| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Sparkasse SicherheitscontrolleWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
12.05.2014, 14:44
| #1 |
| |  Sparkasse Sicherheitscontrolle Hallo, Ich habe seit paar Tagen das Problem, dass wenn mich beim Banking der Sparkasse mit Kontonummer und Pin einloggen eine Seite erscheint, wo ein Sicherheitskontrolle durchgeführt wird, welche mehrere Sekunden dauern soll, aber bei mir dauert es unendlich lang, dann erscheint ein Hinweiss, dass sich wahrscheinlich bei meinem Computer in letzter Zeit einige Veränderungen ergeben haben. Ich solle eine TAN eingeben, um zu bestätigen, dass es mein Computer ist, damit mir der Zugang gewährt wird. Stecken Sie Ihre Karte in den TAN-Generator und drücken Sie die Taste TAN. Geben Sie den Startcode 88141453 ein und drücken Sie die Taste OK. Geben Sie die 10F1094000 ein und drücken Sie die Taste OK. Geben Sie die 3595,60 ein und drücken Sie die Taste OK Zur Bestätigung des Auftrages bitte die im TAN-Generator angezeigte TAN eingeben und absenden (Kartennummer xxxxxxxx): das steht da genau. |
|
12.05.2014, 15:51
| #2 |
| /// the machine /// TB-Ausbilder    | Sparkasse Sicherheitscontrolle hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
12.05.2014, 17:15
| #3 | |
| | Sparkasse Sicherheitscontrolle FRST
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01
Ran by Saturn (administrator) on ALPER-PC on 12-05-2014 18:09:57
Running from C:\Users\Saturn\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5PFANW5U
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\osk.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-06-22] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-04-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes' Anti-Malware <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-950273402-164745678-1594940136-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473464 2014-03-17] (TomTom)
HKU\S-1-5-21-950273402-164745678-1594940136-1001\...\Run: [ijglep] => regsvr32.exe "C:\ProgramData\ijglep.dat"
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [226920 2011-03-31] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [193128 2011-03-31] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {5a15c091-f3c2-4c8f-8964-e3434a2a4a95} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^ZJ^xpt251^YY^de&si=begin-download&ptb=645EE94D-B4B4-46AE-ABD9-D69FADE68BFD&ind=2013051213&n=77fcb94d&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {C0FAF04C-24E1-4133-8D78-F0FFB1CD1C1D} URL = hxxp://www.google.at/search?q={searchTerms}&rlz=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {5a15c091-f3c2-4c8f-8964-e3434a2a4a95} URL =
SearchScopes: HKCU - {C0FAF04C-24E1-4133-8D78-F0FFB1CD1C1D} URL = hxxp://www.google.at/search?q={searchTerms}&rlz=
SearchScopes: HKCU - {C9BFD39A-84E3-494D-AE6D-41ED7913625D} URL = hxxp://www.google.de/#output=search&sclient=psy-ab&q={searchTerms}&oq={searchTerms}&gs_l=hp.12..0l4.1888.3865.0.6336.4.4.0.0.0.0.93.360.4.4.0....0...1c.1.19.psy-ab.G8NMYofNwmU&pbx=1&bav=on.2,or.r_qf.&bvm=bv.48705608,d.Yms&fp=dc15fe3d09052815&biw=1366&bih=673
SearchScopes: HKCU - {F5BEC497-23EC-4FFC-9895-35709C57B978} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A012DE80032&p={SearchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {a4c2fb10-84c3-44eb-9f9e-860fa1d9a797} - No File
BHO-x32: No Name - {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} - No File
Toolbar: HKLM - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} - No File
Toolbar: HKLM-x32 - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} - No File
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {3A5EF8E2-34B2-4B01-962B-FF430245CCA4} hxxp://192.168.2.104/IPCamPluginDM.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Saturn\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Shopping Suggestion) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbpjlaagejfakeobljhgplbgklgemll [2014-01-13]
CHR HKLM-x32\...\Chrome\Extension: [okfhiodnpcnnnpgbjbhfebjnbagmfhab] - C:\ProgramData\WRData\pkg\lpchrome.crx [2013-07-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-04-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-04-08] (Avira Operations GmbH & Co. KG)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-12 18:09 - 2014-05-12 18:09 - 00000000 ____D () C:\FRST
2014-05-12 16:44 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-05-12 16:37 - 2014-05-12 16:44 - 00012256 _____ () C:\Windows\IE11_main.log
