|
Plagegeister aller Art und deren Bekämpfung: Problem mit dem InternetWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
30.05.2014, 16:50 | #16 |
| Problem mit dem InternetCode:
ATTFilter C:\Users\Maschiene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 14:09 - 2014-04-28 14:38 - 00000000 ___RD () C:\Users\Maschiene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 03:20 - 2014-05-01 04:16 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 03:03 - 2014-04-28 16:43 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 03:02 - 2014-04-28 16:43 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 21:20 - 2014-05-14 20:36 - 00002120 _____ () C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk 2014-05-14 21:09 - 2014-05-10 03:42 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games 2014-05-14 20:36 - 2014-05-14 20:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.3 2014-05-14 20:36 - 2014-05-14 20:35 - 00000000 ____D () C:\ProgramData\MTA San Andreas All 2014-05-14 20:36 - 2014-05-14 20:35 - 00000000 ____D () C:\Program Files (x86)\MTA San Andreas 1.3 2014-05-13 23:59 - 2014-04-29 19:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-13 23:59 - 2014-04-29 19:37 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-13 23:59 - 2014-04-29 19:37 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-12 17:48 - 2014-04-29 18:21 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\.minecraft 2014-05-12 14:53 - 2014-05-12 14:53 - 00058016 _____ () C:\Users\Default\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-12 14:53 - 2014-05-12 14:53 - 00058016 _____ () C:\Users\Default User\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-12 14:52 - 2014-04-28 18:51 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-05-12 14:52 - 2014-04-28 18:51 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-12 14:52 - 2014-04-28 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-12 14:52 - 2014-04-28 18:51 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-11 07:14 - 2014-04-28 15:28 - 00000000 ____D () C:\Windows\Panther 2014-05-11 07:09 - 2014-05-11 07:08 - 00000000 ____D () C:\ProgramData\IePluginServices 2014-05-11 07:09 - 2014-04-29 22:58 - 00000000 ____D () C:\ProgramData\IePluginService 2014-05-11 07:09 - 2014-04-29 22:58 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-05-11 02:07 - 2014-05-11 00:43 - 00000000 ____D () C:\Users\Maschiene\Documents\Rockstar Games 2014-05-11 00:39 - 2014-05-11 00:39 - 00000000 ____D () C:\Users\Maschiene\AppData\Local\Rockstar Games 2014-05-11 00:37 - 2014-05-11 00:37 - 00000000 __RHD () C:\Users\Maschiene\AppData\Roaming\SecuROM 2014-05-10 19:11 - 2014-05-10 19:11 - 00000000 __SHD () C:\ProgramData\SecuROM 2014-05-10 19:08 - 2014-05-10 19:08 - 00000000 ____D () C:\Windows\SysWOW64\xlive 2014-05-10 18:26 - 2014-05-10 18:26 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2014-05-10 17:34 - 2014-05-10 17:34 - 00002028 _____ () C:\Users\Public\Desktop\GTA San Andreas.lnk 2014-05-10 17:34 - 2014-05-10 03:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games 2014-05-10 17:23 - 2014-05-10 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2014-05-10 17:23 - 2014-05-10 03:55 - 00000000 ____D () C:\Users\Maschiene\Documents\GTA San Andreas User Files 2014-05-10 13:36 - 2014-04-30 22:15 - 00000000 ____D () C:\Users\Maschiene\Documents\My Games 2014-05-10 04:48 - 2014-05-10 04:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories 2014-05-10 04:48 - 2014-05-10 04:48 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-05-10 04:26 - 2014-05-10 04:26 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-05-10 04:26 - 2014-05-10 04:26 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-05-10 04:26 - 2014-05-10 04:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-05-10 04:26 - 2014-05-10 04:26 - 00000000 ____D () C:\Program Files\CCleaner 2014-05-10 04:08 - 2014-04-29 00:00 - 00000000 ____D () C:\Users\Maschiene\AppData\Local\Overwolf 2014-05-10 03:55 - 2014-05-10 03:55 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-05-10 03:41 - 2014-05-10 03:41 - 00000000 __SHD () C:\Users\Maschiene\AppData\Local\EmieUserList 2014-05-10 03:41 - 2014-05-10 03:41 - 00000000 __SHD () C:\Users\Maschiene\AppData\Local\EmieSiteList 2014-05-09 16:56 - 2014-05-09 16:56 - 00000000 ____D () C:\Users\Maschiene\Desktop\xape 2014-05-09 16:56 - 2014-05-09 16:45 - 00000000 ____D () C:\Users\Maschiene\Desktop\BigMacroTool 2014-05-09 15:57 - 2014-04-30 05:10 - 00000000 ____D () C:\Users\Maschiene\AppData\Local\Purplizer 2014-05-09 08:14 - 2014-05-14 14:53 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-14 14:53 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-08 04:58 - 2014-04-28 17:46 - 00004112 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-08 04:58 - 2014-04-28 17:46 - 00003860 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-07 20:00 - 2014-05-07 20:00 - 00000790 _____ () C:\Users\Maschiene\Desktop\James Cameron's AVATAR DAS SPIEL - Verknüpfung.lnk 2014-05-07 19:46 - 2014-05-07 19:46 - 00000000 ____D () C:\Program Files (x86)\Ubisoft 2014-05-07 19:32 - 2014-05-07 15:21 - 00000000 ____D () C:\Users\Maschiene\Documents\Stronghold Crusader 2014-05-07 15:20 - 2014-05-07 15:20 - 00002100 _____ () C:\Users\Public\Desktop\Stronghold Crusader Extreme.lnk 2014-05-07 15:20 - 2014-05-07 15:20 - 00002044 _____ () C:\Users\Public\Desktop\Stronghold Crusader.lnk 2014-05-07 15:19 - 2014-05-07 13:45 - 00000000 ____D () C:\Program Files (x86)\Firefly Studios 2014-05-07 14:40 - 2014-05-07 14:37 - 00000000 ____D () C:\Users\Maschiene\Documents\Stronghold 2 2014-05-07 14:38 - 2014-05-07 13:51 - 00000000 ____D () C:\ProgramData\Firefly Studios 2014-05-07 14:35 - 2014-05-07 14:35 - 00001926 _____ () C:\Users\Public\Desktop\Stronghold 2.lnk 2014-05-07 13:53 - 2014-05-07 13:51 - 00000000 ____D () C:\Users\Maschiene\Documents\Stronghold Legends 2014-05-07 13:53 - 2014-04-28 14:37 - 00000000 ____D () C:\Users\Maschiene\AppData\Local\VirtualStore 2014-05-07 13:48 - 2014-05-07 13:48 - 00002022 _____ () C:\Users\Public\Desktop\Stronghold Legends.lnk 2014-05-07 13:27 - 2009-07-14 19:58 - 00698950 _____ () C:\Windows\system32\perfh007.dat 2014-05-07 13:27 - 2009-07-14 19:58 - 00149090 _____ () C:\Windows\system32\perfc007.dat 2014-05-07 13:27 - 2009-07-14 07:13 - 01618704 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-06 06:40 - 2014-05-15 03:03 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-15 03:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-15 03:03 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-15 03:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-15 03:03 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-15 03:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-02 03:05 - 2014-05-01 03:51 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-01 19:23 - 2014-05-01 19:23 - 00002033 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk 2014-05-01 19:23 - 2014-05-01 19:23 - 00002024 _____ () C:\Users\Public\Desktop\Tribes Ascend.lnk 2014-05-01 19:22 - 2014-04-30 14:50 - 00000000 ____D () C:\Program Files (x86)\Hi-Rez Studios 2014-05-01 04:22 - 2014-04-28 14:38 - 00001421 _____ () C:\Users\Maschiene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-01 04:19 - 2009-07-14 06:45 - 00275856 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-01 04:16 - 2009-07-14 20:18 - 00000000 ____D () C:\Program Files\Windows Journal 2014-05-01 04:16 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-05-01 04:16 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-05-01 04:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-05-01 04:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-05-01 04:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-05-01 04:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-05-01 04:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-01 03:43 - 2014-05-01 03:43 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-01 03:43 - 2014-05-01 03:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-01 03:43 - 2014-05-01 03:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-01 03:42 - 2014-05-01 03:42 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-01 03:42 - 2014-05-01 03:42 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-01 03:42 - 2014-05-01 03:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-01 03:42 - 2014-05-01 03:42 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-01 03:42 - 2014-05-01 03:42 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-01 03:42 - 2014-05-01 03:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-01 03:42 - 2014-05-01 03:42 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-01 03:42 - 2014-05-01 03:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-01 03:42 - 2014-05-01 03:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-01 03:42 - 2014-05-01 03:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-01 03:26 - 2014-05-01 03:26 