Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Emails mit Link werden verschickt: AOL

Emails mit Link werden verschickt: AOL


Plagegeister aller Art und deren Bekämpfung: Emails mit Link werden verschickt: AOL

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 19.04.2014, 09:04   #7
steffen2
 
Emails mit Link werden verschickt: AOL - Standard

Emails mit Link werden verschickt: AOL


Sooo,

MwBt:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 18.04.2014
Suchlauf-Zeit: 20:11:39
Logdatei: MWBT.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.18.06
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Steffen

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 401340
Verstrichene Zeit: 1 Std, 57 Min, 39 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

AdwC-Log:

Code:
ATTFilter
# AdwCleaner v3.023 - Bericht erstellt am 18/04/2014 um 23:12:34
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Steffen - STEFFEN-PC
# Gestartet von : C:\Users\Steffen\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\Steffen\AppData\Local\CrashRpt
Ordner Gelöscht : C:\Users\Steffen\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\software4u
Datei Gelöscht : C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\5yp8reie.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\pricegong_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\pricegong_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweet-home-3d_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweet-home-3d_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\Vittalia

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\5yp8reie.default\prefs.js ]


[ Datei : C:\Users\Party\AppData\Roaming\Mozilla\Firefox\Profiles\tb5ih3x2.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ Datei : C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Sicherung\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2669 octets] - [18/04/2014 23:09:55]
AdwCleaner[S0].txt - [2399 octets] - [18/04/2014 23:12:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2459 octets] ##########
Junkware-Log:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Steffen on 18.04.2014 at 23:24:21,96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{09C25C54-685C-463B-A20F-71868E1D9FBD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1979B67C-7984-42FE-B500-C2D0FE6C6287}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3C20A8D5-E364-40F7-8C40-A5C6920F6127}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{801D93A2-39CE-442F-9812-FCFA35E14239}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{96AE2B6C-394F-47BE-A9CE-03B492384364}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A7E364F1-6EF1-45D4-B00D-2BDEEF57AD16}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A9724A64-A448-4173-8A89-9E131A988F1F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C2EEEA91-96E3-499A-A3B7-5D8BBD628A4B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DAE3BA6D-967F-429A-9E6F-A125E406F378}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F9A840AA-3893-4C32-BB74-5117AD570706}



~~~ FireFox

Emptied folder: C:\Users\Steffen\AppData\Roaming\mozilla\firefox\profiles\5yp8reie.default\minidumps [35 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.04.2014 at 23:38:17,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
und nochmal FRST-Log:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-04-2014 01
Ran by Steffen (administrator) on STEFFEN-PC on 18-04-2014 23:39:56
Running from C:\Users\Steffen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
( ) C:\Windows\system32\dlcgcoms.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Salfeld Computer) C:\Windows\SysWOW64\cchservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Salfeld Computer) C:\Windows\SysWOW64\cc32\webtmr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\PHotkey\ATouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Spotify Ltd) C:\Users\Steffen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Dropbox, Inc.) C:\Users\Steffen\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10361616 2011-02-11] (Intel Corporation)