2014-05-12 15:23 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-05-12 15:21 - 2014-05-12 15:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-12 15:21 - 2014-05-12 15:21 - 00001066 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-12 15:21 - 2014-05-12 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-05-12 15:21 - 2014-05-12 15:21 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-05-12 15:21 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 15:21 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 15:21 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-12 14:45 - 2014-05-12 17:34 - 01396215 _____ () C:\Windows\WindowsUpdate.log
2014-05-12 14:30 - 2014-05-12 14:45 - 00000000 ____D () C:\Windows\erdnt
2014-05-12 14:11 - 2014-05-12 14:11 - 01325827 _____ () C:\Users\Saturn\Downloads\2-adwcleaner
2014-05-12 13:50 - 2014-05-12 13:51 - 00000000 ____D () C:\ProgramData\Max Secure
2014-05-12 13:34 - 2014-05-12 13:34 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\GetRightToGo
2014-05-12 12:12 - 2014-05-12 17:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-12 12:12 - 2014-05-12 12:12 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-12 12:12 - 2014-05-12 12:12 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-12 12:12 - 2014-05-12 12:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-12 12:08 - 2014-05-12 12:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-12 12:08 - 2014-05-12 12:08 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-12 12:08 - 2014-05-12 12:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-12 12:07 - 2014-05-12 12:07 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-12 12:07 - 2014-05-12 12:07 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-12 12:07 - 2014-05-12 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-10 10:10 - 2014-05-10 10:10 - 00000000 ____D () C:\ProgramData\SetupTemp_1
2014-05-10 10:10 - 2014-05-10 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3200 series
2014-05-10 10:10 - 2014-05-10 10:10 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool
2014-05-10 10:09 - 2014-05-10 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3200 series Benutzerregistrierung
2014-05-10 09:49 - 2014-05-10 09:49 - 00000000 ____D () C:\Program Files\Canon
2014-05-10 09:48 - 2014-05-10 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3200 series Manual
2014-05-09 10:15 - 2014-05-12 12:07 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-09 10:15 - 2014-05-12 12:07 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-09 10:15 - 2014-05-09 10:15 - 00000000 ____D () C:\Program Files\Java
2014-05-09 09:58 - 2014-05-09 09:58 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\TrojanHunter
2014-05-09 09:56 - 2014-05-09 09:59 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.5
2014-05-09 09:56 - 2014-05-09 09:56 - 00059392 ____R () C:\Windows\SysWOW64\streamhlp.dll
2014-05-08 14:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-08 14:22 - 2014-05-12 14:24 - 00000000 ____D () C:\AdwCleaner
2014-05-06 15:37 - 2014-05-12 15:48 - 00000000 ____D () C:\ProgramData\a2snbz.cpp
2014-04-30 09:47 - 2014-04-30 09:47 - 00000000 _____ () C:\Users\Saturn\Desktop\Dr Grünholz, Muzaffer, 01.07., 9.30uhr.txt
2014-04-30 09:25 - 2014-04-30 09:25 - 00000000 _____ () C:\Users\Saturn\Desktop\HNO, Muzaffer, 20.05., 11.10 uhr.txt
2014-04-30 09:24 - 2014-04-30 09:24 - 00000000 _____ () C:\Users\Saturn\Desktop\Dr Caspers, Muzaffer + Ediz, 03.06., 16 Uhr.txt
2014-04-18 16:03 - 2014-04-18 16:03 - 00000000 _____ () C:\Windows\SysWOW64\shoDCEC.tmp
==================== One Month Modified Files and Folders =======
2014-05-12 18:09 - 2014-05-12 18:09 - 00000000 ____D () C:\FRST
2014-05-12 17:48 - 2014-05-12 12:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-12 17:36 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-12 17:36 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-12 17:34 - 2014-05-12 14:45 - 01396215 _____ () C:\Windows\WindowsUpdate.log
2014-05-12 17:31 - 2012-05-11 13:32 - 00000000 ____D () C:\ProgramData\clear.fi
2014-05-12 17:29 - 2013-12-07 16:33 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-12 17:28 - 2013-04-30 14:22 - 00046704 _____ () C:\Windows\setupact.log
2014-05-12 17:28 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-12 17:18 - 2013-12-07 16:33 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-12 16:58 - 2013-02-07 14:01 - 00224250 _____ () C:\Windows\PFRO.log