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-01 00:23 - 2014-05-01 00:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2014-04-30 22:20 - 2014-04-30 22:20 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\LolClient 2014-04-30 22:16 - 2014-04-30 14:50 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios 2014-04-30 16:07 - 2014-04-30 16:07 - 00000794 _____ () C:\Users\Maschiene\Desktop\League of Legends.lnk 2014-04-30 16:04 - 2014-04-30 14:58 - 00000000 ____D () C:\Users\Maschiene\AppData\Local\PMB Files 2014-04-30 15:00 - 2014-04-30 15:00 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-04-30 15:00 - 2014-04-30 15:00 - 00000000 ____D () C:\Riot Games 2014-04-30 15:00 - 2014-04-30 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-04-30 14:58 - 2014-04-30 14:58 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\Riot Games 2014-04-30 14:58 - 2014-04-30 14:58 - 00000000 ____D () C:\ProgramData\PMB Files 2014-04-30 14:58 - 2014-04-30 14:58 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2014-04-30 13:45 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-04-30 13:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing 2014-04-30 13:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\sppui 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\manifeststore 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-04-30 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sppui 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\manifeststore 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-04-30 13:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2014-04-30 03:10 - 2009-07-14 04:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2014-04-30 03:10 - 2009-07-14 04:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll 2014-04-30 03:01 - 2014-04-30 03:01 - 00000000 ____D () C:\Windows\system32\SPReview 2014-04-30 03:00 - 2014-04-30 03:00 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-04-30 00:31 - 2014-04-30 00:31 - 00000000 ____D () C:\ProgramData\PACE 2014-04-30 00:19 - 2014-04-30 00:19 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\WinRAR 2014-04-30 00:19 - 2014-04-30 00:19 - 00000000 ____D () C:\Users\Maschiene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-04-30 00:19 - 2014-04-30 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-04-30 00:19 - 2014-04-30 00:19 - 00000000 ____D () C:\Program Files\WinRAR Some content of TEMP: ==================== C:\Users\Maschiene\AppData\Local\Temp\avgnt.exe C:\Users\Maschiene\AppData\Local\Temp\drm_dyndata_7410004.dll C:\Users\Maschiene\AppData\Local\Temp\EAD3B4A.exe C:\Users\Maschiene\AppData\Local\Temp\EAD4D83.exe C:\Users\Maschiene\AppData\Local\Temp\EAD9368.exe C:\Users\Maschiene\AppData\Local\Temp\EADD22C.exe C:\Users\Maschiene\AppData\Local\Temp\EADFDC7.exe C:\Users\Maschiene\AppData\Local\Temp\SHSetup.exe C:\Users\Maschiene\AppData\Local\Temp\UninstallEADM.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-29 13:25 ==================== End Of Log ============================ |
31.05.2014, 15:15 | #17 |
/// the machine /// TB-Ausbilder | Problem mit dem Internet Adware & Co. deinstallieren
__________________
Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter: Scan mit Combofix
__________________ |
01.06.2014, 14:29 | #18 |
| Problem mit dem Internet Ich verstehe das Programm nicht so ganz :|
__________________Ich habe alle anweisungen befolgt bin aber ab der Stelle mit Addit.... nicht mehr weiter gekommen. Was muss ich machen nachdem das Programm (revo) installiert und gestartet worden ist? Soll ich jedes meiner Progrtamme löschen? Ich habe jetzt alles so gemacht wie es beschrieben wurde auch mit combofix... Code:
ATTFilter ComboFix 14-05-29.01 - Maschiene 01.06.2014 15:16:13.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4045.2106 [GMT 2:00] ausgeführt von:: c:\users\Maschiene\Downloads\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859} SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\MASCHI~1\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll c:\users\Maschiene\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll c:\users\Maschiene\AppData\Local\TempDIR c:\users\Maschiene\AppData\Local\TempDIR\Offercast2821_NDV_.exe . . ((((((((((((((((((((((( Dateien erstellt von 2014-05-01 bis 2014-06-01 )))))))))))))))))))))))))))))) . . 2014-06-01 13:21 . 2014-06-01 13:21 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-06-01 01:48 . 2014-06-01 01:48 -------- d-----w- c:\program files (x86)\VS Revo Group 2014-05-31 13:14 . 