![]() |
|
Log-Analyse und Auswertung: Windows7, Neuinstallation, unerwünschte Programme nicht löschbarWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
![]() ![]() | ![]() Windows7, Neuinstallation, unerwünschte Programme nicht löschbar Was war das noch mal? Farbar? Und wie geht das noch mal? Hab ich das schon mal gemacht? Kommt mir alles so fremd vor. Peinliche... Datei auf USB Stick laden, hab ich irgendwo gelesen. Doch wie bekomme ich die dahin? Wird doch in den Download-Ordner geladen. Dann den Rechner im abgesicherten Modus starten, las ich auch. Wie krieg ich das hin? Ich hab die nu einfach in den Downloadordner gepackt und dann den scan gemacht: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-06-2014 01 Ran by Axel Wartburg (administrator) on AXELWARTBURG-PC on 22-06-2014 09:58:26 Running from C:\Users\Axel Wartburg\Downloads Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Spigot, Inc.) C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.exe (IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe (Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [IObit Malware Fighter] => C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [1601856 2014-05-23] (IObit) HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [SearchProtection] => C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.EXE [847208 2014-06-18] (Spigot, Inc.) HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [Browser Extensions] => C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\CouponsHelper.exe [961384 2014-06-18] (Spigot, Inc.) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ie SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms} SearchScopes: HKCU - {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms} BHO: Browser Extensions - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\Coupons.dll (Spigot, Inc.) BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: Yahoo! FF SelectedSearchEngine: Yahoo! FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=800236&p= FF Homepage: https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ff FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\searchplugins\yahoo_ff.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Ads Removal - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\adremoveext@adremoveext.net [2014-06-22] FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\faststartff@gmail.com [2014-06-20] FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saamazon@mybrowserbar.com [2014-06-22] FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saebay@mybrowserbar.com [2014-06-22] FF Extension: Slick Savings - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\savingsslider@mybrowserbar.com [2014-06-22] FF Extension: No Name - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\staged [2014-06-22] FF Extension: Start Page - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-06-22] FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com [2014-06-20] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG) R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.) S2 GlobalUpdater; C:\Program Files\Common Files\IMGUpdater\IMGUpdater.exe [X] ==================== Drivers (Whitelisted) ==================== R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-05-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-05-09] (Avira Operations GmbH & Co. KG) R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit) R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-05-09] (Avira GmbH) R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\AXELWA~1\AppData\Local\Temp\catchme.sys [X] S3 cpuz134; \??\C:\Users\AXELWA~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-22 09:58 - 2014-06-22 09:58 - 00008518 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt 2014-06-22 09:53 - 2014-06-22 09:53 - 01070592 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe 2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-06-22 00:35 - 2014-06-22 00:36 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions 2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection 2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit 2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\ProgramData\IObit 2014-06-22 00:34 - 2014-06-22 00:45 - 00000000 ____D () C:\Program Files\IObit 2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google 2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter 2014-06-21 22:06 - 2014-06-21 22:11 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe 2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt 2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe 2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe 2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager 2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager 2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager 2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com 2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB 2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe 2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair 2014-06-20 17:32 - 2014-06-20 17:36 - 00000000 ____D () C:\rei 2014-06-20 17:29 - 2014-06-20 17:36 - 00000155 _____ () C:\Windows\Reimage.ini 2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe 2014-06-20 13:42 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe 2014-06-18 07:49 - 2014-06-18 07:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-12 22:21 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-12 22:21 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-12 22:21 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-12 22:21 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-12 22:21 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-12 22:21 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-12 22:21 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-12 22:21 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-12 22:21 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-12 22:21 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-12 22:21 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-12 22:21 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-12 22:21 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-12 22:21 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-12 22:21 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-12 22:21 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-12 22:21 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-12 22:21 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-12 22:21 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-12 22:21 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-12 22:21 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-12 22:21 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-12 22:21 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-12 22:21 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-12 22:21 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-12 22:21 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-12 22:21 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-12 22:21 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-12 22:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-12 22:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-12 22:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-12 22:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 22:09 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-12 22:09 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-12 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe 2014-06-11 16:03 - 2014-06-12 01:51 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-06-08 19:26 - 2014-06-21 21:40 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-06-08 16:11 - 2014-06-08 16:23 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe 2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother 2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe 2014-05-29 10:11 - 2014-06-12 22:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-29 10:11 - 2014-06-12 22:39 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList 2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList 2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe 2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe 2014-05-27 15:35 - 2014-05-27 15:34 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother 2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET 2014-05-27 09:35 - 2014-05-27 09:46 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work 2014-05-25 10:35 - 2012-03-06 19:14 - 00000405 _____ () C:\Users\Axel Wartburg\Documents\signatur.txt 2014-05-25 10:08 - 2014-06-01 15:53 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln 2014-05-25 10:08 - 2014-05-25 10:35 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit 2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat 2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik 2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24 2014-05-25 10:07 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014 2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT 2014-05-24 19:00 - 2014-06-21 21:48 - 00000000 ____D () C:\AdwCleaner 2014-05-24 18:25 - 2014-06-07 18:09 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-05-24 18:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-24 18:24 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-24 18:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-24 14:07 - 2014-05-24 14:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe 2014-05-23 11:14 - 2014-05-23 11:14 - 00016796 _____ () C:\ComboFix.txt 2014-05-23 10:48 - 2014-05-23 11:14 - 00000000 ____D () C:\Qoobox 2014-05-23 10:48 - 2014-05-23 11:13 - 00000000 ____D () C:\Windows\erdnt 2014-05-23 10:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-23 10:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-23 10:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-23 10:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-23 10:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-23 10:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-23 10:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-23 10:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-23 10:35 - 2014-05-23 10:35 - 05200426 ____R (Swearware) C:\Users\Axel Wartburg\Desktop\ComboFix.exe 2014-05-23 09:43 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-05-23 09:43 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2014-05-23 09:43 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2014-05-23 09:43 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2014-05-23 09:43 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2014-05-23 09:43 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2014-05-23 09:43 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-05-23 09:43 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-05-23 09:43 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-05-23 09:43 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-05-23 09:42 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-23 09:40 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll ==================== One Month Modified Files and Folders ======= 2014-06-22 09:58 - 2014-06-22 09:58 - 00008518 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt 2014-06-22 09:58 - 2014-05-21 14:28 - 00000000 ____D () C:\FRST 2014-06-22 09:54 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-22 09:53 - 2014-06-22 09:53 - 01070592 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe 2014-06-22 09:52 - 2009-07-14 06:39 - 00028505 _____ () C:\Windows\setupact.log 2014-06-22 09:44 - 2014-05-21 08:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-22 09:29 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-22 09:29 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-22 09:21 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-22 00:56 - 2014-05-20 21:35 - 01161037 _____ () C:\Windows\WindowsUpdate.log 2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit 2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\IObit 2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-06-22 00:45 - 2014-06-22 00:34 - 00000000 ____D () C:\Program Files\IObit 2014-06-22 00:36 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions 2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection 2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google 2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter 2014-06-21 22:11 - 2014-06-21 22:06 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe 2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt 2014-06-21 21:50 - 2010-11-20 23:48 - 00254310 _____ () C:\Windows\PFRO.log 2014-06-21 21:48 - 2014-05-24 19:00 - 00000000 ____D () C:\AdwCleaner 2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe 2014-06-21 21:40 - 2014-06-08 19:26 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-21 21:40 - 2014-05-20 22:45 - 00001164 _____ () C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe 2014-06-21 21:28 - 2014-05-20 22:45 - 00000000 ____D () C:\Users\Axel Wartburg 2014-06-21 21:21 - 2014-05-21 13:36 - 00000000 ____D () C:\ProgramData\Package Cache 2014-06-21 21:21 - 2014-05-21 08:47 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IrfanView 2014-06-21 21:21 - 2014-05-21 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-06-21 21:21 - 2014-05-21 00:27 - 00000000 ____D () C:\Program Files\Avira 2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp 2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration 2014-06-21 21:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles 2014-06-21 20:33 - 2014-05-21 17:47 - 00000000 ____D () C:\Users\Beate 2014-06-21 11:23 - 2014-05-21 00:27 - 00000000 ____D () C:\ProgramData\Avira 2014-06-20 18:48 - 2014-05-21 00:32 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira 2014-06-20 18:26 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager 2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager 2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager 2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com 2014-06-20 17:36 - 2014-06-20 17:32 - 00000000 ____D () C:\rei 2014-06-20 17:36 - 2014-06-20 17:29 - 00000155 _____ () C:\Windows\Reimage.ini 2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB 2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe 2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair 2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe 2014-06-19 10:13 - 2014-05-20 23:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-18 07:50 - 2014-06-18 07:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-15 21:37 - 2014-05-21 09:26 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\vlc 2014-06-14 19:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-06-13 11:28 - 2014-05-22 21:12 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-12 22:41 - 2014-05-29 10:11 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-12 22:39 - 2014-05-29 10:11 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe 2014-06-12 01:51 - 2014-06-11 16:03 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-06-11 10:08 - 2014-05-20 23:42 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Thunderbird 2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-06-08 16:23 - 2014-06-08 16:11 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe 2014-06-08 10:48 - 2014-06-12 22:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 10:43 - 2014-06-12 22:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-07 18:09 - 2014-05-24 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-01 15:53 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln 2014-05-30 11:18 - 2014-06-12 22:21 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-30 11:02 - 2014-06-12 22:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-30 11:02 - 2014-06-12 22:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 10:44 - 2014-06-12 22:21 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 10:43 - 2014-06-12 22:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 10:42 - 2014-06-12 22:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 10:38 - 2014-06-12 22:21 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 10:34 - 2014-06-12 22:21 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 10:33 - 2014-06-12 22:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 10:30 - 2014-06-12 22:21 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 10:28 - 2014-06-12 22:21 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 10:28 - 2014-06-12 22:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 10:27 - 2014-06-12 22:21 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 10:21 - 2014-06-12 22:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 10:16 - 2014-06-12 22:21 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 10:10 - 2014-06-12 22:21 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 10:06 - 2014-06-12 22:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 10:04 - 2014-06-12 22:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 22:21 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 09:57 - 2014-06-12 22:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 09:56 - 2014-06-12 22:21 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 09:54 - 2014-06-12 22:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 09:50 - 2014-06-12 22:21 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-30 09:49 - 2014-06-12 22:21 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 09:40 - 2014-06-12 22:21 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 09:21 - 2014-06-12 22:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 09:15 - 2014-06-12 22:21 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 09:13 - 2014-06-12 22:21 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother 2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe 2014-05-29 11:57 - 2014-05-21 17:54 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\Adobe 2014-05-27 21:22 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-05-27 19:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList 2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList 2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe 2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe 2014-05-27 15:34 - 2014-05-27 15:35 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother 2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET 2014-05-27 09:46 - 2014-05-27 09:35 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5 2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work 2014-05-25 10:35 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit 2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat 2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik 2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24 2014-05-25 10:08 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird 2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014 2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT 2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-05-24 14:12 - 2014-05-24 14:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe 2014-05-24 12:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-05-24 09:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-05-23 11:14 - 2014-05-23 11:14 - 00016796 _____ () C:\ComboFix.txt 2014-05-23 11:14 - 2014-05-23 10:48 - 00000000 ____D () C:\Qoobox 2014-05-23 11:14 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default 2014-05-23 11:14 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-05-23 11:13 - 2014-05-23 10:48 - 00000000 ____D () C:\Windows\erdnt 2014-05-23 11:11 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-05-23 10:35 - 2014-05-23 10:35 - 05200426 ____R (Swearware) C:\Users\Axel Wartburg\Desktop\ComboFix.exe Some content of TEMP: ==================== C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe C:\Users\Axel Wartburg\AppData\Local\temp\BackupSetup.exe C:\Users\Axel Wartburg\AppData\Local\temp\optprosetup.exe C:\Users\Axel Wartburg\AppData\Local\temp\Quarantine.exe C:\Users\Axel Wartburg\AppData\Local\temp\ReimagePackage.exe C:\Users\Beate\AppData\Local\temp\avgnt.exe C:\Users\Beate\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-18 08:42 ==================== End Of Log ============================ Hoffe es reicht. ;o) Herzliche Grüße Geändert von AxelWartburg (22.06.2014 um 09:00 Uhr) |
![]() |