2014-05-12 16:55 - 2013-08-24 14:36 - 01649680 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-12 16:55 - 2013-06-24 13:38 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-05-12 16:55 - 2012-04-29 00:54 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-05-12 16:55 - 2012-04-29 00:54 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-05-12 16:51 - 2009-07-14 07:13 - 01643880 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-12 16:44 - 2014-05-12 16:37 - 00012256 _____ () C:\Windows\IE11_main.log
2014-05-12 16:27 - 2013-07-16 14:05 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-12 16:27 - 2011-08-12 09:12 - 00000000 ____D () C:\ProgramData\Skype
2014-05-12 15:48 - 2014-05-06 15:37 - 00000000 ____D () C:\ProgramData\a2snbz.cpp
2014-05-12 15:22 - 2014-05-12 15:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-12 15:21 - 2014-05-12 15:21 - 00001066 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-12 15:21 - 2014-05-12 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-05-12 15:21 - 2014-05-12 15:21 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-05-12 15:21 - 2013-12-11 11:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-12 14:48 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-12 14:45 - 2014-05-12 14:30 - 00000000 ____D () C:\Windows\erdnt
2014-05-12 14:41 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-12 14:24 - 2014-05-08 14:22 - 00000000 ____D () C:\AdwCleaner
2014-05-12 14:12 - 2012-05-10 13:42 - 00060816 _____ () C:\Users\Saturn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-12 14:12 - 2009-07-14 06:45 - 00291752 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-12 14:11 - 2014-05-12 14:11 - 01325827 _____ () C:\Users\Saturn\Downloads\2-adwcleaner
2014-05-12 13:51 - 2014-05-12 13:50 - 00000000 ____D () C:\ProgramData\Max Secure
2014-05-12 13:34 - 2014-05-12 13:34 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\GetRightToGo
2014-05-12 12:13 - 2012-05-14 12:21 - 00000000 ____D () C:\Users\Saturn\AppData\Local\Adobe
2014-05-12 12:12 - 2014-05-12 12:12 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-12 12:12 - 2014-05-12 12:12 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-12 12:12 - 2014-05-12 12:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-12 12:11 - 2012-05-12 12:23 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\Skype
2014-05-12 12:08 - 2014-05-12 12:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-12 12:08 - 2014-05-12 12:08 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-12 12:08 - 2014-05-12 12:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-12 12:07 - 2014-05-12 12:07 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-05-12 12:07 - 2014-05-12 12:07 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-05-12 12:07 - 2014-05-12 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-12 12:07 - 2014-05-09 10:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-05-12 12:07 - 2014-05-09 10:15 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-05-12 12:01 - 2013-07-14 13:08 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-05-12 12:01 - 2011-08-12 09:32 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-05-11 17:10 - 2013-04-30 11:11 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-11 16:10 - 2011-08-12 09:10 - 00000000 ____D () C:\Program Files (x86)\Acer Games
2014-05-10 15:52 - 2011-08-12 09:10 - 00000000 ____D () C:\ProgramData\WildTangent
2014-05-10 15:52 - 2011-08-12 09:10 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-05-10 15:35 - 2013-04-30 11:11 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-05-10 10:12 - 2013-12-22 11:44 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-10 10:10 - 2014-05-10 10:10 - 00000000 ____D () C:\ProgramData\SetupTemp_1
2014-05-10 10:10 - 2014-05-10 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3200 series
2014-05-10 10:10 - 2014-05-10 10:10 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool
2014-05-10 10:10 - 2013-08-19 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-05-10 10:10 - 2013-08-18 14:26 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-05-10 10:10 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-05-10 10:09 - 2014-05-10 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3200 series Benutzerregistrierung
2014-05-10 09:56 - 2013-12-22 11:55 - 00001985 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk
2014-05-10 09:56 - 2013-08-18 14:39 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-05-10 09:49 - 2014-05-10 09:49 - 00000000 ____D () C:\Program Files\Canon
2014-05-10 09:48 - 2014-05-10 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3200 series Manual
2014-05-10 09:48 - 2013-12-22 11:47 - 00002320 _____ () C:\Users\Public\Desktop\Canon MG3200 series Online-Handbuch.lnk
2014-05-10 09:38 - 2013-08-18 14:53 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\Canon