2014-05-31 13:14 -------- d-----w- c:\users\Maschiene\AppData\Local\ESN 2014-05-31 13:14 . 2014-05-31 13:14 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins 2014-05-31 13:13 . 2014-05-31 13:13 -------- d-----w- c:\programdata\EA Core 2014-05-31 13:13 . 2014-05-31 18:01 -------- d-----w- c:\programdata\EA Logs 2014-05-31 09:06 . 2014-05-31 09:06 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller 2014-05-31 00:12 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll 2014-05-31 00:12 . 2014-05-31 00:12 -------- d-----w- C:\AdwCleaner 2014-05-31 00:10 . 2014-05-31 00:10 -------- d-----w- c:\users\Maschiene\AppData\Roaming\Avira 2014-05-31 00:04 . 2014-05-09 09:16 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2014-05-31 00:04 . 2014-05-09 09:16 130584 ----a-w- c:\windows\system32\drivers\avipbb.sys 2014-05-31 00:04 . 2014-05-09 09:16 112080 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2014-05-29 18:58 . 2014-05-29 19:13 -------- d-----w- c:\program files (x86)\Origin Games 2014-05-29 18:57 . 2014-06-01 00:01 -------- d-----w- c:\users\Maschiene\AppData\Roaming\Origin 2014-05-29 18:57 . 2014-05-29 18:58 -------- d-----w- c:\users\Maschiene\AppData\Local\Origin 2014-05-29 18:52 . 2014-06-01 00:17 -------- d-----w- c:\programdata\Origin 2014-05-29 18:52 . 2014-05-31 02:24 -------- d-----w- c:\program files (x86)\Origin 2014-05-28 15:20 . 2014-05-30 22:19 -------- d-----w- c:\users\Maschiene\AppData\Roaming\BoL 2014-05-27 13:43 . 2014-05-27 13:43 -------- d-----w- c:\program files\Enigma Software Group 2014-05-27 13:42 . 2014-05-28 10:50 -------- d-----w- c:\windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP 2014-05-27 13:42 . 2014-05-27 13:42 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard 2014-05-26 18:48 . 2014-06-01 01:52 -------- d-----w- C:\FRST 2014-05-25 22:28 . 2014-05-25 22:28 -------- d-----w- C:\Games 2014-05-25 22:23 . 2014-05-30 23:37 -------- d-----w- c:\users\Maschiene\AppData\Local\Black_Tree_Gaming 2014-05-25 22:23 . 2014-05-25 22:23 -------- d-----w- c:\users\Maschiene\AppData\Local\Programs 2014-05-25 20:08 . 2013-01-18 01:27 16344 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll 2014-05-25 20:08 . 2014-05-25 20:08 -------- d-----w- c:\programdata\Intel 2014-05-25 20:08 . 2014-05-25 20:08 -------- d-----w- c:\program files\Intel 2014-05-25 20:07 . 2014-05-25 20:07 -------- d-----w- c:\program files (x86)\Common Files\postureAgent 2014-05-25 20:07 . 2014-05-25 20:08 -------- d-----w- c:\program files (x86)\Intel 2014-05-25 20:07 . 2012-07-13 08:56 62784 ----a-w- c:\windows\system32\drivers\HECIx64.sys 2014-05-25 19:50 . 2013-11-26 14:49 73800 ----a-w- c:\windows\system32\RtNicProp64.dll 2014-05-25 19:50 . 2013-11-26 14:49 107552 ----a-w- c:\windows\system32\RTNUninst64.dll 2014-05-25 19:46 . 2013-11-26 14:49 888536 ----a-w- c:\windows\system32\drivers\Rt64win7.sys 2014-05-24 23:56 . 2014-05-31 13:13 -------- d-----w- c:\programdata\Electronic Arts 2014-05-24 12:57 . 2014-05-24 12:57 -------- d-----w- c:\program files (x86)\Microsoft WSE 2014-05-24 12:44 . 2014-05-30 23:40 -------- d-----w- c:\program files (x86)\Electronic Arts 2014-05-23 18:03 . 2014-05-29 19:22 -------- d-----w- c:\users\Maschiene\AppData\Roaming\starcheat 2014-05-17 16:00 . 2014-05-17 16:00 -------- d-----w- c:\users\Maschiene\AppData\Local\Chromium 2014-05-16 02:43 . 2014-05-31 18:03 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2014-05-16 02:42 . 2014-05-31 13:15 -------- d-----w- c:\users\Maschiene\AppData\Local\PunkBuster 2014-05-16 02:18 . 2014-05-31 18:03 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2014-05-16 02:18 . 2014-05-31 18:01 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2014-05-16 02:18 . 2014-05-31 09:06 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2014-05-16 00:28 . 2014-05-16 00:28 -------- d-----w- c:\program files (x86)\EA Games 2014-05-15 21:44 . 2014-05-15 21:44 -------- d-----w- c:\programdata\BlueStacks 2014-05-15 21:44 . 2014-05-15 21:44 -------- d-----w- c:\program files (x86)\BlueStacks 2014-05-15 21:44 . 2014-05-15 21:44 -------- d-----w- c:\users\Maschiene\AppData\Local\Bluestacks 2014-05-15 01:03 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll 2014-05-15 01:03 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll 2014-05-15 01:03 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2014-05-15 01:03 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb 2014-05-14 18:35 . 2014-05-14 18:36 -------- d-----w- c:\program files (x86)\MTA San Andreas 1.3 2014-05-14 18:35 . 2014-05-14 18:36 -------- d---a-w- c:\programdata\MTA San Andreas All 2014-05-10 22:39 . 2014-05-10 22:39 -------- d-----w- c:\users\Maschiene\AppData\Local\Rockstar Games 2014-05-10 22:37 . 2014-05-10 22:37 -------- d--h--r- c:\users\Maschiene\AppData\Roaming\SecuROM 2014-05-10 17:11 . 2014-05-10 17:11 -------- d-sh--w- c:\programdata\SecuROM 2014-05-10 17:08 . 2014-05-24 22:25 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE 2014-05-10 17:08 . 2014-05-10 17:08 -------- d-----w- c:\windows\SysWow64\xlive 2014-05-10 15:34 . 2004-10-22 00:17 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll 2014-05-10 15:34 . 2004-10-22 00:17 274432 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll 2014-05-10 15:34 . 2004-10-22 00:16 180224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll 2014-05-10 15:34 . 2004-10-22 00:16 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe 2014-05-10 15:34 . 2004-10-22 00:18 749568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll 2014-05-10 15:34 . 2014-05-10 15:34 323716 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll 2014-05-10 15:34 . 2014-05-10 15:34 192644 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll 2014-05-10 11:46 . 2014-05-29 17:52 -------- d-----w- c:\users\Maschiene\AppData\Local\Skyrim 2014-05-10 02:48 . 2014-05-10 02:48 -------- d-----w- c:\program files\Microsoft Xbox 360 Accessories 2014-05-10 02:26 . 2014-05-10 02:26 -------- d-----w- c:\program files\CCleaner 2014-05-10 01:42 . 2014-05-14 19:09 -------- d-----w- c:\program files (x86)\Rockstar Games 2014-05-10 01:41 . 2014-05-10 01:41 -------- d-sh--w- c:\users\Maschiene\AppData\Local\EmieUserList 2014-05-10 01:41 . 2014-05-10 01:41 -------- d-sh--w- c:\users\Maschiene\AppData\Local\EmieSiteList 2014-05-08 01:00 . 2014-03-06 08:15 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2014-05-07 11:51 . 2014-06-01 02:06 -------- d-----w- c:\programdata\Firefly Studios 2014-05-07 11:45 . 2014-06-01 02:04 -------- d-----w- c:\program files (x86)\Firefly Studios . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-05-24 22:27 . 2009-08-18 10:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll 2014-05-24 22:27 . 2009-08-18 09:24 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2014-05-15 01:02 . 2014-04-28 14:43 93223848 ----a-w- c:\windows\system32\MRT.exe 2014-05-13 21:59 . 2014-04-29 17:37 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-05-13 21:59 . 2014-04-29 17:37 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-05-01 01:43 . 2014-05-01 01:43 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2014-05-01 01:43 . 2014-05-01 01:43 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2014-05-01 01:43 . 2014-05-01 01:43 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll 2014-05-01 01:43 . 2014-05-01 01:43 235008 ----a-w- c:\windows\system32\elshyph.dll 2014-05-01 01:43 . 2014-05-01 01:43 182272 ----a-w- c:\windows\SysWow64\msls31.dll 2014-05-01 01:43 . 2014-05-01 01:43 1789440 ----a-w- c:\windows\SysWow64\wininet.dll 2014-05-01 01:42 . 2014-05-01 01:42 942592 ----a-w- c:\windows\system32\jsIntl.dll 2014-05-01 01:42 . 2014-05-01 01:42 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2014-05-01 01:42 . 2014-05-01 01:42 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll 2014-05-01 01:42 . 2014-05-01 01:42 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2014-05-01 01:42 . 2014-05-01 01:42 752640 ----a-w- c:\windows\system32\jscript9diag.dll 2014-05-01 01:42 . 2014-05-01 01:42 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2014-05-01 01:42 . 2014-05-01 01:42 62464 ----a-w- c:\windows\SysWow64\tdc.ocx 2014-05-01 01:42 . 2014-05-01 01:42 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll 2014-05-01 01:42 . 2014-05-01 01:42 61952 ----a-w- c:\windows\SysWow64\iesetup.dll 2014-05-01 01:42 . 2014-05-01 01:42 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll 2014-05-01 01:42 . 2014-05-01 01:42 5784064 ----a-w- c:\windows\system32\jscript9.dll 2014-05-01 01:42 . 2014-05-01 01:42 574976 ----a-w- c:\windows\system32\ieui.dll 2014-05-01 01:42 . 2014-05-01 01:42 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2014-05-01 01:42 . 2014-05-01 01:42 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2014-05-01 01:42 . 2014-05-01 01:42 51200 ----a-w- c:\windows\system32\jsproxy.dll 2014-05-01 01:42 . 2014-05-01 01:42 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2014-05-01 01:42 . 2014-05-01 01:42 48640 ----a-w- c:\windows\system32\mshtmler.dll 2014-05-01 01:42 . 2014-05-01 01:42 455168 ----a-w- c:\windows\SysWow64\vbscript.dll 2014-05-01 01:42 . 2014-05-01 01:42 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll 2014-05-01 01:42 . 2014-05-01 01:42 36352 ----a-w- c:\windows\SysWow64\imgutil.dll 2014-05-01 01:42 . 2014-05-01 01:42 337408 ----a-w- c:\windows\SysWow64\html.iec 2014-05-01 01:42 . 2014-05-01 01:42 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll 2014-05-01 01:42 . 2014-05-01 01:42 2767360 ----a-w- c:\windows\system32\iertutil.dll 2014-05-01 01:42 . 2014-05-01 01:42 247808 ----a-w- c:\windows\system32\msls31.dll 2014-05-01 01:42 . 2014-05-01 01:42 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll 2014-05-01 01:42 . 2014-05-01 01:42 2260480 ----a-w- c:\windows\system32\wininet.dll 2014-05-01 01:42 . 2014-05-01 01:42 1967104 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2014-05-01 01:42 . 2014-05-01 01:42 195584 ----a-w- c:\windows\system32\msrating.dll 2014-05-01 01:42 . 2014-05-01 01:42 151552 ----a-w- c:\windows\SysWow64\iexpress.exe 2014-05-01 01:42 . 2014-05-01 01:42 1400832 ----a-w- c:\windows\system32\urlmon.dll 2014-05-01 01:42 . 2014-05-01 01:42 139264 ----a-w- c:\windows\SysWow64\wextract.exe 2014-05-01 01:42 . 2014-05-01 01:42 13312 ----a-w- c:\windows\SysWow64\mshta.exe 2014-05-01 01:42 . 2014-05-01 01:42 13312 ----a-w- c:\windows\system32\msfeedssync.exe 2014-05-01 01:42 . 2014-05-01 01:42 131072 ----a-w- c:\windows\system32\IEAdvpack.dll 2014-05-01 01:42 . 2014-05-01 01:42 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2014-05-01 01:42 . 2014-05-01 01:42 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2014-05-01 01:42 . 2014-05-01 01:42 105984 ----a-w- c:\windows\system32\iesysprep.dll 2014-05-01 01:42 . 2014-05-01 01:42 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2014-05-01 01:42 . 2014-05-01 01:42 846336 ----a-w- c:\windows\system32\ieapfltr.dll 2014-05-01 01:42 . 2014-05-01 01:42 83968 ----a-w- c:\windows\system32\MshtmlDac.dll 2014-05-01 01:42 . 2014-05-01 01:42 81408 ----a-w- c:\windows\system32\icardie.dll 2014-05-01 01:42 . 2014-05-01 01:42 774144 ----a-w- c:\windows\system32\jscript.dll 2014-05-01 01:42 . 2014-05-01 01:42 77312 ----a-w- c:\windows\system32\tdc.ocx 2014-05-01 01:42 . 2014-05-01 01:42 66048 ----a-w- c:\windows\system32\iesetup.dll 2014-05-01 01:42 . 2014-05-01 01:42 628736 ----a-w- c:\windows\system32\msfeeds.dll 2014-05-01 01:42 . 2014-05-01 01:42 62464 ----a-w- c:\windows\system32\pngfilt.dll 2014-05-01 01:42 . 2014-05-01 01:42 616104 ----a-w- c:\windows\system32\ieapfltr.dat 2014-05-01 01:42 . 2014-05-01 01:42 586240 ----a-w- c:\windows\system32\ie4uinit.exe 2014-05-01 01:42 . 2014-05-01 01:42 548352 ----a-w- c:\windows\system32\vbscript.dll 2014-05-01 01:42 . 2014-05-01 01:42 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll 2014-05-01 01:42 . 2014-05-01 01:42 48128 ----a-w- c:\windows\system32\imgutil.dll 2014-05-01 01:42 . 2014-05-01 01:42 453120 ----a-w- c:\windows\system32\dxtmsft.dll 2014-05-01 01:42 . 2014-05-01 01:42 413696 ----a-w- c:\windows\system32\html.iec 2014-05-01 01:42 . 2014-05-01 01:42 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2014-05-01 01:42 . 2014-05-01 01:42 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2014-05-01 01:42 . 2014-05-01 01:42 33792 ----a-w- c:\windows\system32\iernonce.dll 2014-05-01 01:42 . 2014-05-01 01:42 30208 ----a-w- c:\windows\system32\licmgr10.dll 2014-05-01 01:42 . 2014-05-01 01:42 296960 ----a-w- c:\windows\system32\dxtrans.dll 2014-05-01 01:42 . 2014-05-01 01:42 263376 ----a-w- c:\windows\system32\iedkcs32.dll 2014-05-01 01:42 . 2014-05-01 01:42 243200 ----a-w- c:\windows\system32\webcheck.dll 2014-05-01 01:42 . 2014-05-01 01:42 235520 ----a-w- c:\windows\system32\url.dll 2014-05-01 01:42 . 2014-05-01 01:42 2043904 ----a-w- c:\windows\system32\inetcpl.cpl 2014-05-01 01:42 . 2014-05-01 01:42 167424 ----a-w- c:\windows\system32\iexpress.exe 2014-05-01 01:42 . 2014-05-01 01:42 147968 ----a-w- c:\windows\system32\occache.dll 2014-05-01 01:42 . 2014-05-01 01:42 143872 ----a-w- c:\windows\system32\wextract.exe 2014-05-01 01:42 . 2014-05-01 01:42 139264 ----a-w- c:\windows\system32\ieUnatt.exe 2014-05-01 01:42 . 2014-05-01 01:42 13824 ----a-w- c:\windows\system32\mshta.exe 2014-05-01 01:42 . 2014-05-01 01:42 135680 ----a-w- c:\windows\system32\iepeers.dll 2014-05-01 01:42 . 