![]() |
|
Plagegeister aller Art und deren Bekämpfung: Fehlermeldung: feelgood.exe WTF?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #11 |
![]() | ![]() Fehlermeldung: feelgood.exe WTF?Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7587 # api_version=3.0.2 # EOSSerial=24b1eb4784718946a085a1a6f7020c6f # engine=18612 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-06-08 12:19:15 # local_time=2014-06-08 02:19:15 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='avast! Antivirus' # compatibility_mode=783 16777213 100 97 12567 19572389 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 77723 153816605 0 0 # scanned=170631 # found=0 # cleaned=0 # scan_time=5998 Code:
ATTFilter Results of screen317's Security Check version 0.99.83 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 13.0.0.214 Adobe Reader XI Mozilla Firefox (29.0.1) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast avastui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-06-2014 Ran by Liquid (ATTENTION: The logged in user is not administrator) on VENOMVOLIUM on 08-06-2014 03:39:15 Running from C:\Users\Liquid\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Templates\Microsoft Services\services.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe () C:\Mouse driver\mouse_driver.exe () C:\Mouse driver\wh_exec.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE () C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-27] (Realtek Semiconductor) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-01-19] (Atheros Commnucations) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2870032 2012-03-15] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [693608 2012-02-21] (Sony Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-06] (AVAST Software) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [uni mouse driver] => C:\Mouse driver\mouse_driver.exe [2972672 2011-11-09] () HKLM-x32\...\Run: [uni mouse driver tilt] => C:\Mouse driver\wh_exec.exe [147456 2010-10-05] () HKU\S-1-5-21-2858823002-1345273161-2661199413-1000\...\Run: [EPSON Stylus DX4000 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIBEE.EXE [213504 2007-10-09] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-2858823002-1345273161-2661199413-1000\...\Run: [Mirosoft Services] => C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Templates\Microsoft Services\services.exe [1241088 2014-03-19] () Startup: C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SNET.vbs () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com URLSearchHook: HKCU - (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {70E7F08C-8D7F-473A-B1E1-4A387ADFF65F} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms} BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Liquid\AppData\Roaming\Mozilla\Firefox\Profiles\xr09z8dl.default-1402016315818 FF Homepage: https://www.google.de/?gws_rd=ssl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.) FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: NoScript - C:\Users\Liquid\AppData\Roaming\Mozilla\Firefox\Profiles\xr09z8dl.default-1402016315818\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-06] FF Extension: Adblock Edge - C:\Users\Liquid\AppData\Roaming\Mozilla\Firefox\Profiles\xr09z8dl.default-1402016315818\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-06-06] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-24] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-22] (AVAST Software) S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [248304 2012-01-19] (CyberLink) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [107040 2014-05-17] (EasyAntiCheat Ltd) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation) R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation) R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-01-19] (Atheros) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-22] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-22] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-22] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-22] () R3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-01-19] (Atheros) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-06-06] (Malwarebytes Corporation) S3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider) S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider) R3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [10368 2009-09-16] () R3 whfltr2k; C:\Windows\SysWOW64\DRIVERS\whfltr2k.sys [10368 2009-09-16] () S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-08 03:39 - 2014-06-08 03:39 - 00014165 _____ () C:\Users\Liquid\Desktop\FRST.txt 2014-06-08 03:39 - 2014-06-08 03:39 - 00000000 ____D () C:\Users\Liquid\Desktop\FRST-OlderVersion 2014-06-08 03:34 - 2014-06-08 03:34 - 00000750 _____ () C:\Users\Liquid\Desktop\checkup.txt 2014-06-08 03:30 - 2014-06-08 03:30 - 00854367 _____ () C:\Users\Liquid\Desktop\SecurityCheck.exe 2014-06-07 23:03 - 2014-06-07 23:03 - 02347384 _____ (ESET) C:\Users\Liquid\Desktop\esetsmartinstaller_deu.exe 2014-06-06 03:55 - 2014-06-06 03:55 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\vlc 2014-06-06 03:55 - 2014-06-06 03:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-06 02:13 - 2014-06-06 02:13 - 00000000 ____D () C:\Windows\ERUNT 2014-06-06 02:04 - 2014-06-06 02:07 - 00000000 ____D () C:\AdwCleaner 2014-06-06 01:25 - 2014-06-06 01:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-06 01:20 - 2014-06-06 01:20 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-06 01:20 - 2014-06-06 01:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-06 01:20 - 2014-06-06 01:20 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-06 01:20 - 2014-06-06 01:20 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-06 01:20 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-06 01:20 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-06 01:20 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-06 00:57 - 2014-06-06 00:57 - 01016261 _____ (Thisisu) C:\Users\Liquid\Desktop\JRT.exe 2014-06-06 00:54 - 2014-06-06 00:54 - 01333465 _____ () C:\Users\Liquid\Desktop\adwcleaner_3.212.exe 2014-06-04 23:51 - 2014-06-04 23:51 - 00022957 _____ () C:\ComboFix.txt 2014-06-04 23:51 - 2014-06-04 23:51 - 00000000 ____D () C:\Users\Public\AppData\Local\temp 2014-06-04 23:51 - 2014-06-04 23:51 - 00000000 ____D () C:\Users\Default\AppData\Local\temp 2014-06-04 23:51 - 2014-06-04 23:51 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp 2014-06-04 23:32 - 2014-06-06 02:08 - 00000842 _____ () C:\Windows\PFRO.log 2014-06-04 23:23 - 2014-06-04 23:51 - 00000000 ____D () C:\Qoobox 2014-06-04 23:23 - 2014-06-04 23:49 - 00000000 ____D () C:\Windows\erdnt 2014-06-04 23:23 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-06-04 23:23 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-06-04 23:23 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-06-04 23:23 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-06-04 23:23 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-06-04 23:23 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-06-04 23:23 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-06-04 23:23 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-06-04 23:06 - 2014-06-04 23:06 - 05205146 ____R (Swearware) C:\Users\Liquid\Desktop\ComboFix.exe 2014-06-04 21:20 - 2014-06-07 22:49 - 00000448 _____ () C:\Windows\setupact.log 2014-06-04 21:20 - 2014-06-04 21:20 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-03 01:35 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-06-03 01:35 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-06-03 00:34 - 2014-06-03 00:34 - 00000000 __SHD () C:\Users\Liquid\AppData\Local\EmieSiteList 2014-06-03 00:18 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-06-03 00:18 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-06-03 00:18 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-06-03 00:18 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-06-03 00:18 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-06-03 00:18 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-06-03 00:18 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-06-03 00:18 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-06-03 00:18 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-06-03 00:18 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-06-03 00:18 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-06-03 00:18 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-06-03 00:18 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-06-03 00:18 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-06-03 00:18 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-06-03 00:18 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-06-03 00:15 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-06-03 00:15 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-06-02 20:09 - 2014-06-02 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-06-02 20:09 - 2014-06-02 20:09 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-06-02 19:38 - 2014-06-08 03:39 - 00000000 ____D () C:\FRST 2014-06-02 19:35 - 2014-06-08 03:39 - 02072576 _____ (Farbar) C:\Users\Liquid\Desktop\FRST64.exe 2014-06-01 22:35 - 2014-06-01 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-06-01 22:35 - 2014-06-01 22:35 - 00000000 ____D () C:\Program Files\CCleaner 2014-05-31 18:52 - 2014-05-31 18:52 - 00000000 ___RD () C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-05-31 13:12 - 2014-05-31 14:57 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\TrippyMane 2014-05-31 01:12 - 2014-05-31 01:12 - 00000000 ____D () C:\Users\Liquid\AppData\Local\WinZip 2014-05-31 01:08 - 2014-05-31 01:12 - 00000000 ____D () C:\ProgramData\WinZip 2014-05-31 01:08 - 2014-05-31 01:08 - 00002237 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk 2014-05-31 01:08 - 2014-05-31 01:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 2014-05-31 01:08 - 2014-05-31 01:08 - 00000000 ____D () C:\Program Files (x86)\WinZip 2014-05-24 23:13 - 2014-05-24 23:13 - 00000000 ____D () C:\Users\Liquid\Desktop\Öffentlich Rechtliche 2014-05-17 06:07 - 2014-05-17 06:03 - 00107040 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe 2014-05-14 04:09 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-14 04:09 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-14 04:09 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-14 04:09 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-14 04:09 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-14 04:09 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-14 02:29 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 02:29 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 02:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 02:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 02:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 02:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 02:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 02:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 02:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 02:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-14 02:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-14 02:29 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 02:29 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-14 02:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 02:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 02:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 02:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 02:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 02:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 02:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 02:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 02:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 02:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-14 02:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 02:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 02:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 02:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-14 02:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-09 23:49 - 2014-05-09 23:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-06-08 03:39 - 2014-06-08 03:39 - 00014165 _____ () C:\Users\Liquid\Desktop\FRST.txt 2014-06-08 03:39 - 2014-06-08 03:39 - 00000000 ____D () C:\Users\Liquid\Desktop\FRST-OlderVersion 2014-06-08 03:39 - 2014-06-02 19:38 - 00000000 ____D () C:\FRST 2014-06-08 03:39 - 2014-06-02 19:35 - 02072576 _____ (Farbar) C:\Users\Liquid\Desktop\FRST64.exe 2014-06-08 03:39 - 2012-10-01 22:27 - 00000000 ____D () C:\Users\Liquid\AppData\Local\Temp 2014-06-08 03:34 - 2014-06-08 03:34 - 00000750 _____ () C:\Users\Liquid\Desktop\checkup.txt 2014-06-08 03:30 - 2014-06-08 03:30 - 00854367 _____ () C:\Users\Liquid\Desktop\SecurityCheck.exe 2014-06-08 01:12 - 2012-10-01 20:59 - 02033825 _____ () C:\Windows\WindowsUpdate.log 2014-06-08 00:29 - 2012-10-02 00:15 - 00000000 ___RD () C:\Users\Liquid\Desktop\Virtual Life 2014-06-07 23:15 - 2012-10-01 21:52 - 00700118 _____ () C:\Windows\system32\perfh007.dat 2014-06-07 23:15 - 2012-10-01 21:52 - 00149968 _____ () C:\Windows\system32\perfc007.dat 2014-06-07 23:15 - 2009-07-14 07:13 - 01622164 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-07 23:03 - 2014-06-07 23:03 - 02347384 _____ (ESET) C:\Users\Liquid\Desktop\esetsmartinstaller_deu.exe 2014-06-07 22:57 - 2009-07-14 06:45 - 00020992 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-07 22:57 - 2009-07-14 06:45 - 00020992 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-07 22:49 - 2014-06-04 21:20 - 00000448 _____ () C:\Windows\setupact.log 2014-06-07 22:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-06 21:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-06 03:55 - 2014-06-06 03:55 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\vlc 2014-06-06 03:55 - 2014-06-06 03:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-06 03:55 - 2013-03-17 18:24 - 00000000 ____D () C:\Program Files\VideoLAN 2014-06-06 02:13 - 2014-06-06 02:13 - 00000000 ____D () C:\Windows\ERUNT 2014-06-06 02:08 - 2014-06-04 23:32 - 00000842 _____ () C:\Windows\PFRO.log 2014-06-06 02:07 - 2014-06-06 02:04 - 00000000 ____D () C:\AdwCleaner 2014-06-06 01:25 - 2014-06-06 01:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-06 01:20 - 2014-06-06 01:20 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-06 01:20 - 2014-06-06 01:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-06 01:20 - 2014-06-06 01:20 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-06 01:20 - 2014-06-06 01:20 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-06 00:57 - 2014-06-06 00:57 - 01016261 _____ (Thisisu) C:\Users\Liquid\Desktop\JRT.exe 2014-06-06 00:54 - 2014-06-06 00:54 - 01333465 _____ () C:\Users\Liquid\Desktop\adwcleaner_3.212.exe 2014-06-04 23:51 - 2014-06-04 23:51 - 00022957 _____ () C:\ComboFix.txt 2014-06-04 23:51 - 2014-06-04 23:51 - 00000000 ____D () C:\Users\Public\AppData\Local\temp 2014-06-04 23:51 - 2014-06-04 23:51 - 00000000 ____D () C:\Users\Default\AppData\Local\temp 2014-06-04 23:51 - 2014-06-04 23:51 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp 2014-06-04 23:51 - 2014-06-04 23:23 - 00000000 ____D () C:\Qoobox 2014-06-04 23:51 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-06-04 23:49 - 2014-06-04 23:23 - 00000000 ____D () C:\Windows\erdnt 2014-06-04 23:46 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-06-04 23:06 - 2014-06-04 23:06 - 05205146 ____R (Swearware) C:\Users\Liquid\Desktop\ComboFix.exe 2014-06-04 21:20 - 2014-06-04 21:20 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-04 06:28 - 2012-11-01 13:55 - 00000000 ____D () C:\Users\Liquid\AppData\Local\CrashDumps 2014-06-04 06:28 - 2012-10-26 17:06 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\uTorrent 2014-06-04 06:28 - 2012-10-02 16:04 - 00000000 ____D () C:\Users\Liquid\Tracing 2014-06-03 00:34 - 2014-06-03 00:34 - 00000000 __SHD () C:\Users\Liquid\AppData\Local\EmieSiteList 2014-06-02 20:09 - 2014-06-02 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-06-02 20:09 - 2014-06-02 20:09 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-06-01 22:36 - 2011-02-11 00:48 - 00000000 ____D () C:\Windows\Panther 2014-06-01 22:35 - 2014-06-01 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-06-01 22:35 - 2014-06-01 22:35 - 00000000 ____D () C:\Program Files\CCleaner 2014-05-31 18:52 - 2014-05-31 18:52 - 00000000 ___RD () C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-05-31 14:57 - 2014-05-31 13:12 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\TrippyMane 2014-05-31 14:55 - 2005-04-08 04:16 - 00010132 ____H () C:\Users\Liquid\AppData\Roaming\Liquidlog.dat 2014-05-31 13:12 - 2012-10-01 22:32 - 00000000 ___RD () C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-31 01:12 - 2014-05-31 01:12 - 00000000 ____D () C:\Users\Liquid\AppData\Local\WinZip 2014-05-31 01:12 - 2014-05-31 01:08 - 00000000 ____D () C:\ProgramData\WinZip 2014-05-31 01:08 - 2014-05-31 01:08 - 00002237 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk 2014-05-31 01:08 - 2014-05-31 01:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 2014-05-31 01:08 - 2014-05-31 01:08 - 00000000 ____D () C:\Program Files (x86)\WinZip 2014-05-31 01:08 - 2012-10-01 22:27 - 00000000 ____D () C:\Users\Liquid 2014-05-31 01:08 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-29 22:17 - 2012-10-05 17:39 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\Skype 2014-05-26 22:02 - 2014-03-14 21:21 - 00000000 ____D () C:\Users\Liquid\Desktop\Wichtig 2014-05-26 00:18 - 2013-09-22 13:52 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-24 23:13 - 2014-05-24 23:13 - 00000000 ____D () C:\Users\Liquid\Desktop\Öffentlich Rechtliche 2014-05-21 16:48 - 2012-12-15 01:25 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\SoftGrid Client 2014-05-17 17:06 - 2013-04-14 01:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-17 17:06 - 2013-04-14 01:41 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-17 06:03 - 2014-05-17 06:07 - 00107040 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe 2014-05-16 22:23 - 2012-10-03 00:30 - 00000000 ____D () C:\Users\LiquidAdmin 2014-05-15 22:56 - 2013-12-24 20:32 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-05-15 22:56 - 2013-10-24 13:32 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-05-15 22:56 - 2013-10-24 13:32 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-05-14 04:12 - 2012-10-01 22:32 - 00000000 ___RD () C:\Users\Liquid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-14 04:10 - 2014-05-06 15:36 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-14 04:08 - 2013-08-15 09:38 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-14 04:06 - 2012-10-01 22:48 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 04:02 - 2014-03-07 01:37 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-05-12 07:26 - 2014-06-06 01:20 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-12 07:26 - 2014-06-06 01:20 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-12 07:25 - 2014-06-06 01:20 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-12 03:47 - 2014-03-14 03:56 - 00000000 ____D () C:\Users\Liquid\AppData\Roaming\TS3Client 2014-05-10 22:09 - 2012-10-02 00:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-09 23:49 - 2014-05-09 23:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-09 08:14 - 2014-05-14 02:29 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-14 02:29 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== End Of Log ============================ --- --- --- --- --- --- Leider gibt es noch ein Problem. Die Fehlermeldung, die nachdem Hochfahren kommt, ist immer noch da. ![]() ![]() |
Themen zu Fehlermeldung: feelgood.exe WTF? |
beheben, ccleaner, computer, ebook, feelgood, feelgood.exe, fehlermeldung, gefunde, hilft, hänge, komplett, komplette, konnte, msconfig, namen, neustart, notebook, richtig, schonmal, screen, seite, seiten, stelle, thema, trojaner, versuche, virus, vorgehen, weiterhelfen, windows |