2014-05-10 09:13 - 2013-12-07 16:33 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 09:13 - 2013-12-07 16:33 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-09 18:19 - 2012-05-10 13:42 - 00000000 ____D () C:\Users\Saturn
2014-05-09 18:18 - 2012-05-10 13:42 - 00000000 ____D () C:\Users\Saturn\AppData\Local\PowerCinema
2014-05-09 18:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-09 10:15 - 2014-05-09 10:15 - 00000000 ____D () C:\Program Files\Java
2014-05-09 09:59 - 2014-05-09 09:56 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.5
2014-05-09 09:58 - 2014-05-09 09:58 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\TrojanHunter
2014-05-09 09:56 - 2014-05-09 09:56 - 00059392 ____R () C:\Windows\SysWOW64\streamhlp.dll
2014-05-08 14:23 - 2012-05-10 13:44 - 00001132 _____ () C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-08 14:23 - 2012-05-10 13:44 - 00000949 _____ () C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-05-07 17:08 - 2012-05-10 13:44 - 00000000 ___RD () C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-06 19:10 - 2012-10-29 00:09 - 00000000 ____D () C:\Users\Saturn\AppData\Roaming\SFBot
2014-05-06 19:09 - 2013-12-22 12:15 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-05-06 19:06 - 2013-07-14 13:12 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-30 09:47 - 2014-04-30 09:47 - 00000000 _____ () C:\Users\Saturn\Desktop\Dr Grünholz, Muzaffer, 01.07., 9.30uhr.txt
2014-04-30 09:25 - 2014-04-30 09:25 - 00000000 _____ () C:\Users\Saturn\Desktop\HNO, Muzaffer, 20.05., 11.10 uhr.txt
2014-04-30 09:24 - 2014-04-30 09:24 - 00000000 _____ () C:\Users\Saturn\Desktop\Dr Caspers, Muzaffer + Ediz, 03.06., 16 Uhr.txt
2014-04-26 15:34 - 2012-06-27 11:30 - 00000000 ____D () C:\Users\Saturn\AppData\Local\Microsoft Games
2014-04-26 15:25 - 2011-08-12 09:10 - 00002662 ____N () C:\Users\Public\Desktop\WildTangent Games App - acer.lnk
2014-04-26 15:25 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-04-25 19:24 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-20 18:00 - 2012-10-29 15:20 - 00000000 ____D () C:\Users\Saturn\Desktop\SFBot_v2.1.0
2014-04-20 17:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-18 16:03 - 2014-04-18 16:03 - 00000000 _____ () C:\Windows\SysWOW64\shoDCEC.tmp
Files to move or delete:
====================
C:\ProgramData\zj7bmqmqfr.bxx
C:\ProgramData\zj7bmqmqfr.fvv
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-10 16:20
==================== End Of Log ============================
--- --- --- Addition Zitat:
|
|
13.05.2014, 12:30
| #4 |
| /// the machine /// TB-Ausbilder | Sparkasse Sicherheitscontrolle Unsere Tools immer auf dem Desktop speichern, NIEMALS einfach aus ausführen aus einem Temp-Ordner klicken! FRST löschen, neu laden, auf dem Desktop speichern! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes' Anti-Malware <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Revo Uninstaller - Download - Filepony Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION Mit Revo auch Moderat die Reste entfernen lassen. Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
14.05.2014, 08:44
| #5 |
| | Sparkasse Sicherheitscontrolle Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014 01 Ran by Saturn at 2014-05-13 13:49:00 Run:1 Running from C:\Users\Saturn\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\McAfee <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes' Anti-Malware <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION ***************** HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. ==== End of Fixlog ==== Combofix.exe hat meinen Rechner in einen Zustand versetzt, der knapp 80 Windows-Updates benötigt, deren Konfiguratio jedoch immer Fehler aufweist. Nun habe ich das System auf einen früher Zeitpunkt wiederhergestellen. Combofix.exe hat meinen Rechner in einen Zustand versetzt, der knapp 80 Windows-Updates benötigt, deren Konfiguratio jedoch immer Fehler aufweist. Nun habe ich das System auf einen früher Zeitpunkt wiederhergestellen. |
|
15.05.2014, 07:25
| #6 |
| /// the machine /// TB-Ausbilder | Sparkasse Sicherheitscontrolle Geht das ein wenig genauer? Gibt es ein Logfile von Combofix? Revo gemacht?
__________________ --> Sparkasse Sicherheitscontrolle |
|
| Themen zu Sparkasse Sicherheitscontrolle |
| angezeigte, banking, code, computer, dauert, durchgeführt, eingebe, einloggen, erscheint, hinweiss, karte, karten, konto, problem, seite, sekunden, sparkasse, tagen, tan, taste, troll, unendlich, veränderungen, wahrscheinlich, zugang |
WARNUNG an die MITLESER: 
Linear-Darstellung
