|
Plagegeister aller Art und deren Bekämpfung: snap.do nicht deinstallierbar windows vistaWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
16.02.2014, 08:13 | #16 |
/// the machine /// TB-Ausbilder | snap.do nicht deinstallierbar windows vista jup
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.02.2014, 21:49 | #17 |
| snap.do nicht deinstallierbar windows vista hi,
__________________so ich habs geschafft, hat etwas gedauert einen usb-stick zu kriegen... hab soviel wie möglich deinstalliert. und ein frisches FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-02-2014 Ran by Bambi (administrator) on BAMBI-PC on 19-02-2014 21:46:22 Running from C:\Users\Bambi\Desktop Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (AMD) C:\Windows\system32\atiesrxx.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (AMD) C:\Windows\system32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (TOSHIBA) C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (Toshiba Europe GmbH) C:\Program Files\Toshiba TEMPRO\TemproSvc.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe (TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TEco.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe (TOSHIBA) C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (Toshiba Europe GmbH) C:\Program Files\Toshiba TEMPRO\TemproTray.exe () C:\Program Files\SmarThru Office\BackUpSvr.exe () C:\Program Files\SmarThru Office\LegacyLauncher.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (TOSHIBA) C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\system32\conime.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_44_ActiveX.exe (Microsoft Corporation) C:\Windows\system32\wuauclt.exe (Microsoft Corporation) C:\Windows\system32\UI0Detect.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [HWSetup] - C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [421888 2007-04-16] (TOSHIBA Electronics, Inc.) HKLM\...\Run: [SVPWUTIL] - C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [438272 2008-11-21] (TOSHIBA) HKLM\...\Run: [KeNotify] - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [34088 2009-01-13] (TOSHIBA CORPORATION) HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe [1011712 2009-04-23] (TOSHIBA Corporation) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7289376 2009-03-30] (Realtek Semiconductor) HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2009-04-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [468320 2009-03-06] (TOSHIBA Corporation) HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [55160 2009-03-09] (TOSHIBA Corporation) HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [503808 2009-03-31] (TOSHIBA Corporation) HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [729088 2009-03-23] (TOSHIBA Corporation) HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [184320 2009-03-29] (Alps Electric Co., Ltd.) HKLM\...\Run: [SmartFaceVWatcher] - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [163840 2009-03-24] (TOSHIBA Corporation) HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1323008 2009-04-24] (TOSHIBA Corporation) HKLM\...\Run: [ToshibaServiceStation] - C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1295736 2011-02-11] (TOSHIBA Corporation) HKLM\...\Run: [TPCHWMsg] - C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe [570736 2009-04-15] (TOSHIBA Corporation) HKLM\...\Run: [NDSTray.exe] - C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [299008 2009-05-12] (TOSHIBA CORPORATION) HKLM\...\Run: [cfFncEnabler.exe] - C:\Program Files\TOSHIBA\ConfigFree\cfFncEnabler.exe [16384 2009-03-24] (Toshiba Corporation) HKLM\...\Run: [TWebCamera] - C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2513472 2009-04-16] (TOSHIBA) HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files\Toshiba TEMPRO\TemproTray.exe [1050072 2010-10-26] (Toshiba Europe GmbH) HKLM\...\Run: [Toshiba Registration] - C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [96144 2009-03-04] (Toshiba Europe GmbH) HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-03-30] (Realtek Semiconductor Corp.) HKLM\...\Run: [STO Backup Service] - C:\Program Files\SmarThru Office\BackUpSvr.exe [184320 2009-07-01] () HKLM\...\Run: [STO Launcher Service] - C:\Program Files\SmarThru Office\LegacyLauncher.exe [331776 2009-07-01] () HKLM\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [614400 2009-09-23] () HKLM\...\Run: [] - [X] HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe HKLM\...\Run: [avp] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [340520 2010-08-22] (Kaspersky Lab) Winlogon\Notify\klogon: C:\Windows\system32\klogon.dll (Kaspersky Lab) HKU\.DEFAULT\...\Run: [TOSHIBA Online Product Information] - C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [6158240 2009-03-16] (TOSHIBA) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-3040194652-3351564512-1966064265-1000\...\Run: [TOSHIBA Online Product Information] - C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [6158240 2009-03-16] (TOSHIBA) HKU\S-1-5-21-3040194652-3351564512-1966064265-1000\...\MountPoints2: {4f185bbd-e8ad-11de-b3e3-0026222f70a8} - D:\.\Kassettenrecorder.exe AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll,c:\progra~1\google\google~3\goec62~1.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll => C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll [17936 2009-11-17] (Kaspersky Lab) Startup: C:\Users\Bambi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEG&bmod=TSEG; HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391015836&from=tugs&uid=TOSHIBAXMK4055GSX_69ATT4F2TXX69ATT4F2T&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Avira Savings Advisor BHO - {A18A516C-AA41-46A9-92DB-60208917E442} - C:\Program Files\avira\Internet Explorer\avira32.dll () BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll No File DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [340520 2010-08-22] (Kaspersky Lab) R2 camsvc; C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe [20544 2009-04-16] (TOSHIBA) R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [46448 2009-03-10] (TOSHIBA CORPORATION) R2 TemproMonitoringService; C:\Program Files\Toshiba TEMPRO\TemproSvc.exe [124368 2010-10-26] (Toshiba Europe GmbH) R3 TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [54136 2011-02-11] (TOSHIBA Corporation) R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [176128 2009-04-24] (TOSHIBA Corporation) R2 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [73728 2009-03-17] (TOSHIBA Corporation) R2 TPCHSrv; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [656752 2009-04-15] (TOSHIBA Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-18] (Avira Operations GmbH & Co. KG) R1 kl1; C:\Windows\System32\DRIVERS\kl1.sys [128016 2009-09-01] (Kaspersky Lab) R0 klbg; C:\Windows\System32\drivers\klbg.sys [36880 2009-10-14] (Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [311312 2009-11-17] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [21520 2009-09-14] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [19472 2009-10-02] (Kaspersky Lab) R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [25896 2008-05-07] (COMPAL ELECTRONIC INC.) R3 PGEffect; C:\Windows\System32\DRIVERS\pgeffect.sys [22272 2009-03-18] (TOSHIBA Corporation) R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [154272 2008-11-11] (Realtek Semiconductor Corp.) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-18] (Avira GmbH) R2 TVALZFL; C:\Windows\System32\DRIVERS\TVALZFL.sys [12920 2009-03-20] (TOSHIBA Corporation) S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-19 21:32 - 2014-02-19 21:32 - 00000048 _____ () C:\Users\Public\Documents\_rgpl 2014-02-19 20:47 - 2014-02-19 20:47 - 00001022 _____ () C:\Users\Bambi\Desktop\Revo Uninstaller.lnk 2014-02-19 20:47 - 2014-02-19 20:47 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-02-14 19:39 - 2014-02-05 09:58 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-14 19:39 - 2014-02-05 09:56 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-14 19:39 - 2014-02-05 09:53 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-14 19:39 - 2014-02-05 09:51 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-14 19:39 - 2014-02-05 09:50 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-14 19:39 - 2014-02-05 09:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-14 19:39 - 2014-02-05 09:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-14 19:39 - 2014-02-05 09:48 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-14 19:39 - 2014-02-05 09:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-14 19:39 - 2014-02-05 09:48 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-14 19:39 - 2014-02-05 09:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-14 19:39 - 2014-02-05 09:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-14 19:39 - 2014-02-05 09:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-14 19:39 - 2014-02-05 09:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-14 19:39 - 2014-02-05 09:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-14 19:39 - 2014-02-05 09:46 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-14 19:30 - 2014-02-14 19:30 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Bambi\Downloads\revosetup95.exe 2014-02-10 16:28 - 2014-02-10 16:28 - 00987425 _____ () C:\Users\Bambi\Desktop\SecurityCheck.exe 2014-02-10 16:25 - 2014-02-10 16:25 - 02347384 _____ (ESET) C:\Users\Bambi\Downloads\esetsmartinstaller_enu.exe 2014-02-09 18:32 - 2014-02-19 21:46 - 00015628 _____ () C:\Users\Bambi\Desktop\FRST.txt 2014-02-09 18:32 - 2014-02-19 21:45 - 00000000 ____D () C:\Users\Bambi\Desktop\FRST-OlderVersion 2014-02-09 18:27 - 2014-02-09 18:27 - 00002132 _____ () C:\Users\Bambi\Desktop\JRT.txt 2014-02-09 18:19 - 2014-02-09 18:19 - 01037530 _____ (Thisisu) C:\Users\Bambi\Downloads\JRT.exe 2014-02-09 18:19 - 2014-02-09 18:19 - 00000000 ____D () C:\Windows\ERUNT 2014-02-09 17:08 - 2014-02-09 17:08 - 00000000 ____D () C:\Users\Bambi\AppData\Roaming\Malwarebytes 2014-02-09 17:06 - 2014-02-09 17:06 - 00000871 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-09 17:06 - 2014-02-09 17:06 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-09 17:06 - 2014-02-09 17:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-02-09 17:06 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-09 17:01 - 2014-02-09 17:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bambi\Desktop\mbam-setup-1.75.0.1300.exe 2014-02-08 19:44 - 2014-02-08 19:48 - 00025370 _____ () C:\Users\Bambi\Downloads\Addition.txt 2014-02-08 19:43 - 2014-02-19 21:46 - 00000000 ____D () C:\FRST 2014-02-08 19:43 - 2014-02-08 19:48 - 00037516 _____ () C:\Users\Bambi\Downloads\FRST.txt 2014-02-08 19:38 - 2014-02-19 21:45 - 01141248 _____ (Farbar) C:\Users\Bambi\Desktop\FRST.exe 2014-02-06 16:33 - 2014-02-06 22:04 - 00000000 ____D () C:\Users\Bambi\AppData\Local\Mobogenie 2014-02-06 16:33 - 2014-02-06 16:52 - 00000000 ____D () C:\Users\Bambi\AppData\Local\cache 2014-02-06 16:33 - 2014-02-06 16:33 - 00002029 _____ () C:\Users\Bambi\Desktop\Search.lnk 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\Documents\Mobogenie 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\AppData\Local\genienext 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\.android 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 _____ () C:\Users\Bambi\daemonprocess.txt 2014-02-05 18:53 - 2014-02-05 18:53 - 00000000 ____D () C:\Users\Bambi\AppData\Roaming\Avira 2014-02-05 18:47 - 2014-02-05 18:53 - 00000000 ____D () C:\Program Files\Avira 2014-02-05 18:47 - 2014-02-05 18:47 - 00001812 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-02-05 18:47 - 2014-02-05 18:47 - 00000000 ____D () C:\ProgramData\Avira 2014-02-05 18:47 - 2013-12-18 09:32 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-02-05 18:47 - 2013-12-18 09:32 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-02-05 18:47 - 2013-12-18 09:32 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-02-05 18:47 - 2013-12-18 09:32 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2014-02-04 22:01 - 2014-02-04 22:01 - 00000000 ____D () C:\ProgramData\Websteroids 2014-02-04 21:44 - 2014-02-04 21:44 - 01166132 _____ () C:\Users\Bambi\Desktop\adwcleaner-3.018.exe 2014-02-02 20:34 - 2014-02-14 19:39 - 00000000 ____D () C:\AdwCleaner 2014-02-02 20:33 - 2014-02-02 20:33 - 00000000 ____D () C:\Users\Bambi\Downloads\AdwCleaner_TSV43DG5U 2014-01-29 18:28 - 2014-01-29 18:28 - 00000879 _____ () C:\Users\Bambi\Desktop\Continue VuuPC Installation.lnk 2014-01-29 18:19 - 2014-02-06 16:30 - 00001719 _____ () C:\Users\Bambi\Desktop\Sync Folder.lnk 2014-01-29 18:18 - 2014-02-06 22:23 - 00000000 ____D () C:\Program Files\SupTab 2014-01-29 18:18 - 2014-02-04 21:41 - 00000000 ____D () C:\ProgramData\WPM ==================== One Month Modified Files and Folders ======= 2014-02-19 21:46 - 2014-02-09 18:32 - 00015628 _____ () C:\Users\Bambi\Desktop\FRST.txt 2014-02-19 21:46 - 2014-02-08 19:43 - 00000000 ____D () C:\FRST 2014-02-19 21:45 - 2014-02-09 18:32 - 00000000 ____D () C:\Users\Bambi\Desktop\FRST-OlderVersion 2014-02-19 21:45 - 2014-02-08 19:38 - 01141248 _____ (Farbar) C:\Users\Bambi\Desktop\FRST.exe 2014-02-19 21:32 - 2014-02-19 21:32 - 00000048 _____ () C:\Users\Public\Documents\_rgpl 2014-02-19 21:30 - 2009-10-26 20:35 - 00000000 ____D () C:\Users\Bambi\AppData\Local\Google 2014-02-19 21:30 - 2009-06-09 10:27 - 00000000 ____D () C:\ProgramData\Google 2014-02-19 21:30 - 2009-06-09 10:27 - 00000000 ____D () C:\Program Files\Google 2014-02-19 21:16 - 2012-07-14 19:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-19 21:10 - 2012-07-16 22:47 - 00000000 ____D () C:\Users\Bambi\Documents\My Games 2014-02-19 21:09 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Microsoft Games 2014-02-19 21:03 - 2009-08-13 12:28 - 01419306 _____ () C:\Windows\WindowsUpdate.log 2014-02-19 20:56 - 2012-03-26 20:03 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cd0b832a3e8c5c.job 2014-02-19 20:56 - 2010-02-16 21:19 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-19 20:51 - 2008-01-21 08:16 - 01475854 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-19 20:47 - 2014-02-19 20:47 - 00001022 _____ () C:\Users\Bambi\Desktop\Revo Uninstaller.lnk 2014-02-19 20:47 - 2014-02-19 20:47 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-02-19 20:46 - 2006-11-02 13:52 - 00107303 _____ () C:\Windows\setupact.log 2014-02-19 20:43 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-19 20:43 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-17 03:00 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-15 04:22 - 2009-12-26 16:15 - 00000000 ____D () C:\Users\Gast 2014-02-15 04:22 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\spool 2014-02-15 04:22 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\Msdtc 2014-02-15 04:22 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\registration 2014-02-15 04:22 - 2006-11-02 11:22 - 47185920 _____ () C:\Windows\system32\config\software_previous 2014-02-15 04:22 - 2006-11-02 11:22 - 308543488 _____ () C:\Windows\system32\config\system_previous 2014-02-15 04:17 - 2006-11-02 11:22 - 40370176 _____ () C:\Windows\system32\config\components_previous 2014-02-15 04:17 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous 2014-02-15 03:00 - 2010-09-01 21:01 - 00000680 _____ () C:\Users\Bambi\AppData\Local\d3d9caps.dat 2014-02-14 20:19 - 2010-01-10 14:00 - 00000880 _____ () C:\Users\Bambi\Desktop\Internet Explorer.lnk 2014-02-14 20:11 - 2009-10-26 22:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-02-14 20:07 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-14 19:58 - 2008-01-21 03:47 - 00598730 _____ () C:\Windows\PFRO.log 2014-02-14 19:57 - 2006-11-02 14:01 - 00032534 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-14 19:50 - 2013-09-03 19:02 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-14 19:46 - 2006-11-02 11:24 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-02-14 19:39 - 2014-02-02 20:34 - 00000000 ____D () C:\AdwCleaner 2014-02-14 19:30 - 2014-02-14 19:30 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Bambi\Downloads\revosetup95.exe 2014-02-14 19:24 - 2009-10-26 20:12 - 00000000 ____D () C:\Users\Bambi 2014-02-13 22:13 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\security_previous 2014-02-13 22:13 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\default_previous 2014-02-12 21:12 - 2014-01-11 15:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-10 16:28 - 2014-02-10 16:28 - 00987425 _____ () C:\Users\Bambi\Desktop\SecurityCheck.exe 2014-02-10 16:25 - 2014-02-10 16:25 - 02347384 _____ (ESET) C:\Users\Bambi\Downloads\esetsmartinstaller_enu.exe 2014-02-09 18:27 - 2014-02-09 18:27 - 00002132 _____ () C:\Users\Bambi\Desktop\JRT.txt 2014-02-09 18:19 - 2014-02-09 18:19 - 01037530 _____ (Thisisu) C:\Users\Bambi\Downloads\JRT.exe 2014-02-09 18:19 - 2014-02-09 18:19 - 00000000 ____D () C:\Windows\ERUNT 2014-02-09 17:51 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\ShellNew 2014-02-09 17:08 - 2014-02-09 17:08 - 00000000 ____D () C:\Users\Bambi\AppData\Roaming\Malwarebytes 2014-02-09 17:06 - 2014-02-09 17:06 - 00000871 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-09 17:06 - 2014-02-09 17:06 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-09 17:06 - 2014-02-09 17:06 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware 2014-02-09 17:01 - 2014-02-09 17:01 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Bambi\Desktop\mbam-setup-1.75.0.1300.exe 2014-02-08 19:48 - 2014-02-08 19:44 - 00025370 _____ () C:\Users\Bambi\Downloads\Addition.txt 2014-02-08 19:48 - 2014-02-08 19:43 - 00037516 _____ () C:\Users\Bambi\Downloads\FRST.txt 2014-02-06 22:23 - 2014-01-29 18:18 - 00000000 ____D () C:\Program Files\SupTab 2014-02-06 22:04 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\AppData\Local\Mobogenie 2014-02-06 20:20 - 2009-10-26 21:39 - 00020480 _____ () C:\Users\Bambi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-02-06 16:52 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\AppData\Local\cache 2014-02-06 16:33 - 2014-02-06 16:33 - 00002029 _____ () C:\Users\Bambi\Desktop\Search.lnk 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\Documents\Mobogenie 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\AppData\Local\genienext 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 ____D () C:\Users\Bambi\.android 2014-02-06 16:33 - 2014-02-06 16:33 - 00000000 _____ () C:\Users\Bambi\daemonprocess.txt 2014-02-06 16:30 - 2014-01-29 18:19 - 00001719 _____ () C:\Users\Bambi\Desktop\Sync Folder.lnk 2014-02-05 18:53 - 2014-02-05 18:53 - 00000000 ____D () C:\Users\Bambi\AppData\Roaming\Avira 2014-02-05 18:53 - 2014-02-05 18:47 - 00000000 ____D () C:\Program Files\Avira 2014-02-05 18:47 - 2014-02-05 18:47 - 00001812 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-02-05 18:47 - 2014-02-05 18:47 - 00000000 ____D () C:\ProgramData\Avira 2014-02-05 09:58 - 2014-02-14 19:39 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-05 09:56 - 2014-02-14 19:39 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-05 09:53 - 2014-02-14 19:39 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-05 09:51 - 2014-02-14 19:39 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-05 09:50 - 2014-02-14 19:39 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-05 09:49 - 2014-02-14 19:39 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-05 09:49 - 2014-02-14 19:39 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-05 09:48 - 2014-02-14 19:39 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-05 09:48 - 2014-02-14 19:39 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-05 09:48 - 2014-02-14 19:39 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-05 09:48 - 2014-02-14 19:39 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-05 09:48 - 2014-02-14 19:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-05 09:47 - 2014-02-14 19:39 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-05 09:47 - 2014-02-14 19:39 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-05 09:47 - 2014-02-14 19:39 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-05 09:46 - 2014-02-14 19:39 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-04 22:16 - 2012-07-14 19:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-02-04 22:16 - 2012-07-14 19:10 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-02-04 22:01 - 2014-02-04 22:01 - 00000000 ____D () C:\ProgramData\Websteroids 2014-02-04 21:44 - 2014-02-04 21:44 - 01166132 _____ () C:\Users\Bambi\Desktop\adwcleaner-3.018.exe 2014-02-04 21:41 - 2014-01-29 18:18 - 00000000 ____D () C:\ProgramData\WPM 2014-02-02 20:43 - 2012-08-03 23:49 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft 2014-02-02 20:33 - 2014-02-02 20:33 - 00000000 ____D () C:\Users\Bambi\Downloads\AdwCleaner_TSV43DG5U 2014-01-29 18:28 - 2014-01-29 18:28 - 00000879 _____ () C:\Users\Bambi\Desktop\Continue VuuPC Installation.lnk 2014-01-29 18:17 - 2009-10-26 20:35 - 00001156 _____ () C:\Users\Bambi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Some content of TEMP: ==================== C:\Users\Bambi\AppData\Local\Temp\ApnStub.exe C:\Users\Bambi\AppData\Local\Temp\avgnt.exe C:\Users\Bambi\AppData\Local\Temp\BackupSetup.exe C:\Users\Bambi\AppData\Local\Temp\contentDATs.exe C:\Users\Bambi\AppData\Local\Temp\drm_dialogs.dll C:\Users\Bambi\AppData\Local\Temp\drm_dyndata_7410004.dll C:\Users\Bambi\AppData\Local\Temp\ezGameXN.dll C:\Users\Bambi\AppData\Local\Temp\FlashPlayerUpdate.exe C:\Users\Bambi\AppData\Local\Temp\FlashPlayerUpdate01.exe C:\Users\Bambi\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Bambi\AppData\Local\Temp\GameXNGO.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u17-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u19-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u20-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Bambi\AppData\Local\Temp\ndqqarkn.dll C:\Users\Bambi\AppData\Local\Temp\NEW5D61.tmp.exe C:\Users\Bambi\AppData\Local\Temp\NEWF711.tmp.exe C:\Users\Bambi\AppData\Local\Temp\pcspeedmaxsetup.exe C:\Users\Bambi\AppData\Local\Temp\Quarantine.exe C:\Users\Bambi\AppData\Local\Temp\Refresh.exe C:\Users\Bambi\AppData\Local\Temp\SecurityScan_Release.exe C:\Users\Bambi\AppData\Local\Temp\setup.exe C:\Users\Bambi\AppData\Local\Temp\setup{D6921DE2-4509-4629-A14A-5755138AA61A}.exe C:\Users\Bambi\AppData\Local\Temp\SkypeSetup.exe C:\Users\Bambi\AppData\Local\Temp\TEMPRO_2.3.1.exe C:\Users\Bambi\AppData\Local\Temp\vcredist_x86.exe C:\Users\Bambi\AppData\Local\Temp\_is5234.exe C:\Users\Bambi\AppData\Local\Temp\_is5A8E.exe C:\Users\Bambi\AppData\Local\Temp\_prgorxj.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-14 20:15 ==================== End Of Log ============================ Kannst du mir sagen, wieso ich mit dem Internet Explorer nichtsmehr downloaden kann? Grüße Holly-Blue |
20.02.2014, 14:37 | #18 |
/// the machine /// TB-Ausbilder | snap.do nicht deinstallierbar windows vista Aber online ist der Rechner?
__________________Setze folgendermassen den Internet Explorer zurück:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe C:\Program Files\Mobogenie HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391015836&from=tugs&uid=TOSHIBAXMK4055GSX_69ATT4F2TXX69ATT4F2T&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ |
28.02.2014, 12:28 | #19 |
| snap.do nicht deinstallierbar windows vista Hey, entschuldige, dass ich mich solange nicht gemeldet hatte, aber ich bin wegen der Arbeit nicht dazu gekommen, an den "Problem-Laptop" zu gehen. Ich habe aber jetzt alles gemacht, was ich sollte, Einstellungen zurückgesetzt und fixlist.txt erstellt. Bitte schön: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 27-02-2014 02 Ran by Bambi at 2014-02-28 12:26:02 Run:1 Running from C:\Users\Bambi\Desktop\FRST-OlderVersion Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe C:\Program Files\Mobogenie HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1391015836&from=tugs&uid=TOSHIBAXMK4055GSX_69ATT4F2TXX69ATT4F2T&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully. "C:\Program Files\Mobogenie" => File/Directory not found. HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. ==== End of Fixlog ==== |
01.03.2014, 10:43 | #20 |
/// the machine /// TB-Ausbilder | snap.do nicht deinstallierbar windows vista Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.03.2014, 15:33 | #21 |
| snap.do nicht deinstallierbar windows vista ja, ich kann weiterhin nichts downloaden, habe es wieder mit mozilla firefox versucht, doch nachdem 100% gedownloadet wurde, kommt eine sicherheitsüberprüfung und dann die ansage, dass es nicht gedownloadet werden konnte. Kann man diese sicherheitsüberprüfung ausschalten oder einschränken. Das ist sehr lästig. Ansonsten keine weiteren Probleme. kein snap und kein awesomehp..danke schön! Gruß Holly-Blue |
03.03.2014, 13:41 | #22 |
/// the machine /// TB-Ausbilder | snap.do nicht deinstallierbar windows vista Aber Download in IE geht? FF schonmal komplett zurückgesetzt?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.03.2014, 18:38 | #23 |
| snap.do nicht deinstallierbar windows vista also ich hatte firefox ja gelöscht und deinstalliert und wollte den anschließend über den internet explorer neu downloaden.. und das geht nicht. momentan hab ich nur den internet explorer drauf. |
04.03.2014, 15:04 | #24 |
/// the machine /// TB-Ausbilder | snap.do nicht deinstallierbar windows vista Setze folgendermassen den Internet Explorer zurück:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |