Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows7, Neuinstallation, unerwünschte Programme nicht löschbar

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 22.06.2014, 08:45   #1
AxelWartburg
 
Windows7, Neuinstallation, unerwünschte Programme nicht löschbar - Standard

Windows7, Neuinstallation, unerwünschte Programme nicht löschbar



Was war das noch mal?
Farbar?

Und wie geht das noch mal? Hab ich das schon mal gemacht? Kommt mir alles so fremd vor. Peinliche...

Datei auf USB Stick laden, hab ich irgendwo gelesen.
Doch wie bekomme ich die dahin? Wird doch in den Download-Ordner geladen.

Dann den Rechner im abgesicherten Modus starten, las ich auch.
Wie krieg ich das hin?

Ich hab die nu einfach in den Downloadordner gepackt und dann den scan gemacht:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-06-2014 01
Ran by Axel Wartburg (administrator) on AXELWARTBURG-PC on 22-06-2014 09:58:26
Running from C:\Users\Axel Wartburg\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Spigot, Inc.) C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [IObit Malware Fighter] => C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [1601856 2014-05-23] (IObit)
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [SearchProtection] => C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.EXE [847208 2014-06-18] (Spigot, Inc.)
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [Browser Extensions] => C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\CouponsHelper.exe [961384 2014-06-18] (Spigot, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
SearchScopes: HKCU - {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
BHO: Browser Extensions - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\Coupons.dll (Spigot, Inc.)
BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=800236&p=
FF Homepage: https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ff
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ads Removal - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\adremoveext@adremoveext.net [2014-06-22]
FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\faststartff@gmail.com [2014-06-20]
FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saamazon@mybrowserbar.com [2014-06-22]
FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saebay@mybrowserbar.com [2014-06-22]
FF Extension: Slick Savings - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\savingsslider@mybrowserbar.com [2014-06-22]
FF Extension: No Name - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\staged [2014-06-22]
FF Extension: Start Page - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-06-22]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com
FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com [2014-06-20]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
S2 GlobalUpdater; C:\Program Files\Common Files\IMGUpdater\IMGUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-05-09] (Avira Operations GmbH & Co. KG)
R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-05-09] (Avira GmbH)
R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\AXELWA~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz134; \??\C:\Users\AXELWA~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-22 09:58 - 2014-06-22 09:58 - 00008518 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:53 - 2014-06-22 09:53 - 01070592 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-22 00:35 - 2014-06-22 00:36 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions
2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:45 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2014-06-21 22:06 - 2014-06-21 22:11 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:32 - 2014-06-20 17:36 - 00000000 ____D () C:\rei
2014-06-20 17:29 - 2014-06-20 17:36 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe
2014-06-20 13:42 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-06-18 07:49 - 2014-06-18 07:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 22:21 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 22:21 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 22:21 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 22:21 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 22:21 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 22:21 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 22:21 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 22:21 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 22:21 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 22:21 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 22:21 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 22:21 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 22:21 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 22:21 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 22:21 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 22:21 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 22:21 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 22:21 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 22:21 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 22:21 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 22:21 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 22:21 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 22:21 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 22:21 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 22:21 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 22:21 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 22:21 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 22:21 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 22:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 22:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-12 22:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 22:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 22:09 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 22:09 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-11 16:03 - 2014-06-12 01:51 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-08 19:26 - 2014-06-21 21:40 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:11 - 2014-06-08 16:23 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother
2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe
2014-05-29 10:11 - 2014-06-12 22:41 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-29 10:11 - 2014-06-12 22:39 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList
2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-27 15:35 - 2014-05-27 15:34 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother
2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET
2014-05-27 09:35 - 2014-05-27 09:46 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work
2014-05-25 10:35 - 2012-03-06 19:14 - 00000405 _____ () C:\Users\Axel Wartburg\Documents\signatur.txt
2014-05-25 10:08 - 2014-06-01 15:53 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-05-25 10:08 - 2014-05-25 10:35 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24
2014-05-25 10:07 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014
2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 19:00 - 2014-06-21 21:48 - 00000000 ____D () C:\AdwCleaner
2014-05-24 18:25 - 2014-06-07 18:09 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-24 18:24 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-24 18:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-24 14:07 - 2014-05-24 14:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-23 11:14 - 2014-05-23 11:14 - 00016796 _____ () C:\ComboFix.txt
2014-05-23 10:48 - 2014-05-23 11:14 - 00000000 ____D () C:\Qoobox
2014-05-23 10:48 - 2014-05-23 11:13 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 10:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-23 10:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-23 10:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-23 10:35 - 2014-05-23 10:35 - 05200426 ____R (Swearware) C:\Users\Axel Wartburg\Desktop\ComboFix.exe
2014-05-23 09:43 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-05-23 09:43 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-23 09:43 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-23 09:43 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-23 09:43 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-23 09:43 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-23 09:43 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-23 09:43 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-05-23 09:43 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-23 09:43 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-05-23 09:42 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-05-23 09:40 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