2014-05-01 01:42 13551104 ----a-w- c:\windows\system32\ieframe.dll 2014-05-01 01:42 . 2014-05-01 01:42 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll 2014-05-01 01:42 . 2014-05-01 01:42 111616 ----a-w- c:\windows\system32\ieetwcollector.exe 2014-05-01 01:42 . 2014-05-01 01:42 101376 ----a-w- c:\windows\system32\inseng.dll 2014-05-01 01:26 . 2014-05-01 01:26 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 648192 ----a-w- c:\windows\system32\d3d10level9.dll 2014-05-01 01:26 . 2014-05-01 01:26 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2014-05-01 01:26 . 2014-05-01 01:26 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2014-05-01 01:26 . 2014-05-01 01:26 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2014-05-01 01:26 . 2014-05-01 01:26 363008 ----a-w- c:\windows\system32\dxgi.dll 2014-05-01 01:26 . 2014-05-01 01:26 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-01 01:26 . 2014-05-01 01:26 333312 ----a-w- c:\windows\system32\d3d10_1core.dll 2014-05-01 01:26 . 2014-05-01 01:26 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016] "HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2013-03-28 389120] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-04-16 642656] "Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-05-05 182352] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-05-09 737872] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "Userinit"="userinit.exe" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 ATICDSDr;ATICDSDr;c:\users\MASCHI~1\AppData\Local\Temp\ATICDSDr.sys;c:\users\MASCHI~1\AppData\Local\Temp\ATICDSDr.sys [x] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 FairplayKD;FairplayKD;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys;c:\programdata\MTA San Andreas All\Common\temp\FairplayKD.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x] R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x] S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x] S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x] S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x] S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files (x86)\BlueStacks\HD-UpdaterService.exe;c:\program files (x86)\BlueStacks\HD-UpdaterService.exe [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-05-20 23:08 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.114\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-06-01 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29 21:59] . 2014-05-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-04-28 15:46] . 2014-05-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-04-28 15:46] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-11-04 7204568] "XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = about:blank mDefault_Search_URL = hxxp://www.google.com mDefault_Page_URL = hxxp://www.google.com mStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://www.google.com TCP: DhcpNameServer = 10.1.1.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-3372416275-4010862124-415154746-1000\Software\SecuROM\License information*] "datasecu"=hex:1c,c4,48,19,4a,52,cb,a1,ac,0d,a8,ab,c1,7c,9d,4a,48,1c,1f,94,fe, 21,4a,76,63,ea,ea,c2,17,61,37,07,d4,dd,8c,e6,87,5d,69,34,5e,80,08,6b,17,cb,\ "rkeysecu"=hex:e0,ed,45,34,34,b8,d2,00,b3,d2,01,41,ca,46,be,00 . [HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.9" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}] @Denied: (A 2) (Everyone) @="IFlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\BlueStacks\HD-Service.exe c:\program files (x86)\BlueStacks\HD-Network.exe c:\program files (x86)\BlueStacks\HD-BlockDevice.exe c:\program files (x86)\BlueStacks\HD-SharedFolder.exe c:\program files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-06-01 15:27:39 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-06-01 13:27 . Vor Suchlauf: 12 Verzeichnis(se), 112.717.893.632 Bytes frei Nach Suchlauf: 15 Verzeichnis(se), 119.117.320.192 Bytes frei . - - End Of File - - E21BF07EE4F77E929F88537E0833C211 A36C5E4F47E84449FF07ED3517B43A31 |
02.06.2014, 12:08 | #19 |
/// the machine /// TB-Ausbilder | Problem mit dem Internet Du sollst mit Revo die Programme deinstallieren, die Du in der Addition.txt von FRST mit dem Zusatz ATTENTION findest. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.06.2014, 21:51 | #20 |
| Problem mit dem Internet Mqalware Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 02.06.2014 Suchlauf-Zeit: 22:27:15 Logdatei: asd.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.02.08 Rootkit Datenbank: v2014.05.21.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Maschiene Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 269252 Verstrichene Zeit: 9 Min, 10 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[367a4b283d3e8fa74f1184dfd52fc43c] Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.211 - Bericht erstellt am 02/06/2014 um 22:40:01 # Aktualisiert 26/05/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Maschiene - JEP # Gestartet von : C:\Users\Maschiene\Downloads\adwcleaner_3.211 (1).exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\OCS ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17041 -\\ Google Chrome v35.0.1916.114 [ Datei : C:\Users\Maschiene\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [5410 octets] - [31/05/2014 02:12:07] AdwCleaner[R1].txt - [1021 octets] - [02/06/2014 22:39:09] AdwCleaner[S0].txt - [4493 octets] - [31/05/2014 02:12:33] AdwCleaner[S1].txt - [898 octets] - [02/06/2014 22:40:01] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [957 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Maschiene on 02.06.2014 at 22:46:40,16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 02.06.2014 at 22:50:34,90 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
03.06.2014, 19:31 | #21 |
/// the machine /// TB-Ausbilder | Problem mit dem InternetESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Problem mit dem Internet |
03.06.2014, 21:32 | #22 |
| Problem mit dem InternetCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7587 # api_version=3.0.2 # EOSSerial=1035dd6dc77d5347be6c86bcfbc62fb3 # engine=18540 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-06-03 08:27:09 # local_time=2014-06-03 10:27:09 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 100 0 2200227 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 22173 153457079 0 0 # scanned=158835 # found=9 # cleaned=9 # scan_time=2941 sh=C7C0F42A23562AA6DCCD60326FD8CC2AA41B5448 ft=1 fh=c053642cee9f3def vn="Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir" sh=125B1C393F2104CBA08183E495C0907BFF7EDA22 ft=1 fh=ea25908c8365106f vn="Win64/Thinknice.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir" sh=8E85792765D0E0BF52107CFF4A6620995DB19BB0 ft=1 fh=627da500ea2e265f vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterfacef32.dll.vir" sh=6043D1ACD51FD373472020FBB748C405AAF22397 ft=1 fh=4c716dbbae6c21b9 vn="Win32/Thinknice.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir" sh=FF431CD8693F4045BD7BD87DBCE54B820F000FC0 ft=1 fh=16c2e1bd3fd6b7e2 vn="Win64/Thinknice.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir" sh=9DC13DB9C123270C2356ED410128E11D5ADF7C6E ft=1 fh=023ab782f0a9b07d vn="Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir" sh=56659F7FF1F1FA7906A77228E315F65F38BCEF73 ft=1 fh=0ff759dfc352fd03 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir" sh=EC7EC5D60C5A578BC9953115D368BECD05BA14B2 ft=1 fh=ecbff00cc7dcc0fd vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Maschiene\AppData\Roaming\SupTab\SupTab.dll.vir" sh=A1224392FA30413FED68176F64C7C00E24E8A27F ft=1 fh=f4d05184c092fa8e vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Maschiene\Downloads\Sumotori Dreams - CHIP-Installer.exe" |
04.06.2014, 18:46 | #23 |
/// the machine /// TB-Ausbilder | Problem mit dem Internet und der Rest?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.06.2014, 19:33 | #24 |
| Problem mit dem Internet Das geht nich so schnell wie bereits erwähnt wird mein Pc und das unternet immer langsamer. Ich brauche mitlerweile für 20kb 30 minuten. Sie haben mir einigermaßen geholfen. Doch durch die ganzen Programme wird mein Pc immer langsamer was ich leider merke. Ich bin in einigen Leaguen und kann es mir nicht erlauben einen schlechten Pc zu haben. Ich entscheide mich dann doch alles neu zu Programmieren und zu Installieren. Danke trotzdem schönen Tag noch zusammen |
05.06.2014, 19:13 | #25 |
/// the machine /// TB-Ausbilder | Problem mit dem Internet ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.06.2014, 02:27 | #26 |
| Problem mit dem Internet Trotzdem Danke für ihre Hilfe einige sachen (habe ich selber mitbekommen) waren auch unten (viren, adware). Ich kann eigendlich jeden hier die Seite empfehlen was ich auch tun werde Liebe Grüße Dennis |
07.06.2014, 05:39 | #27 |
/// the machine /// TB-Ausbilder | Problem mit dem Internet jup
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |