|
Plagegeister aller Art und deren Bekämpfung: Überall Werbungen in YouTube Möglicherweise Viren??Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.03.2014, 22:36 | #16 |
/// TB-Ausbilder | Überall Werbungen in YouTube Möglicherweise Viren?? Ok, mach bitte ein frisches FRST Log.
__________________ cheers, Leo |
01.03.2014, 23:10 | #17 |
| Überall Werbungen in YouTube Möglicherweise Viren??FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-02-2014 01 Ran by Computer (administrator) on COMPUTER-PC on 01-03-2014 22:59:55 Running from C:\Users\Computer\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Akamai Technologies, Inc.) C:\Users\Computer\AppData\Local\Akamai\netsession_win.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Akamai Technologies, Inc.) C:\Users\Computer\AppData\Local\Akamai\netsession_win.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [9577680 2012-10-05] (COMODO) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [tvncontrol] - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-01-20] (Comodo Security Solutions, Inc.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1066331368-3135870475-817509354-1001\...\Run: [Akamai NetSession Interface] - C:\Users\Computer\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-1066331368-3135870475-817509354-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245432 2012-11-18] (NVIDIA Corporation) AppInit_DLLs: C:\Windows\system32\guard64.dll => C:\Windows\system32\guard64.dll [390392 2012-10-05] (COMODO) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [201136 2012-11-18] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\guard32.dll => c:\Windows\SysWOW64\guard32.dll [301264 2012-10-05] (COMODO) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Winsock: Catalog9 01 C:\Windows\system32\PCProtect.dll File Not found () Winsock: Catalog9 02 C:\Windows\system32\PCProtect.dll File Not found () Winsock: Catalog9 03 C:\Windows\system32\PCProtect.dll File Not found () Winsock: Catalog9 04 C:\Windows\system32\PCProtect.dll File Not found () Winsock: Catalog9 15 C:\Windows\system32\PCProtect.dll File Not found () Winsock: Catalog9-x64 01 C:\Windows\system32\PCProtect64.dll File Not found () Winsock: Catalog9-x64 02 C:\Windows\system32\PCProtect64.dll File Not found () Winsock: Catalog9-x64 03 C:\Windows\system32\PCProtect64.dll File Not found () Winsock: Catalog9-x64 04 C:\Windows\system32\PCProtect64.dll File Not found () Winsock: Catalog9-x64 15 C:\Windows\system32\PCProtect64.dll File Not found () Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Chrome: ======= CHR Extension: (AdBlock) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-25] CHR Extension: (Google Wallet) - C:\Users\Computer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-23] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2014-01-20] (Comodo Security Solutions, Inc.) R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2828408 2012-10-05] (COMODO) R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2095752 2013-06-20] () R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-01-20] (Comodo Security Solutions, Inc.) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.) S4 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4204272 2012-08-28] (INCA Internet Co., Ltd.) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-03] () S2 WinDefend; %ProgramFiles(x86)%\Windows Defender\mpsvc.dll [X] ==================== Drivers (Whitelisted) ==================== S3 AsyncMac; C:\Windows\SysWOW64\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation) R1 cdrom; C:\Windows\SysWOW64\DRIVERS\cdrom.sys [147456 2010-11-21] (Microsoft Corporation) S1 CFRMD; C:\Windows\SysWOW64\DRIVERS\CFRMD.sys [37976 2012-09-03] (Windows (R) Win 7 DDK provider) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [22736 2012-10-05] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [584056 2012-10-05] (COMODO) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-26] (DT Soft Ltd) R3 intelppm; C:\Windows\SysWOW64\DRIVERS\intelppm.sys [62464 2009-07-14] (Microsoft Corporation) R0 NDIS; C:\Windows\SysWOW64\drivers\ndis.sys [950128 2012-08-22] (Microsoft Corporation) R3 Ndisuio; C:\Windows\SysWOW64\DRIVERS\ndisuio.sys [56832 2010-11-21] (Microsoft Corporation) R3 NDProxy; C:\Windows\SysWow64\Drivers\NDProxy.sys [57856 2010-11-21] (Microsoft Corporation) R1 NetBIOS; C:\Windows\SysWOW64\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation) R1 NetBT; C:\Windows\SysWOW64\DRIVERS\netbt.sys [261632 2010-11-21] (Microsoft Corporation) R1 Null; C:\Windows\SysWow64\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation) S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 Tcpip; C:\Windows\SysWOW64\drivers\tcpip.sys [1897408 2013-11-26] (Microsoft Corporation) S3 TCPIP6; C:\Windows\SysWOW64\DRIVERS\tcpip.sys [1897408 2013-11-26] (Microsoft Corporation) R1 tdx; C:\Windows\SysWOW64\DRIVERS\tdx.sys [119296 2010-11-21] (Microsoft Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 b57xdbd; system32\DRIVERS\b57xdbd.sys [X] S3 b57xdmp; system32\DRIVERS\b57xdmp.sys [X] S3 bScsiMSa; system32\DRIVERS\bScsiMSa.sys [X] S3 bScsiSDa; system32\DRIVERS\bScsiSDa.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 EuMusDesignVirtualAudioCableWdm; system32\DRIVERS\vrtaucbl.sys [X] S3 k57nd60a; system32\DRIVERS\k57nd60a.sys [X] S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [X] S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [X] S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [X] S3 usbbus; system32\DRIVERS\lgx64bus.sys [X] S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X] S3 USBModem; system32\DRIVERS\lgx64modem.sys [X] S3 usj; \??\C:\AeriaGames\EdenEternal\avital\ussjcs64.sys [X] S3 zbrk; \??\C:\Program Files (x86)\ZombiRock\bin\avital\zbrc64.sys [X] ==================== NetSvcs (Whitelisted) =================== NETSVCx32: AppInfo -> C:\Windows\SysWOW64\appinfo.dll ==> No File. NETSVCx32: browser -> C:\Windows\SysWOW64\browser.dll ==> No File. NETSVCx32: EapHost -> C:\Windows\SysWOW64\eapsvc.dll ==> No File. NETSVCx32: hkmsvc -> C:\Windows\SysWOW64\kmsvc.dll ==> No File. NETSVCx32: IKEEXT -> C:\Windows\SysWOW64\ikeext.dll ==> No File. NETSVCx32: MMCSS -> C:\Windows\SysWOW64\mmcss.dll ==> No File. NETSVCx32: ProfSvc -> C:\Windows\SysWOW64\profsvc.dll ==> No File. NETSVCx32: seclogon -> %windir%\SysWOW64\seclogon.dll ==> No File. NETSVCx32: wercplsupport -> C:\Windows\SysWOW64\wercplsupport.dll ==> No File. NETSVCx32: BDESVC -> C:\Windows\SysWOW64\bdesvc.dll ==> No File. ==================== One Month Created Files and Folders ======== 2014-03-01 22:22 - 2014-03-01 22:22 - 00001247 _____ () C:\Windows\WindowsUpdate.log 2014-03-01 22:18 - 2014-03-01 22:18 - 00000056 _____ () C:\Windows\setupact.log 2014-03-01 22:18 - 2014-03-01 22:18 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-01 17:33 - 2014-02-26 18:52 - 02155008 _____ (Farbar) C:\Users\Computer\Downloads\FRST64.exe 2014-02-26 18:10 - 2014-02-26 18:10 - 00000000 ____D () C:\Users\Computer\Downloads\FRST-OlderVersion 2014-02-26 14:17 - 2014-02-26 14:26 - 386820710 _____ () C:\Users\Computer\Documents\clip0008.avi 2014-02-26 14:16 - 2014-02-26 14:16 - 00011144 _____ () C:\Users\Computer\Documents\clip0007.avi 2014-02-25 21:33 - 2014-02-25 21:33 - 02347384 _____ (ESET) C:\Users\Computer\Downloads\esetsmartinstaller_enu.exe 2014-02-25 19:12 - 2014-02-25 19:12 - 00031538 _____ () C:\ComboFix.txt 2014-02-25 19:05 - 2010-11-21 04:24 - 00119296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\tdx.sys 2014-02-25 19:05 - 2010-11-21 04:24 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\ndproxy.sys 2014-02-25 19:05 - 2010-11-21 04:23 - 00147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\cdrom.sys 2014-02-25 19:05 - 2009-07-14 01:10 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\ws2ifsl.sys 2014-02-25 19:05 - 2009-07-14 01:00 - 00094208 _____ (Brother Industries Ltd.) C:\Windows\SysWOW64\Drivers\Serial.sys 2014-02-25 19:05 - 2009-07-14 00:19 - 00105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\i8042prt.sys 2014-02-25 19:04 - 2013-11-27 02:42 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\usbehci.sys 2014-02-25 19:04 - 2013-11-26 12:34 - 01897408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\tcpip.sys 2014-02-25 19:04 - 2013-09-28 02:14 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\afd.sys 2014-02-25 19:04 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\ndis.sys 2014-02-25 19:04 - 2010-11-21 04:24 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\ndisuio.sys 2014-02-25 19:04 - 2010-11-21 04:23 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\netbt.sys 2014-02-25 19:04 - 2009-07-14 01:10 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\asyncmac.sys 2014-02-25 19:04 - 2009-07-14 01:09 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\netbios.sys 2014-02-25 19:04 - 2009-07-14 00:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\intelppm.sys 2014-02-25 19:04 - 2009-07-14 00:19 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\null.sys 2014-02-25 18:54 - 2014-02-25 19:12 - 00000000 ____D () C:\Qoobox 2014-02-25 18:54 - 2014-02-25 19:11 - 00000000 ____D () C:\Windows\erdnt 2014-02-25 18:54 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-02-25 18:54 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-02-25 18:54 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-02-25 18:54 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-02-25 18:54 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-02-25 18:54 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-02-25 18:54 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-02-25 18:54 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-02-25 18:53 - 2014-02-25 18:53 - 05185084 ____R (Swearware) C:\Users\Computer\Desktop\ComboFix.exe 2014-02-25 18:52 - 2014-02-25 18:53 - 05185084 _____ (Swearware) C:\Users\Computer\Downloads\ComboFix.exe 2014-02-25 18:25 - 2014-02-25 18:25 - 00033416 _____ () C:\Users\Computer\Downloads\Addition.txt 2014-02-25 18:24 - 2014-03-01 22:59 - 00013703 _____ () C:\Users\Computer\Downloads\FRST.txt 2014-02-25 18:24 - 2014-03-01 22:59 - 00000000 ____D () C:\FRST 2014-02-25 17:02 - 2014-02-25 17:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Computer\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-25 17:02 - 2014-02-25 17:02 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\Malwarebytes 2014-02-25 17:02 - 2014-02-25 17:02 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-25 16:59 - 2014-02-25 16:59 - 00710848 _____ ( ) C:\Users\Computer\Downloads\COMPUTER_BILD-Download-Manager_fuer_mbam-setup-1.75.0.1300.exe 2014-02-25 16:11 - 2014-02-25 16:11 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\LavasoftStatistics 2014-02-25 16:09 - 2014-02-25 16:09 - 01727624 _____ () C:\Users\Computer\Downloads\Adaware_Installer_11.1.5354.exe 2014-02-25 16:09 - 2014-02-25 16:09 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-02-25 16:00 - 2014-02-25 17:06 - 00000000 ____D () C:\AdwCleaner 2014-02-25 16:00 - 2014-02-25 16:00 - 01241888 _____ () C:\Users\Computer\Downloads\adwcleaner_3.0.1.9.exe 2014-02-25 16:00 - 2014-02-25 16:00 - 01241888 _____ () C:\Users\Computer\Downloads\adwcleaner_3.0.1.9 (1).exe 2014-02-25 15:51 - 2014-02-25 15:52 - 00921000 _____ (Oracle Corporation) C:\Users\Computer\Downloads\chromeinstall-7u51.exe 2014-02-23 17:46 - 2014-02-23 18:08 - 1329491196 _____ () C:\Users\Computer\Documents\clip0006.avi 2014-02-23 17:05 - 2014-02-23 17:40 - 1216811254 _____ () C:\Users\Computer\Documents\clip0005.avi 2014-02-23 17:04 - 2014-02-23 17:04 - 04758080 _____ () C:\Users\Computer\Documents\clip0004.avi 2014-02-23 16:47 - 2014-02-27 22:17 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-23 16:47 - 2014-02-27 17:36 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-23 16:47 - 2014-02-23 17:13 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-02-23 16:47 - 2014-02-23 17:12 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-02-23 16:38 - 2014-02-23 16:38 - 00558888 _____ (Premium Installer ) C:\Users\Computer\Downloads\Freecorder_8_Setup.exe 2014-02-23 16:35 - 2014-02-23 16:35 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\WM Recorder 2014-02-23 16:33 - 2014-02-23 16:39 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\WM Capture 7 2014-02-23 16:32 - 2014-02-23 16:33 - 27313600 _____ (AllAlex, Inc) C:\Users\Computer\Downloads\install_wmcap.exe 2014-02-23 16:17 - 2014-02-23 16:17 - 00000000 ____D () C:\Users\Computer\Documents\Stream Catcher 2014-02-23 16:16 - 2014-02-23 16:16 - 00335288 _____ (Protect Software GmbH) C:\Windows\system32\Drivers\acedrv11.sys 2014-02-23 16:16 - 2014-02-23 16:16 - 00000000 ____D () C:\Program Files (x86)\ProtectDisc 2014-02-23 16:16 - 2014-02-23 16:16 - 00000000 ____D () C:\Program Files (x86)\DATA BECKER 2014-02-23 16:10 - 2014-02-23 16:11 - 57463904 _____ (DATA BECKER ) C:\Users\Computer\Downloads\streamcatcher2_free.exe 2014-02-21 21:01 - 2014-02-21 21:01 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-02-16 19:08 - 2014-02-16 19:18 - 593595186 _____ () C:\Users\Computer\Documents\clip0003.avi 2014-02-16 15:34 - 2014-02-19 18:57 - 00000182 _____ () C:\Users\Computer\Desktop\Neues Textdokument (3).txt 2014-02-16 13:30 - 2014-02-16 13:30 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-02-15 17:50 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-15 17:50 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-15 17:50 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-15 17:50 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-15 17:50 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-15 17:50 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-15 17:50 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-15 17:50 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-15 17:50 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-15 17:50 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-15 17:50 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-15 17:50 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-15 17:50 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-15 17:50 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-15 17:50 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-15 17:50 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-15 17:50 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-15 17:50 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-15 17:50 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-15 17:50 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-15 17:50 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-15 17:50 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-15 17:50 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-15 17:50 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-15 17:50 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-15 17:50 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-15 17:50 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-15 17:50 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-15 17:50 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-15 17:50 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-15 17:50 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-15 17:50 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-15 17:50 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-15 17:50 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-15 17:49 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-15 17:49 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-15 17:49 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-15 17:49 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-15 17:49 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-15 17:49 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-15 17:49 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-15 16:32 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-15 16:32 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-15 16:32 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-15 16:32 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-15 16:32 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-15 16:32 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-15 16:32 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-15 16:32 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-15 16:32 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-15 16:32 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-15 16:32 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-15 16:32 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-15 16:32 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-15 16:32 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-15 16:32 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-15 16:32 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-15 16:32 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-15 16:32 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-15 16:32 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-15 16:32 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-15 16:32 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-15 16:32 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-15 16:32 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-15 16:32 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-15 16:31 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-15 16:31 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-15 16:31 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-15 16:31 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\Desktop\Neuer Ordner (2) 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\Windows Live Writer 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\AppData\Local\Windows Live Writer 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\AppData\Local\{A86D3002-6379-4C2E-B127-98060CC41B5D} 2014-02-08 14:04 - 2014-02-08 14:04 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-02-03 13:03 - 2014-02-03 13:03 - 07190152 _____ (Microsoft Corporation) C:\Users\Computer\Downloads\vcredist_x64.exe 2014-01-31 15:31 - 2014-01-31 11:47 - 00000000 ____D () C:\Users\Computer\Desktop\PA Sports - H.A.Z.E (+3 Premium & 2 iTunes Bonustracks) (2014) 2014-01-31 14:00 - 2014-01-31 15:04 - 197289728 _____ () C:\Users\Computer\Downloads\PA Sports - H.A.Z.E (+3 Premium & 2 iTunes Bonustracks) (2014).rar 2014-01-30 15:15 - 2014-02-23 19:08 - 00000000 ____D () C:\Windows\Minidump 2014-01-30 14:54 - 2014-01-30 14:54 - 02972631 _____ () C:\Users\Computer\Downloads\livebook0102.zip ==================== One Month Modified Files and Folders ======= 2014-03-01 23:00 - 2014-02-25 18:24 - 00013703 _____ () C:\Users\Computer\Downloads\FRST.txt 2014-03-01 22:59 - 2014-02-25 18:24 - 00000000 ____D () C:\FRST 2014-03-01 22:58 - 2012-10-27 12:30 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-03-01 22:27 - 2009-07-14 05:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-01 22:27 - 2009-07-14 05:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-01 22:22 - 2014-03-01 22:22 - 00001247 _____ () C:\Windows\WindowsUpdate.log 2014-03-01 22:19 - 2013-09-04 15:33 - 00000000 ____D () C:\Users\Computer\AppData\Local\LogMeIn Hamachi 2014-03-01 22:18 - 2014-03-01 22:18 - 00000056 _____ () C:\Windows\setupact.log 2014-03-01 22:18 - 2014-03-01 22:18 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-01 22:18 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-01 22:18 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-01 22:10 - 2012-07-10 14:15 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\Skype 2014-03-01 20:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-03-01 15:49 - 2012-07-07 13:04 - 00000000 ___RD () C:\Users\Computer\Desktop\Programme und Sonstiges 2014-02-27 23:01 - 2013-07-04 14:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-27 22:17 - 2014-02-23 16:47 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-27 22:17 - 2012-12-26 17:25 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\TS3Client 2014-02-27 17:39 - 2012-07-06 11:13 - 00000000 ____D () C:\ProgramData\clear.fi 2014-02-27 17:36 - 2014-02-23 16:47 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-26 18:52 - 2014-03-01 17:33 - 02155008 _____ (Farbar) C:\Users\Computer\Downloads\FRST64.exe 2014-02-26 18:10 - 2014-02-26 18:10 - 00000000 ____D () C:\Users\Computer\Downloads\FRST-OlderVersion 2014-02-26 14:26 - 2014-02-26 14:17 - 386820710 _____ () C:\Users\Computer\Documents\clip0008.avi 2014-02-26 14:16 - 2014-02-26 14:16 - 00011144 _____ () C:\Users\Computer\Documents\clip0007.avi 2014-02-25 21:33 - 2014-02-25 21:33 - 02347384 _____ (ESET) C:\Users\Computer\Downloads\esetsmartinstaller_enu.exe 2014-02-25 21:33 - 2012-01-31 18:43 - 00711204 _____ () C:\Windows\system32\perfh007.dat 2014-02-25 21:33 - 2012-01-31 18:43 - 00155244 _____ () C:\Windows\system32\perfc007.dat 2014-02-25 21:33 - 2009-07-14 06:13 - 01653238 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-25 19:12 - 2014-02-25 19:12 - 00031538 _____ () C:\ComboFix.txt 2014-02-25 19:12 - 2014-02-25 18:54 - 00000000 ____D () C:\Qoobox 2014-02-25 19:12 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-02-25 19:11 - 2014-02-25 18:54 - 00000000 ____D () C:\Windows\erdnt 2014-02-25 19:06 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-02-25 18:53 - 2014-02-25 18:53 - 05185084 ____R (Swearware) C:\Users\Computer\Desktop\ComboFix.exe 2014-02-25 18:53 - 2014-02-25 18:52 - 05185084 _____ (Swearware) C:\Users\Computer\Downloads\ComboFix.exe 2014-02-25 18:25 - 2014-02-25 18:25 - 00033416 _____ () C:\Users\Computer\Downloads\Addition.txt 2014-02-25 17:06 - 2014-02-25 16:00 - 00000000 ____D () C:\AdwCleaner 2014-02-25 17:02 - 2014-02-25 17:02 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Computer\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-25 17:02 - 2014-02-25 17:02 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\Malwarebytes 2014-02-25 17:02 - 2014-02-25 17:02 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-25 16:59 - 2014-02-25 16:59 - 00710848 _____ ( ) C:\Users\Computer\Downloads\COMPUTER_BILD-Download-Manager_fuer_mbam-setup-1.75.0.1300.exe 2014-02-25 16:11 - 2014-02-25 16:11 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\LavasoftStatistics 2014-02-25 16:09 - 2014-02-25 16:09 - 01727624 _____ () C:\Users\Computer\Downloads\Adaware_Installer_11.1.5354.exe 2014-02-25 16:09 - 2014-02-25 16:09 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-02-25 16:03 - 2012-07-06 11:07 - 00001005 _____ () C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-25 16:00 - 2014-02-25 16:00 - 01241888 _____ () C:\Users\Computer\Downloads\adwcleaner_3.0.1.9.exe 2014-02-25 16:00 - 2014-02-25 16:00 - 01241888 _____ () C:\Users\Computer\Downloads\adwcleaner_3.0.1.9 (1).exe 2014-02-25 15:52 - 2014-02-25 15:51 - 00921000 _____ (Oracle Corporation) C:\Users\Computer\Downloads\chromeinstall-7u51.exe 2014-02-24 14:28 - 2013-12-19 14:13 - 00000143 _____ () C:\Users\Computer\AppData\Roaming\WB.CFG 2014-02-24 13:44 - 2012-11-20 21:47 - 00000000 ____D () C:\Users\UpdatusUser.Computer-PC 2014-02-23 19:08 - 2014-01-30 15:15 - 00000000 ____D () C:\Windows\Minidump 2014-02-23 19:08 - 2012-08-23 16:00 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-23 19:06 - 2013-11-09 19:05 - 00000000 ____D () C:\Program Files (x86)\LOLReplay 2014-02-23 19:06 - 2013-09-07 14:15 - 00000000 ____D () C:\Program Files (x86)\DevPro 2014-02-23 18:33 - 2013-12-31 22:19 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\vlc 2014-02-23 18:08 - 2014-02-23 17:46 - 1329491196 _____ () C:\Users\Computer\Documents\clip0006.avi 2014-02-23 17:40 - 2014-02-23 17:05 - 1216811254 _____ () C:\Users\Computer\Documents\clip0005.avi 2014-02-23 17:13 - 2014-02-23 16:47 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-02-23 17:12 - 2014-02-23 16:47 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-02-23 17:04 - 2014-02-23 17:04 - 04758080 _____ () C:\Users\Computer\Documents\clip0004.avi 2014-02-23 16:48 - 2013-09-06 13:11 - 00000000 ____D () C:\Program Files (x86)\Google 2014-02-23 16:39 - 2014-02-23 16:33 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\WM Capture 7 2014-02-23 16:38 - 2014-02-23 16:38 - 00558888 _____ (Premium Installer ) C:\Users\Computer\Downloads\Freecorder_8_Setup.exe 2014-02-23 16:35 - 2014-02-23 16:35 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\WM Recorder 2014-02-23 16:33 - 2014-02-23 16:32 - 27313600 _____ (AllAlex, Inc) C:\Users\Computer\Downloads\install_wmcap.exe 2014-02-23 16:17 - 2014-02-23 16:17 - 00000000 ____D () C:\Users\Computer\Documents\Stream Catcher 2014-02-23 16:16 - 2014-02-23 16:16 - 00335288 _____ (Protect Software GmbH) C:\Windows\system32\Drivers\acedrv11.sys 2014-02-23 16:16 - 2014-02-23 16:16 - 00000000 ____D () C:\Program Files (x86)\ProtectDisc 2014-02-23 16:16 - 2014-02-23 16:16 - 00000000 ____D () C:\Program Files (x86)\DATA BECKER 2014-02-23 16:16 - 2012-07-06 11:07 - 00000000 ___RD () C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-23 16:11 - 2014-02-23 16:10 - 57463904 _____ (DATA BECKER ) C:\Users\Computer\Downloads\streamcatcher2_free.exe 2014-02-21 21:01 - 2014-02-21 21:01 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-02-21 21:01 - 2013-07-04 14:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-21 21:01 - 2012-07-14 14:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-21 21:01 - 2011-10-14 04:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-19 18:57 - 2014-02-16 15:34 - 00000182 _____ () C:\Users\Computer\Desktop\Neues Textdokument (3).txt 2014-02-18 15:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-16 19:58 - 2012-07-07 12:40 - 00000000 ____D () C:\Users\Computer\Desktop\Spiele 2014-02-16 19:18 - 2014-02-16 19:08 - 593595186 _____ () C:\Users\Computer\Documents\clip0003.avi 2014-02-16 15:35 - 2013-09-14 11:12 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 15:35 - 2013-09-14 11:12 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-16 13:37 - 2013-10-21 17:23 - 00000000 ____D () C:\ProgramData\Oracle 2014-02-16 13:30 - 2014-02-16 13:30 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-02-15 17:52 - 2012-08-24 18:25 - 01627518 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-12 17:09 - 2013-08-01 12:56 - 00000000 ____D () C:\Users\Computer\Desktop\Neuer Ordner (4) 2014-02-12 17:08 - 2013-12-29 14:14 - 00000000 ____D () C:\Users\Computer\Desktop\Neuer Ordner 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\Desktop\Neuer Ordner (2) 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\Windows Live Writer 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\AppData\Local\Windows Live Writer 2014-02-10 20:56 - 2014-02-10 20:56 - 00000000 ____D () C:\Users\Computer\AppData\Local\{A86D3002-6379-4C2E-B127-98060CC41B5D} 2014-02-08 14:04 - 2014-02-08 14:04 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-02-06 13:16 - 2014-02-15 17:50 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-15 17:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-15 17:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-15 17:50 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-15 17:50 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-15 17:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-15 17:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-15 17:50 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-15 17:50 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-15 17:50 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-15 17:50 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-15 17:50 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-15 17:49 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-15 17:50 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-15 17:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-15 17:50 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-15 17:49 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-15 17:50 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-15 17:50 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-15 17:50 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-15 17:50 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-15 17:50 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-15 17:50 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-15 17:49 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-15 17:50 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-15 17:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-15 17:50 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-15 17:50 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:25 - 2014-02-15 17:49 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:24 - 2014-02-15 17:50 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-15 17:49 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-15 17:50 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-15 17:49 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-15 17:49 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-15 17:50 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-15 17:50 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-15 17:50 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-15 17:50 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-15 17:50 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-05 18:57 - 2012-08-04 13:43 - 00000000 ____D () C:\Windows\System32\Tasks\Games 2014-02-05 18:32 - 2012-10-08 20:00 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\.minecraft 2014-02-03 14:18 - 2013-04-25 16:38 - 00000000 ____D () C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-02-03 13:03 - 2014-02-03 13:03 - 07190152 _____ (Microsoft Corporation) C:\Users\Computer\Downloads\vcredist_x64.exe 2014-02-01 20:32 - 2014-01-11 19:59 - 00000000 ____D () C:\Users\Computer\Documents\Neuer Ordner (2) 2014-02-01 20:31 - 2014-01-11 19:21 - 00004608 _____ () C:\Users\Computer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-31 15:04 - 2014-01-31 14:00 - 197289728 _____ () C:\Users\Computer\Downloads\PA Sports - H.A.Z.E (+3 Premium & 2 iTunes Bonustracks) (2014).rar 2014-01-31 11:47 - 2014-01-31 15:31 - 00000000 ____D () C:\Users\Computer\Desktop\PA Sports - H.A.Z.E (+3 Premium & 2 iTunes Bonustracks) (2014) 2014-01-30 15:15 - 2009-07-14 05:45 - 00309968 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-30 14:54 - 2014-01-30 14:54 - 02972631 _____ () C:\Users\Computer\Downloads\livebook0102.zip 2014-01-30 11:18 - 2012-07-06 11:04 - 00065376 _____ () C:\Users\Computer\AppData\Local\GDIPFONTCACHEV1.DAT Files to move or delete: ==================== C:\Users\Computer\AppData\Roaming\CamLayout.ini C:\Users\Computer\AppData\Roaming\CamShapes.ini C:\Users\Computer\AppData\Roaming\mBot.ini C:\Users\Computer\jagex_cl_runescape_LIVE.dat C:\Users\Computer\random.dat ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-18 14:58 ==================== End Of Log ============================ |
01.03.2014, 23:33 | #18 |
/// TB-Ausbilder | Überall Werbungen in YouTube Möglicherweise Viren?? Ja der Fix hatte nicht geklappt. Deaktiviere mal Comodo und versuch es über eine elevated command prompt:
__________________Drücke Start -> Alle Programme -> Zubehör, mach einen Rechtsklick auf Eingabeaufforderung und wähle als Administrator ausführen. Gib dann folgenden Befehl in die Eingabeaufforderung ein: Code:
ATTFilter netsh winsock reset Danach immer noch keine Internetverbindung vorhanden?
__________________ |
02.03.2014, 13:08 | #19 |
| Überall Werbungen in YouTube Möglicherweise Viren?? Danke hat bestens geklappt. Aber warum war es so? und habe ich (immernoch) Viren auf meinem PC die gefährlich sind? |
Themen zu Überall Werbungen in YouTube Möglicherweise Viren?? |
awesomehp, awesomehp entfernen, bruder, erscheint, illegale, leute, nsis/startpage.cc, problem, texte, verschwinden, videos, virus, win32/adware.1clickdownload.ar, win32/adware.ibryte.q, youtube |