==================== One Month Modified Files and Folders =======

2014-06-22 09:58 - 2014-06-22 09:58 - 00008518 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:58 - 2014-05-21 14:28 - 00000000 ____D () C:\FRST
2014-06-22 09:54 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-22 09:53 - 2014-06-22 09:53 - 01070592 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 09:52 - 2009-07-14 06:39 - 00028505 _____ () C:\Windows\setupact.log
2014-06-22 09:44 - 2014-05-21 08:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-22 09:29 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-22 09:29 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-22 09:21 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-22 00:56 - 2014-05-20 21:35 - 01161037 _____ () C:\Windows\WindowsUpdate.log
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-22 00:45 - 2014-06-22 00:34 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:36 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions
2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection
2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2014-06-21 22:11 - 2014-06-21 22:06 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt
2014-06-21 21:50 - 2010-11-20 23:48 - 00254310 _____ () C:\Windows\PFRO.log
2014-06-21 21:48 - 2014-05-24 19:00 - 00000000 ____D () C:\AdwCleaner
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:40 - 2014-06-08 19:26 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-21 21:40 - 2014-05-20 22:45 - 00001164 _____ () C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-21 21:28 - 2014-05-20 22:45 - 00000000 ____D () C:\Users\Axel Wartburg
2014-06-21 21:21 - 2014-05-21 13:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-21 21:21 - 2014-05-21 08:47 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IrfanView
2014-06-21 21:21 - 2014-05-21 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-21 21:21 - 2014-05-21 00:27 - 00000000 ____D () C:\Program Files\Avira
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-06-21 21:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-06-21 20:33 - 2014-05-21 17:47 - 00000000 ____D () C:\Users\Beate
2014-06-21 11:23 - 2014-05-21 00:27 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 18:48 - 2014-05-21 00:32 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira
2014-06-20 18:26 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:36 - 2014-06-20 17:32 - 00000000 ____D () C:\rei
2014-06-20 17:36 - 2014-06-20 17:29 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe
2014-06-19 10:13 - 2014-05-20 23:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 07:50 - 2014-06-18 07:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-15 21:37 - 2014-05-21 09:26 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\vlc
2014-06-14 19:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-13 11:28 - 2014-05-22 21:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 22:41 - 2014-05-29 10:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 22:39 - 2014-05-29 10:11 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-12 01:51 - 2014-06-11 16:03 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-11 10:08 - 2014-05-20 23:42 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Thunderbird
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:23 - 2014-06-08 16:11 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-06-08 10:48 - 2014-06-12 22:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-12 22:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 18:09 - 2014-05-24 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 15:53 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-05-30 11:18 - 2014-06-12 22:21 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:02 - 2014-06-12 22:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 11:02 - 2014-06-12 22:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 10:44 - 2014-06-12 22:21 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 10:43 - 2014-06-12 22:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 10:42 - 2014-06-12 22:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 22:21 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 10:34 - 2014-06-12 22:21 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 22:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 10:30 - 2014-06-12 22:21 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 10:28 - 2014-06-12 22:21 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 10:28 - 2014-06-12 22:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 10:27 - 2014-06-12 22:21 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 10:21 - 2014-06-12 22:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 10:16 - 2014-06-12 22:21 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 22:21 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 22:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:04 - 2014-06-12 22:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 22:21 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 09:57 - 2014-06-12 22:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 09:56 - 2014-06-12 22:21 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 09:54 - 2014-06-12 22:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 22:21 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 22:21 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 09:40 - 2014-06-12 22:21 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:21 - 2014-06-12 22:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:15 - 2014-06-12 22:21 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:13 - 2014-06-12 22:21 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother
2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe
2014-05-29 11:57 - 2014-05-21 17:54 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\Adobe
2014-05-27 21:22 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-27 19:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList
2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-27 15:34 - 2014-05-27 15:35 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother
2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET
2014-05-27 09:46 - 2014-05-27 09:35 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work
2014-05-25 10:35 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24
2014-05-25 10:08 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014
2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-24 14:12 - 2014-05-24 14:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-24 12:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-24 09:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-05-23 11:14 - 2014-05-23 11:14 - 00016796 _____ () C:\ComboFix.txt
2014-05-23 11:14 - 2014-05-23 10:48 - 00000000 ____D () C:\Qoobox
2014-05-23 11:14 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-05-23 11:14 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-05-23 11:13 - 2014-05-23 10:48 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 11:11 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-05-23 10:35 - 2014-05-23 10:35 - 05200426 ____R (Swearware) C:\Users\Axel Wartburg\Desktop\ComboFix.exe

