![]() |
|
Log-Analyse und Auswertung: Notebook wird im Laufe der Zeit immer langsamerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #11 |
| ![]() Notebook wird im Laufe der Zeit immer langsamer Hi, habe gestern meine externe FP angeschlossen und Eset gestartet, hat nach 3 Stunden noch bei 85% gestanden (ok, meine FP ist beim Anschließen ca. 40cm runter gefallen und macht seitdem böse Geräusche, läuft aber...). Bin dann ins Bett, heute Morgen weiterhin 85%, selbe Datei genannt, dann ging das Notebook trotz Mausaktivität 3 mal in den Standbymodus (zumindest schien es so), nach dem letzten Wiedererwecken durch Mausbewegung kam ne Bluescreen und ein automatischer Neustart, der sehr lange dauerte. Hab heute Morgen nun erst mal runtergefahren - soll ich heute Abend noch mal ESET starten oder lieber was anderes? Vielleicht erst mal ohne die externe FP? VG Volker Hab nun mal ohne die defekte FP gescannt, aber das Logfile trägt das Datum von gestern? Und um 19:34 war der Kasten munter am Laufen? hmmm... Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok SecurityCheck: Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 45 Java version out of Date! Adobe Reader 10.1.0 Adobe Reader out of Date! Google Chrome 32.0.1700.107 Google Chrome 33.0.1750.117 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2014 02 Ran by xxx (administrator) on SCOTCH on 06-03-2014 22:27:29 Running from C:\Users\xxx\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AMD) C:\Windows\system32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Google Inc.) C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe () C:\Users\xxx\Desktop\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2320752 2009-11-05] (Microsoft Corporation) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2864016 2012-07-27] (ELAN Microelectronics Corp.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-12] (Intel Corporation) HKLM-x32\...\Run: [Avira Systray] - C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [172624 2014-02-24] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-14] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-923726590-3493731562-3914021242-1001\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\xxx\AppData\Local\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\xxx\AppData\Local\Google\Chrome\Application\33.0.1750.117\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\xxx\AppData\Local\Google\Chrome\Application\33.0.1750.117\gcswf32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll No File CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Google Update) - C:\Users\xxx\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (YouTube) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-04] CHR Extension: (Google-Suche) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-04] CHR Extension: (Speed Dial) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgpdioedihjhncjafcpgbbjdpbbkikmi [2012-06-03] CHR Extension: (Google Wallet) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30] CHR Extension: (Google Mail) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-04] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-14] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [117328 2014-02-24] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4573336 2013-04-07] (INCA Internet Co., Ltd.) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) S2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2012-12-16] (Mobile Connector) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-23] (DT Soft Ltd) S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-06 22:24 - 2014-03-06 22:24 - 00987425 _____ () C:\Users\xxx\Desktop\SecurityCheck.exe 2014-03-06 21:15 - 2014-03-06 21:15 - 00000000 ____D () C:\Users\xxx\AppData\Local\{35155D05-6B4C-4C21-A732-84651B2F8944} 2014-03-06 06:45 - 2014-03-06 06:45 - 634432502 _____ () C:\Windows\MEMORY.DMP 2014-03-06 06:45 - 2014-03-06 06:45 - 00262144 _____ () C:\Windows\Minidump\030614-32729-01.dmp 2014-03-05 19:34 - 2014-03-05 19:34 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-03-05 19:33 - 2014-03-05 19:33 - 02347384 _____ (ESET) C:\Users\xxx\Downloads\esetsmartinstaller_enu.exe 2014-03-04 22:28 - 2014-03-04 22:28 - 00000000 ____D () C:\Users\xxx\Desktop\FRST-OlderVersion 2014-03-04 22:25 - 2014-03-04 22:25 - 00051512 _____ () C:\Users\xxx\Desktop\JRT.txt 2014-03-04 22:20 - 2014-03-04 22:20 - 00000000 ____D () C:\Windows\ERUNT 2014-03-04 22:18 - 2014-03-04 22:18 - 01037734 _____ (Thisisu) C:\Users\xxx\Desktop\JRT.exe 2014-03-04 22:10 - 2014-03-04 22:10 - 01244192 _____ () C:\Users\xxx\Downloads\adwcleaner.exe 2014-03-04 21:45 - 2014-03-04 21:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\xxx\Downloads\mbam-setup-1.75.0.1300 (1).exe 2014-03-03 22:09 - 2014-03-03 22:09 - 00023493 _____ () C:\ComboFix.txt 2014-03-03 21:51 - 2014-03-03 21:54 - 05186474 ____R (Swearware) C:\Users\xxx\Downloads\ComboFix.exe 2014-03-02 20:37 - 2014-03-02 20:37 - 00024240 _____ () C:\Users\xxx\Desktop\ComboFix_1.txt 2014-03-02 20:28 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-03-02 20:28 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-03-02 20:28 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-03-02 20:28 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-03-02 20:28 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-03-02 20:28 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-03-02 20:28 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-03-02 20:28 