User mit Administratorrechten. Hier kann jeder Nutzer eines Windowsrechners schon die erste Türe schließen. Arbeite mit einem eingeschränkten Benutzerkonto anstelle eines Kontos mit Administratorrechten. Diese sind für das tägliche Arbeiten nicht nötig, und solltest du einmal Software installieren wollen wirst du im normalfall nach deinem Passwort gefragt. Solltest du Hilfe bei der Erstellung eines "eingeschränkten Kontos" benötigen helfe ich dir gern weiter. Systemupdates: Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates Ältere Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Antivirensoftware Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen alternatives Browsen Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. Wenn du möchtest, kannst du das Trojaner Board Forum mit einer kleinen Spende unterstützen. |
03.02.2014, 17:42 | #21 |
| Awesomhp Löschen. Hallo. Vielen Danke für die Hilfe und die zusätzlichen Tip's am Ende! Hab keine Probleme mehr mit dem System. Vielen Danke nochmal lg |
Themen zu Awesomhp Löschen. |
einfach, löschen, nicht mehr, seite, startseite, tagen |