HKLM\...\Run: [PSQLLauncher] => C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [DLCGCATS] => C:\Windows\system32\spool\DRIVERS\x64\3\DLCGtime.dll [28672 2006-10-21] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [ChicoSys] => C:\Windows\SysWOW64\cc32\webtmr.exe [5528984 2009-07-14] (Salfeld Computer)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3580909774-2373009125-3570030466-1002\...\Run: [Spotify Web Helper] => C:\Users\Steffen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-17] (Spotify Ltd)
HKU\S-1-5-21-3580909774-2373009125-3570030466-1002\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-04-24] (Google Inc.)
HKU\S-1-5-21-3580909774-2373009125-3570030466-1002\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [759496 2014-01-17] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-3580909774-2373009125-3570030466-1002\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3580909774-2373009125-3570030466-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicyUsers\S-1-5-21-3580909774-2373009125-3570030466-1056\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\5yp8reie.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: OLB - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\5yp8reie.default\Extensions\{C752FF21-A8EF-468E-B507-5BBAFB84359D} [2014-03-23]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-04-21]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=MDNC&bmod=MDNC
CHR StartupUrls: "hxxp://www.google.de/"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (AVG Internet Security) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Internet Banking der OLB) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\fipffogddddpcmkklaodlnofkmpognml [2014-02-13]
CHR Extension: (Google Wallet) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-04]

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 dlcg_device; C:\Windows\system32\dlcgcoms.exe [566152 2006-12-08] ( )
R2 dlcg_device; C:\Windows\SysWOW64\dlcgcoms.exe [537480 2006-12-08] ( )
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2012-12-12] (Nero AG)
S2 ksupmgr; C:\Windows\SysWOW64\ksupmgr.exe [765592 2010-08-25] (Salfeld Computer)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [267824 2007-03-26] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-01-21] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-01-21] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-12-14] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [187592 2014-01-17] (Sandboxie Holdings, LLC)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-07] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-07] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-07] ()
R3 com0com; C:\Windows\System32\DRIVERS\com0com.sys [76800 2011-01-25] (Vyacheslav Frolov)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [202600 2014-01-17] (Sandboxie Holdings, LLC)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2012-06-11] (Texas Instruments)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 RSUSBVSTOR; System32\Drivers\RTSUVSTOR.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-18 23:39 - 2014-04-18 23:39 - 00021041 _____ () C:\Users\Steffen\Desktop\FRST.txt
2014-04-18 23:39 - 2014-04-18 23:39 - 00000000 ____D () C:\Users\Steffen\Desktop\FRST-OlderVersion
2014-04-18 23:38 - 2014-04-18 23:38 - 00001843 _____ () C:\Users\Steffen\Desktop\JRT.txt
2014-04-18 23:23 - 2014-04-18 23:23 - 01016261 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2014-04-18 23:20 - 2014-04-18 23:20 - 00002539 _____ () C:\Users\Steffen\Desktop\AdwCleaner[S0].txt
2014-04-18 23:20 - 2014-04-18 23:20 - 00000000 ____D () C:\Users\Steffen\Desktop\Scans
2014-04-18 23:09 - 2014-04-18 23:12 - 00000000 ____D () C:\AdwCleaner
2014-04-18 23:09 - 2014-04-18 23:09 - 00001158 _____ () C:\Users\Steffen\Desktop\MWBT.txt
2014-04-18 18:27 - 2014-04-18 18:27 - 01426178 _____ () C:\Users\Steffen\Desktop\adwcleaner.exe
2014-04-18 18:11 - 2014-04-18 18:14 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-18 18:11 - 2014-04-18 18:11 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-18 18:11 - 2014-04-18 18:11 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-18 18:11 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-18 18:11 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-18 18:11 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-18 18:09 - 2014-04-18 18:09 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Steffen\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-17 11:57 - 2014-04-18 23:17 - 00000150 _____ () C:\Windows\SysWOW64\SWCTL.DLL
2014-04-17 11:57 - 2014-04-18 18:03 - 00000918 _____ () C:\Windows\PFRO.log
2014-04-17 11:27 - 2014-04-17 11:49 - 00000000 ____D () C:\Qoobox
2014-04-17 11:27 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-17 11:27 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-17 11:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-17 11:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-17 11:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-17 11:27 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-17 11:27 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-17 11:27 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-17 11:26 - 2014-04-17 11:47 - 00000000 ____D () C:\Windows\erdnt
2014-04-17 11:23 - 2014-04-17 11:23 - 05194807 ____R (Swearware) C:\Users\Steffen\Desktop\ComboFix.exe
2014-04-17 11:22 - 2014-04-17 11:23 - 05194807 _____ (Swearware) C:\Users\Steffen\Downloads\ComboFix.exe
2014-04-16 22:27 - 2014-04-16 22:27 - 00000000 ___RD () C:\Sandbox
2014-04-16 22:26 - 2014-04-18 18:06 - 00001916 _____ () C:\Windows\Sandboxie.ini
2014-04-16 22:26 - 2014-04-16 22:25 - 00000918 _____ () C:\Users\Steffen\Desktop\Sandboxed Web Browser.lnk
2014-04-16 22:25 - 2014-04-16 22:25 - 00000000 ____D () C:\Program Files\Sandboxie
2014-04-16 22:24 - 2014-04-16 22:25 - 02605768 _____ (Sandboxie Holdings, LLC) C:\Users\Steffen\Downloads\SandboxieInstall_4.0.8.exe
2014-04-16 21:12 - 2014-04-18 23:15 - 00000616 _____ () C:\Windows\setupact.log
2014-04-16 21:12 - 2014-04-16 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-16 10:59 - 2014-04-18 23:39 - 00000000 ____D () C:\FRST
2014-04-16 10:58 - 2014-04-18 23:39 - 02158592 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2014-04-14 14:19 - 2014-04-14 14:19 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\OBS
2014-04-14 14:18 - 2014-04-14 14:18 - 00000044 _____ () C:\Users\Steffen\Desktop\key.txt
2014-04-14 14:10 - 2014-04-14 14:20 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-04-14 14:10 - 2014-04-14 14:10 - 00000943 _____ () C:\Users\Steffen\Desktop\Open Broadcaster Software.lnk
2014-04-14 14:10 - 2014-04-14 14:10 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-04-14 14:10 - 2014-04-14 14:10 - 00000000 ____D () C:\Program Files\OBS
2014-04-14 14:09 - 2014-04-14 14:10 - 07888419 _____ () C:\Users\Steffen\Downloads\OBS_0_613b_Installer.exe
2014-04-13 19:55 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-13 19:55 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-13 19:55 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-13 19:55 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-13 19:54 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-13 19:54 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-13 19:54 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-13 19:54 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-13 19:54 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-13 19:54 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-13 19:54 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-13 19:54 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-13 19:54 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-13 19:54 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-13 19:54 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-13 19:54 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-13 19:54 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-13 19:54 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-13 19:54 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-13 19:54 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-13 19:54 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-31 13:47 - 2014-03-31 13:47 - 00000000 ____D () C:\Users\Steffen\Desktop\Steffen
2014-03-31 13:32 - 2014-03-31 13:32 - 00001727 _____ () C:\Users\Steffen\Documents\Tabelle Stadtturnfest 142.odb
2014-03-27 16:06 - 2014-03-27 16:06 - 00000000 ____D () C:\Users\Steffen\Desktop\Stick123
2014-03-23 17:00 - 2014-03-23 17:00 - 00001724 _____ () C:\Users\Steffen\Documents\Tabelle Stadtturnfest 141.odb
2014-03-23 16:57 - 2014-03-23 16:57 - 00001724 _____ () C:\Users\Steffen\Documents\Tabelle Stadtturnfest 140.odb
2014-03-23 14:09 - 2014-03-23 16:56 - 00000000 ____D () C:\Users\Steffen\Desktop\USB-Stick