Some content of TEMP:
====================
C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe
C:\Users\Axel Wartburg\AppData\Local\temp\BackupSetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\optprosetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\Quarantine.exe
C:\Users\Axel Wartburg\AppData\Local\temp\ReimagePackage.exe
C:\Users\Beate\AppData\Local\temp\avgnt.exe
C:\Users\Beate\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-18 08:42

==================== End Of Log ============================
         
--- --- ---


Hoffe es reicht. ;o)

Herzliche Grüße

Geändert von AxelWartburg (22.06.2014 um 09:00 Uhr)

Antwort

Themen zu Windows7, Neuinstallation, unerwünschte Programme nicht löschbar
anyprotect, association, newtab, pc infiziert, pc speed maximizer, pup.optional.bundleinstaller, pup.optional.bundleinstaller.a, pup.optional.crossrider.a, pup.optional.domaiq, pup.optional.downloader, pup.optional.elex.a, pup.optional.faststart.a, pup.optional.freesofttoday.a, pup.optional.genericext.a, pup.optional.iepluginservice.a, pup.optional.imgupdater.a, pup.optional.iminent.a, pup.optional.newplayer.a, pup.optional.regcleanpro, pup.optional.savingsslider.a, pup.optional.skytech.a, pup.optional.solimba, pup.optional.spigot.a, pup.optional.suptab.a, pup.optional.wpm.a, tr/crypt.xpack.gen, tr/crypt.xpack.gen8, vcredist




Ähnliche Themen: Windows7, Neuinstallation, unerwünschte Programme nicht löschbar


  1. Firefox: unerwünschte Werbebanner überall,öffnet selbstständig neue Tabs z.B.zu ReimageRepair Windows7
    Plagegeister aller Art und deren Bekämpfung - 18.10.2015 (26)
  2. Internetseiten gehen von alleine auf, Programme nicht löschbar
    Plagegeister aller Art und deren Bekämpfung - 22.09.2015 (20)
  3. Windows7 unerwünschte Programme SlimCleanerPlus
    Plagegeister aller Art und deren Bekämpfung - 16.07.2015 (11)
  4. Netbook mit windows7 arbeitet sehr langsam - Neuinstallation von software nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 13.04.2015 (19)
  5. Windows 7 Pro: Unerwünschte Programme in der Taskleiste
    Log-Analyse und Auswertung - 08.08.2014 (5)
  6. unerwünschte Programme / Adware? in der Taskleiste
    Log-Analyse und Auswertung - 20.06.2014 (1)
  7. Windows7: unerwünschte Werbung; Absturz des System.
    Log-Analyse und Auswertung - 17.03.2014 (8)
  8. Virenfreie Neuinstallation Windows7
    Plagegeister aller Art und deren Bekämpfung - 03.03.2014 (3)
  9. BOO/Tdss.O auch nach Windows7-Neuinstallation noch vorhanden
    Plagegeister aller Art und deren Bekämpfung - 04.11.2013 (14)
  10. Verdacht auf unerwünschte Programme
    Plagegeister aller Art und deren Bekämpfung - 14.07.2013 (53)
  11. Programme nicht löschbar - Delta Search evtl. nicht sicher entfernt.
    Plagegeister aller Art und deren Bekämpfung - 26.05.2013 (17)
  12. mein Browserdienst arbeitet nicht korekt und wenn ich Musik höre kommt ein zwischensound was kann das sein ein Virus unerwünschte Programme?
    Plagegeister aller Art und deren Bekämpfung - 17.04.2013 (6)
  13. Avira meldet 2 unerwünschte Programme
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (3)
  14. HKCU/HKLM programme nicht löschbar
    Log-Analyse und Auswertung - 19.01.2011 (1)
  15. Ordner "Internet Explorer Updater" unter Programme, nicht löschbar, vermutlich Malware
    Log-Analyse und Auswertung - 13.07.2010 (23)
  16. Habe "TrojanDownloader:Win32/Renos.jm" auf Rechner.Trotz Programme nicht löschbar
    Plagegeister aller Art und deren Bekämpfung - 17.02.2010 (31)
  17. Unerwünschte Weiterleitungen, Programme nicht ausführbar etc.
    Log-Analyse und Auswertung - 20.07.2009 (1)

Zum Thema Windows7, Neuinstallation, unerwünschte Programme nicht löschbar - Was war das noch mal? Farbar? Und wie geht das noch mal? Hab ich das schon mal gemacht? Kommt mir alles so fremd vor. Peinliche... Datei auf USB Stick laden, - Windows7, Neuinstallation, unerwünschte Programme nicht löschbar...
Archiv
Du betrachtest: Windows7, Neuinstallation, unerwünschte Programme nicht löschbar auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.