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-03-02 20:27 - 2014-03-03 22:09 - 00000000 ____D () C:\Qoobox 2014-03-02 20:27 - 2014-03-02 20:36 - 00000000 ____D () C:\Windows\erdnt 2014-03-01 16:49 - 2014-03-01 16:49 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-03-01 16:43 - 2014-03-01 16:43 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Avira 2014-03-01 16:42 - 2014-02-14 11:00 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-03-01 16:42 - 2014-02-14 11:00 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-03-01 16:42 - 2014-02-14 11:00 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-03-01 16:35 - 2014-03-01 16:42 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-03-01 16:35 - 2014-03-01 16:35 - 00001101 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-03-01 16:34 - 2014-03-01 16:34 - 04051872 _____ (Avira Operations GmbH & Co. KG) C:\Users\xxx\Downloads\avira_de_av___ws.exe 2014-03-01 16:34 - 2014-03-01 16:34 - 00000000 ____D () C:\ProgramData\Package Cache 2014-03-01 14:26 - 2014-03-01 14:47 - 00005052 _____ () C:\Users\xxx\Desktop\Gmer.txt 2014-03-01 14:10 - 2014-03-01 14:10 - 00380416 _____ () C:\Users\xxx\Desktop\m507duoo.exe 2014-03-01 14:08 - 2014-03-01 14:12 - 00038691 _____ () C:\Users\xxx\Desktop\Addition.txt 2014-03-01 14:07 - 2014-03-06 22:27 - 00011441 _____ () C:\Users\xxx\Desktop\FRST.txt 2014-03-01 14:07 - 2014-03-06 22:27 - 00000000 ____D () C:\FRST 2014-03-01 14:07 - 2014-03-04 22:31 - 00036308 _____ () C:\Users\xxx\Desktop\FRST_1.txt 2014-03-01 14:06 - 2014-03-04 22:28 - 02156544 _____ (Farbar) C:\Users\xxx\Desktop\FRST64.exe 2014-03-01 14:05 - 2014-03-01 14:35 - 00000540 _____ () C:\Users\xxx\Desktop\defogger_disable.log 2014-03-01 14:05 - 2014-03-01 14:05 - 00000168 _____ () C:\Users\xxx\defogger_reenable 2014-03-01 14:03 - 2014-03-01 14:03 - 00050477 _____ () C:\Users\xxx\Desktop\Defogger.exe 2014-03-01 13:57 - 2014-03-06 18:51 - 00000840 _____ () C:\Windows\setupact.log 2014-03-01 13:57 - 2014-03-01 13:57 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-01 13:56 - 2014-03-04 22:04 - 00213826 _____ () C:\Windows\PFRO.log 2014-03-01 13:53 - 2014-03-02 14:43 - 01594964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-12 21:56 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-12 21:56 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-12 21:55 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-12 21:55 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-12 21:55 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-12 21:55 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-12 21:55 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-12 21:55 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-12 21:55 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-12 21:55 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-12 21:55 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-12 21:55 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-12 21:55 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-12 21:55 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-12 21:55 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-12 21:55 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-12 21:55 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-12 21:55 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-12 21:55 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-12 21:55 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-12 21:55 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-12 21:55 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-12 21:55 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-12 21:55 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-12 21:55 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-12 21:55 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-12 21:55 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-12 21:55 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-12 21:55 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-12 21:55 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-12 21:55 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-12 21:55 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-12 21:55 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-12 21:55 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-12 21:55 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-12 21:55 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-12 21:55 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-12 21:55 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-12 21:55 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-12 21:55 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-12 21:55 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-12 17:31 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-12 17:31 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-12 17:31 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-12 17:31 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-12 17:31 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 17:31 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-12 17:31 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-12 17:31 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-12 17:31 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-12 17:31 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-12 17:31 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-12 17:31 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-12 17:31 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-12 17:31 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-12 17:31 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-12 17:31 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-12 17:31 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-12 17:31 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-12 17:31 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-12 17:31 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-12 17:31 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-12 17:31 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-12 17:31 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-12 17:31 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-12 17:31 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-12 17:31 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-12 17:31 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-12 17:31 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-07 18:23 - 2014-02-07 18:24 - 29336472 _____ (Garmin Ltd or its subsidiaries) C:\Users\xxx\Downloads\GarminExpress (1).exe ==================== One Month Modified Files and Folders ======= 2014-03-06 22:27 - 2014-03-01 14:07 - 00011441 _____ () C:\Users\xxx\Desktop\FRST.txt 2014-03-06 22:27 - 2014-03-01 14:07 - 00000000 ____D () C:\FRST 2014-03-06 22:24 - 2014-03-06 22:24 - 00987425 _____ () C:\Users\xxx\Desktop\SecurityCheck.exe 2014-03-06 22:16 - 2012-06-03 17:28 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-06 21:52 - 2013-10-01 19:10 - 01553424 _____ () C:\Windows\WindowsUpdate.log 2014-03-06 21:15 - 2014-03-06 21:15 - 00000000 ____D () C:\Users\xxx\AppData\Local\{35155D05-6B4C-4C21-A732-84651B2F8944} 2014-03-06 19:16 - 2012-06-03 17:28 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-06 19:08 - 2009-07-14 05:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-06 19:08 - 2009-07-14 05:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-06 18:55 - 2011-11-23 10:53 - 00699682 _____ () C:\Windows\system32\perfh007.dat 2014-03-06 18:55 - 2011-11-23 10:53 - 00149790 _____ () C:\Windows\system32\perfc007.dat 2014-03-06 18:55 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-06 18:51 - 2014-03-01 13:57 - 00000840 _____ () C:\Windows\setupact.log 2014-03-06 18:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-06 06:45 - 2014-03-06 06:45 - 634432502 _____ () C:\Windows\MEMORY.DMP 2014-03-06 06:45 - 2014-03-06 06:45 - 00262144 _____ () C:\Windows\Minidump\030614-32729-01.dmp 2014-03-06 06:45 - 2013-09-15 19:20 - 00000000 ____D () C:\Windows\Minidump 2014-03-06 06:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-03-05 19:34 - 2014-03-05 19:34 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-03-05 19:33 - 2014-03-05 19:33 - 02347384 _____ (ESET) C:\Users\xxx\Downloads\esetsmartinstaller_enu.exe 2014-03-04 22:31 - 2014-03-01 14:07 - 00036308 _____ () C:\Users\xxx\Desktop\FRST_1.txt 2014-03-04 22:28 - 2014-03-04 22:28 - 00000000 ____D () C:\Users\xxx\Desktop\FRST-OlderVersion 2014-03-04 22:28 - 2014-03-01 14:06 - 02156544 _____ (Farbar) C:\Users\xxx\Desktop\FRST64.exe 2014-03-04 22:25 - 2014-03-04 22:25 - 00051512 _____ () C:\Users\xxx\Desktop\JRT.txt 2014-03-04 22:20 - 2014-03-04 22:20 - 00000000 ____D () C:\Windows\ERUNT 2014-03-04 22:18 - 2014-03-04 22:18 - 01037734 _____ (Thisisu) C:\Users\xxx\Desktop\JRT.exe 2014-03-04 22:13 - 2013-10-01 20:32 - 00000000 ____D () C:\AdwCleaner 2014-03-04 22:10 - 2014-03-04 22:10 - 01244192 _____ () C:\Users\xxx\Downloads\adwcleaner.exe 2014-03-04 22:04 - 2014-03-01 13:56 - 00213826 _____ () C:\Windows\PFRO.log 2014-03-04 21:47 - 2013-10-01 20:18 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-04 21:47 - 2013-10-01 20:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-03-04 21:45 - 2014-03-04 21:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\xxx\Downloads\mbam-setup-1.75.0.1300 (1).exe 2014-03-03 22:09 - 2014-03-03 22:09 - 00023493 _____ () C:\ComboFix.txt 2014-03-03 22:09 - 2014-03-02 20:27 - 00000000 ____D () C:\Qoobox 2014-03-03 22:04 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-03-03 21:54 - 2014-03-03 21:51 - 05186474 ____R (Swearware) C:\Users\xxx\Downloads\ComboFix.exe 2014-03-02 20:37 - 2014-03-02 20:37 - 00024240 _____ () C:\Users\xxx\Desktop\ComboFix_1.txt 2014-03-02 20:37 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-03-02 20:36 - 2014-03-02 20:27 - 00000000 ____D () C:\Windows\erdnt 2014-03-02 14:43 - 2014-03-01 13:53 - 01594964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-03-01 20:43 - 2012-03-05 20:13 - 00000000 ___HD () C:\Users\xxx\Documents\Mareike 2014-03-01 16:49 - 2014-03-01 16:49 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-03-01 16:43 - 2014-03-01 16:43 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Avira 2014-03-01 16:42 - 2014-03-01 16:35 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-03-01 16:42 - 2013-08-05 20:03 - 00000000 ____D () C:\ProgramData\Avira 2014-03-01 16:35 - 2014-03-01 16:35 - 00001101 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-03-01 16:34 - 2014-03-01 16:34 - 04051872 _____ (Avira Operations GmbH & Co. KG) C:\Users\xxx\Downloads\avira_de_av___ws.exe 2014-03-01 16:34 - 2014-03-01 16:34 - 00000000 ____D () C:\ProgramData\Package Cache 2014-03-01 14:47 - 2014-03-01 14:26 - 00005052 _____ () C:\Users\xxx\Desktop\Gmer.txt 2014-03-01 14:35 - 2014-03-01 14:05 - 00000540 _____ () C:\Users\xxx\Desktop\defogger_disable.log 2014-03-01 14:12 - 2014-03-01 14:08 - 00038691 _____ () C:\Users\xxx\Desktop\Addition.txt 2014-03-01 14:10 - 2014-03-01 14:10 - 00380416 _____ () C:\Users\xxx\Desktop\m507duoo.exe 2014-03-01 14:05 - 2014-03-01 14:05 - 00000168 _____ () C:\Users\xxx\defogger_reenable 2014-03-01 14:05 - 2012-01-04 18:46 - 00000000 ____D () C:\Users\xxx 2014-03-01 14:03 - 2014-03-01 14:03 - 00050477 _____ () C:\Users\xxx\Desktop\Defogger.exe 2014-03-01 13:57 - 2014-03-01 13:57 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-01 10:40 - 2012-07-04 20:56 - 00000000 ____D () C:\Users\xxx\Documents\ccleaner sicherungen 2014-03-01 10:39 - 2012-01-19 21:43 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\DAEMON Tools Lite 2014-03-01 10:38 - 2013-08-31 09:20 - 00000000 ____D () C:\Users\xxx\Documents\UseNeXT 2014-03-01 10:29 - 2012-02-16 21:36 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\dvdcss 2014-02-26 21:48 - 2012-01-19 21:51 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\UseNeXT 2014-02-20 21:13 - 2012-01-06 18:34 - 00000000 ____D () C:\Users\xxx\AppData\Local\Windows Live 2014-02-20 20:51 - 2012-06-03 16:53 - 00000000 ____D () C:\Users\xxx\Documents\Moped 2014-02-17 22:03 - 2013-07-20 16:09 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 22:01 - 2012-01-09 21:57 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 19:19 - 2012-01-09 21:33 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\MyPhoneExplorer 2014-02-16 16:32 - 2012-08-21 17:36 - 00000000 ____D () C:\Users\xxx\Documents\Job 2014-02-16 13:49 - 2013-11-17 17:14 - 00000000 ____D () C:\Users\xxx\AppData\Local\Garmin 2014-02-16 13:49 - 2013-11-17 17:13 - 00000000 ____D () C:\ProgramData\Garmin 2014-02-16 13:49 - 2013-11-17 17:07 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Garmin 2014-02-16 13:46 - 2013-10-16 19:31 - 00007605 _____ () C:\Users\xxx\AppData\Local\Resmon.ResmonCfg 2014-02-14 11:00 - 2014-03-01 16:42 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-02-14 11:00 - 2014-03-01 16:42 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-02-14 11:00 - 2014-03-01 16:42 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-02-13 19:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-13 19:11 - 2012-06-03 17:28 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-02-13 19:11 - 2012-06-03 17:28 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-02-07 18:24 - 2014-02-07 18:23 - 29336472 _____ (Garmin Ltd or its subsidiaries) C:\Users\xxx\Downloads\GarminExpress (1).exe 2014-02-06 13:16 - 2014-02-12 21:55 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-12 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-12 21:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-12 21:55 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-12 21:55 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-12 21:55 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-12 21:55 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-12 21:55 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-12 21:55 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-12 21:55 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-12 21:55 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-12 21:55 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-12 21:55 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-12 21:55 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-12 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-12 21:55 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-12 21:55 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-12 21:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-12 21:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-12 21:55 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-12 21:55 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-12 21:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-12 21:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-12 21:55 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-12 21:55 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-12 21:55 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-12 21:55 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-12 21:55 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-12 21:55 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-12 21:55 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-12 21:55 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-12 21:55 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-12 21:55 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-12 21:55 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-12 21:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-12 21:55 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-12 21:55 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-12 21:55 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-12 21:55 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll Some content of TEMP: ==================== C:\Users\xxx\AppData\Local\Temp\avgnt.exe C:\Users\xxx\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-01 08:45 ==================== End Of Log ============================ --- --- --- |
Themen zu Notebook wird im Laufe der Zeit immer langsamer |
antivir, branding, browser, excel, google, iexplore.exe, launch, mozilla, msiexec.exe, ntdll.dll, pup.optional.bundleinstaller.a, pup.optional.newtab.a, safer networking, security, svchost.exe, trojan.dropper.fj, wlan, wscript.exe |