2014-03-22 20:26 - 2014-03-22 20:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-21 15:04 - 2014-03-21 15:04 - 00036054 _____ () C:\Users\Steffen\Downloads\download_repair.htm
2014-03-21 15:04 - 2014-03-21 15:04 - 00036054 _____ () C:\Users\Steffen\Downloads\download_repair (1).htm
2014-03-19 12:07 - 2014-03-19 12:07 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Template
2014-03-19 11:16 - 2014-03-19 11:16 - 01484080 _____ (Microsoft Corporation) C:\Users\Steffen\Downloads\WorksConv.exe
2014-03-19 11:16 - 2014-03-19 11:16 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-03-19 11:10 - 2014-03-19 11:10 - 04745216 _____ () C:\Users\Steffen\Downloads\Works632_de-DE.msi
2014-03-19 10:50 - 2014-03-19 10:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8

==================== One Month Modified Files and Folders =======

2014-04-18 23:40 - 2014-04-18 23:39 - 00021041 _____ () C:\Users\Steffen\Desktop\FRST.txt
2014-04-18 23:39 - 2014-04-18 23:39 - 00000000 ____D () C:\Users\Steffen\Desktop\FRST-OlderVersion
2014-04-18 23:39 - 2014-04-16 10:59 - 00000000 ____D () C:\FRST
2014-04-18 23:39 - 2014-04-16 10:58 - 02158592 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2014-04-18 23:38 - 2014-04-18 23:38 - 00001843 _____ () C:\Users\Steffen\Desktop\JRT.txt
2014-04-18 23:24 - 2013-04-21 19:51 - 00000000 ____D () C:\Windows\ERUNT
2014-04-18 23:24 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-18 23:24 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-18 23:23 - 2014-04-18 23:23 - 01016261 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2014-04-18 23:20 - 2014-04-18 23:20 - 00002539 _____ () C:\Users\Steffen\Desktop\AdwCleaner[S0].txt
2014-04-18 23:20 - 2014-04-18 23:20 - 00000000 ____D () C:\Users\Steffen\Desktop\Scans
2014-04-18 23:19 - 2013-04-21 21:35 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Dropbox
2014-04-18 23:18 - 2013-04-21 21:37 - 00000000 ___RD () C:\Users\Steffen\Dropbox
2014-04-18 23:17 - 2014-04-17 11:57 - 00000150 _____ () C:\Windows\SysWOW64\SWCTL.DLL
2014-04-18 23:15 - 2014-04-16 21:12 - 00000616 _____ () C:\Windows\setupact.log
2014-04-18 23:15 - 2013-01-07 15:49 - 00000000 ____D () C:\Users\Steffen\AppData\Local\HTC MediaHub
2014-04-18 23:15 - 2012-04-24 22:15 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-18 23:14 - 2011-06-24 16:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-18 23:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-18 23:13 - 2012-07-19 14:27 - 01701069 _____ () C:\Windows\WindowsUpdate.log
2014-04-18 23:12 - 2014-04-18 23:09 - 00000000 ____D () C:\AdwCleaner
2014-04-18 23:09 - 2014-04-18 23:09 - 00001158 _____ () C:\Users\Steffen\Desktop\MWBT.txt
2014-04-18 23:03 - 2012-04-24 22:15 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-18 18:27 - 2014-04-18 18:27 - 01426178 _____ () C:\Users\Steffen\Desktop\adwcleaner.exe
2014-04-18 18:14 - 2014-04-18 18:11 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-18 18:11 - 2014-04-18 18:11 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-18 18:11 - 2014-04-18 18:11 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-18 18:11 - 2012-05-27 23:27 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-18 18:11 - 2011-06-19 19:00 - 00703176 _____ () C:\Windows\system32\perfh007.dat
2014-04-18 18:11 - 2011-06-19 19:00 - 00150784 _____ () C:\Windows\system32\perfc007.dat
2014-04-18 18:10 - 2009-07-14 07:13 - 01629276 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-18 18:09 - 2014-04-18 18:09 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Steffen\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-18 18:06 - 2014-04-16 22:26 - 00001916 _____ () C:\Windows\Sandboxie.ini
2014-04-18 18:03 - 2014-04-17 11:57 - 00000918 _____ () C:\Windows\PFRO.log
2014-04-18 17:55 - 2013-04-21 20:27 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-17 15:57 - 2013-02-08 23:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-17 15:17 - 2014-02-03 17:17 - 00000000 ____D () C:\Users\Steffen\AppData\Local\DayZ
2014-04-17 11:49 - 2014-04-17 11:27 - 00000000 ____D () C:\Qoobox
2014-04-17 11:49 - 2014-02-01 18:31 - 00185856 ___SH () C:\Users\Steffen\Desktop\Thumbs.db
2014-04-17 11:47 - 2014-04-17 11:26 - 00000000 ____D () C:\Windows\erdnt
2014-04-17 11:45 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-17 11:23 - 2014-04-17 11:23 - 05194807 ____R (Swearware) C:\Users\Steffen\Desktop\ComboFix.exe
2014-04-17 11:23 - 2014-04-17 11:22 - 05194807 _____ (Swearware) C:\Users\Steffen\Downloads\ComboFix.exe
2014-04-16 22:27 - 2014-04-16 22:27 - 00000000 ___RD () C:\Sandbox
2014-04-16 22:25 - 2014-04-16 22:26 - 00000918 _____ () C:\Users\Steffen\Desktop\Sandboxed Web Browser.lnk
2014-04-16 22:25 - 2014-04-16 22:25 - 00000000 ____D () C:\Program Files\Sandboxie
2014-04-16 22:25 - 2014-04-16 22:24 - 02605768 _____ (Sandboxie Holdings, LLC) C:\Users\Steffen\Downloads\SandboxieInstall_4.0.8.exe
2014-04-16 21:12 - 2014-04-16 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-16 14:12 - 2013-04-01 14:01 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\TS3Client
2014-04-16 14:10 - 2014-02-11 17:40 - 00000000 ____D () C:\Windows\Minidump
2014-04-14 16:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-14 14:20 - 2014-04-14 14:10 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-04-14 14:19 - 2014-04-14 14:19 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\OBS
2014-04-14 14:18 - 2014-04-14 14:18 - 00000044 _____ () C:\Users\Steffen\Desktop\key.txt
2014-04-14 14:10 - 2014-04-14 14:10 - 00000943 _____ () C:\Users\Steffen\Desktop\Open Broadcaster Software.lnk
2014-04-14 14:10 - 2014-04-14 14:10 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-04-14 14:10 - 2014-04-14 14:10 - 00000000 ____D () C:\Program Files\OBS
2014-04-14 14:10 - 2014-04-14 14:09 - 07888419 _____ () C:\Users\Steffen\Downloads\OBS_0_613b_Installer.exe
2014-04-14 12:23 - 2012-05-12 12:37 - 00000000 ____D () C:\Program Files\Dl_cats
2014-04-13 22:44 - 2013-08-09 16:06 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Spotify
2014-04-13 22:39 - 2012-07-06 22:39 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Spotify
2014-04-13 20:10 - 2012-04-27 12:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-13 20:09 - 2013-07-13 11:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-13 20:09 - 2012-04-24 22:16 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-13 20:05 - 2011-06-19 14:08 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-12 18:54 - 2013-06-03 17:26 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CyberLink
2014-04-04 19:00 - 2006-01-01 14:27 - 00000000 ____D () C:\Users\Steffen\Desktop\DCIM
2014-04-03 09:51 - 2014-04-18 18:11 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-18 18:11 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-18 18:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 14:51 - 2013-04-24 15:32 - 00000000 ____D () C:\Users\Steffen\Documents\VirtualDJ
2014-04-02 14:22 - 2014-02-12 19:30 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\FileZilla
2014-03-31 13:47 - 2014-03-31 13:47 - 00000000 ____D () C:\Users\Steffen\Desktop\Steffen
2014-03-31 13:32 - 2014-03-31 13:32 - 00001727 _____ () C:\Users\Steffen\Documents\Tabelle Stadtturnfest 142.odb
2014-03-31 09:35 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-31 03:16 - 2014-04-13 19:55 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-13 19:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-13 19:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-13 19:55 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-29 13:58 - 2012-04-24 22:15 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-29 13:58 - 2012-04-24 22:15 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-28 13:34 - 2012-07-01 19:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-27 16:06 - 2014-03-27 16:06 - 00000000 ____D () C:\Users\Steffen\Desktop\Stick123
2014-03-23 17:04 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-03-23 17:00 - 2014-03-23 17:00 - 00001724 _____ () C:\Users\Steffen\Documents\Tabelle Stadtturnfest 141.odb
2014-03-23 16:57 - 2014-03-23 16:57 - 00001724 _____ () C:\Users\Steffen\Documents\Tabelle Stadtturnfest 140.odb
2014-03-23 16:56 - 2014-03-23 14:09 - 00000000 ____D () C:\Users\Steffen\Desktop\USB-Stick
2014-03-22 21:07 - 2014-01-27 18:03 - 00000000 ____D () C:\Users\Steffen\Desktop\Facharbeit
2014-03-22 20:27 - 2014-03-22 20:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-22 19:25 - 2012-04-24 22:23 - 00153904 _____ () C:\Users\Steffen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-22 19:22 - 2009-07-14 06:45 - 05160968 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 15:04 - 2014-03-21 15:04 - 00036054 _____ () C:\Users\Steffen\Downloads\download_repair.htm
2014-03-21 15:04 - 2014-03-21 15:04 - 00036054 _____ () C:\Users\Steffen\Downloads\download_repair (1).htm
2014-03-19 12:07 - 2014-03-19 12:07 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Template
2014-03-19 11:40 - 2012-04-29 12:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-03-19 11:16 - 2014-03-19 11:16 - 01484080 _____ (Microsoft Corporation) C:\Users\Steffen\Downloads\WorksConv.exe
2014-03-19 11:16 - 2014-03-19 11:16 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-03-19 11:10 - 2014-03-19 11:10 - 04745216 _____ () C:\Users\Steffen\Downloads\Works632_de-DE.msi
2014-03-19 10:53 - 2012-04-29 12:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-03-19 10:53 - 2011-04-12 10:28 - 00000000 ____D () C:\Windows\ShellNew
2014-03-19 10:53 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-03-19 10:50 - 2014-03-19 10:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8

Files to move or delete:
====================
C:\Users\Steffen\AppData\Roaming\CamLayout.ini
C:\Users\Steffen\AppData\Roaming\CamShapes.ini
C:\Users\Steffen\sicherung.bat


Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-14 16:46

==================== End Of Log ============================
--- --- ---

--- --- ---




Gruß Steffen

Hallo, muss noch einmal was ergänzen:

Heute morgen wurden wieder einmal Emails verschickt, obwohl Computer nicht an war. Könnte es vielleicht auch am Handy liegen? Achja und Passwort habe ich auch schon öfters wieder geändert.

Gruß Steffen

 

Themen zu Emails mit Link werden verschickt: AOL
email, emails, gemerkt, heute, kontakte, laptop, link, mails, nichts, ordner, outlook, pup.optional.bundleinstaller.a, pup.optional.domalq, pup.optional.softonic.a, pup.optional.vittalia, verschickt, versendet


« MySearchDial | Blau unterstrichener Text im Browser (rrsavings, rrfilter) »


Ähnliche Themen: Emails mit Link werden verschickt: AOL


  1. Trojaner verschickt Spam-Emails
    Log-Analyse und Auswertung - 05.11.2015 (3)
  2. Outlook für Mac / Emails werdenan mein gesamtes Adressbuch mit Link verschickt
    Alles rund um Mac OSX & Linux - 05.10.2015 (5)
  3. Emails mit Virusanhang von eigener Adresse verschickt
    Plagegeister aller Art und deren Bekämpfung - 29.01.2015 (13)
  4. Windows 7: Komische Emails werden verschickt
    Log-Analyse und Auswertung - 16.06.2014 (11)
  5. Rechner verschickt emails
    Plagegeister aller Art und deren Bekämpfung - 19.04.2014 (21)
  6. Ungewünschte Emails an Kontakte werden verschickt
    Plagegeister aller Art und deren Bekämpfung - 09.11.2012 (19)
  7. Yahoo verschickt Emails mit Link - PC verseucht?
    Plagegeister aller Art und deren Bekämpfung - 26.06.2012 (30)
  8. Hotmail verschickt automatisch emails
    Plagegeister aller Art und deren Bekämpfung - 22.06.2012 (1)
  9. Trojaner verschickt Emails?
    Log-Analyse und Auswertung - 06.12.2011 (25)
  10. GMX Account verschickt Emails an mir unbekannte Adressen
    Plagegeister aller Art und deren Bekämpfung - 02.12.2011 (21)
  11. Account hat spam-emails verschickt
    Log-Analyse und Auswertung - 21.11.2011 (11)
  12. Rechner verschickt selbsständig emails
    Log-Analyse und Auswertung - 06.08.2011 (1)
  13. EMails werden von Fremden verschickt
    Plagegeister aller Art und deren Bekämpfung - 23.05.2011 (13)
  14. Hotmail verschickt Viagra Emails
    Plagegeister aller Art und deren Bekämpfung - 01.05.2011 (0)
  15. Msn-Virus/ Nachrichten werden selbstständig mit einem link verschickt.
    Plagegeister aller Art und deren Bekämpfung - 22.02.2010 (0)
  16. Spam Emails werden in meinem Namen verschickt.
    Log-Analyse und Auswertung - 31.05.2009 (5)
  17. Virus verschickt Emails?
    Archiv - 07.01.2003 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Emails mit Link werden verschickt: AOL - Sooo, MwBt: Code: Alles auswählen Aufklappen ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 18.04.2014 Suchlauf-Zeit: 20:11:39 Logdatei: MWBT.txt Administrator: Ja Version: 2.00.1.1004 Malware Datenbank: v2014.04.18.06 Rootkit Datenbank: v2014.03.27.01 Lizenz: Kostenlos Malware - Emails mit Link werden verschickt: AOL...
Archiv
Du betrachtest: Emails mit Link werden verschickt: AOL auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132