|
Plagegeister aller Art und deren Bekämpfung: "Avira wird durch eine Gruppenrichtlinie blockiert"Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
25.06.2014, 23:57 | #16 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Mach bitte trotzdem mit den anderen Schritten weiter...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
26.06.2014, 00:39 | #17 |
| "Avira wird durch eine Gruppenrichtlinie blockiert"Code:
ATTFilter # AdwCleaner v3.213 - Bericht erstellt am 26/06/2014 um 00:58:09 # Aktualisiert 23/06/2014 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits) # Benutzername : admin - ADMIN-PC # Gestartet von : C:\Users\admin\Downloads\adwcleaner_3.213.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17126 -\\ Mozilla Firefox v30.0 (de) [ Datei : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\prefs.js ] -\\ Google Chrome v [ Datei : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [46064 octets] - [26/06/2014 00:30:27] AdwCleaner[R1].txt - [1167 octets] - [26/06/2014 00:56:43] AdwCleaner[S0].txt - [45808 octets] - [26/06/2014 00:31:15] AdwCleaner[S1].txt - [1089 octets] - [26/06/2014 00:58:09] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1149 octets] ########## Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 26.06.2014 Suchlauf-Zeit: 01:02:58 Logdatei: Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.25.18 Rootkit Datenbank: v2014.06.23.02 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x86 Dateisystem: NTFS Benutzer: admin Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 267150 Verstrichene Zeit: 15 Min, 44 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 1 PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [12d8fe7d700b171f9568dc6d887abc44], Registrierungswerte: 1 Trojan.Ransom.Gen, HKU\S-1-5-21-2742928999-3257237434-1072491205-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|EwpiSvono, regsvr32.exe "C:\ProgramData\EwpiSvono\EwpiSvono.dat", Löschen bei Neustart, [5d8d9edde5960a2c8a36f3110bf98c74] Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 5 PUP.Optional.Somoto.A, C:\Users\admin\Downloads\7ZipSetup.exe, In Quarantäne, [d8121665146755e1998581b7817feb15], PUP.Optional.Koyote.A, C:\Users\admin\Downloads\FreeVideoConverterSetup-r135-n-bf.exe, In Quarantäne, [e70326552b506cca4eb47dc8bc45837d], PUP.Optional.DomaIQ, C:\Users\admin\Downloads\Player_Setup.exe, In Quarantäne, [5d8dc4b78af11026572bc57d4eb2e51b], PUP.Optional.NewTab.A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bakijjialdiiboeaknfpmflphhmljfkd_0.localstorage, In Quarantäne, [d812eb90a1da41f5b122eb17eb191fe1], Trojan.Ransom.Gen, C:\ProgramData\EwpiSvono\EwpiSvono.dat, In Quarantäne, [5d8d9edde5960a2c8a36f3110bf98c74], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter
|
26.06.2014, 00:39 | #18 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Hi, wurde der PC nach dem Suchlauf von MBAM schon neu gestartet? Wenn nicht, bitte neu starten. Anschließend
__________________Schritt 1 Bitte starte FRST erneut, und drücke auf Scan. Bitte poste mir den Inhalt des Logs.
__________________ |
26.06.2014, 00:46 | #19 |
| "Avira wird durch eine Gruppenrichtlinie blockiert"FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014 Ran by admin (administrator) on ADMIN-PC on 26-06-2014 01:44:33 Running from C:\Users\admin\Downloads Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe (VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Sony) C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe () C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe () C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [1706096 2010-10-27] (VIA) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.) HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.) HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-04] (Avira Operations GmbH & Co. KG) HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-05-18] (Microsoft Corporation) HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony) HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.) HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.) HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Policies\Explorer: [TaskbarNoNotification] 0 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk ShortcutTarget: AML Device Install.lnk -> C:\Program Files\AMD AVT\bin\kdbsync.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x69F67AF84008CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=BDCF6DAE-E76B-45DD-A68C-D329956164D9&apn_sauid=72DB5C68-BBFE-414A-89E2-DA441947410A SearchScopes: HKCU - {E7DFEC4F-1E56-43FC-879E-21F642BE1D8A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050&SSPV=IEOB05 BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default FF Homepage: hxxp://msn.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\admin\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\admin\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26] FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-11] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-09] FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-09] Chrome: ======= CHR HomePage: CHR Plugin: (Shockwave Flash) - C:\Users\admin\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.50.5) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Users\admin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-09-20] CHR Extension: (Skype Click to Call) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-03-24] CHR Extension: (Google Wallet) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-20] CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-02-21] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-04] (Avira Operations GmbH & Co. KG) S4 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] () [File not signed] R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed] S3 npggsvc; C:\Windows\system32\GameMon.des [3975544 2012-05-09] (INCA Internet Co., Ltd.) [File not signed] R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed] S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1740600 2013-08-30] (TuneUp Software) S2 HPSLPSVC; C:\Users\admin\AppData\Local\Temp\7zS6B90\hpslpsvc32.dll [X] ==================== Drivers (Whitelisted) ==================== R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG) R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2006-11-02] (Microsoft Corporation) R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-23] (Avira GmbH) S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI) R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software) R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1149552 2010-10-25] (VIA Technologies, Inc.) S3 catchme; \??\C:\Users\admin\AppData\Local\Temp\catchme.sys [X] S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-26 01:34 - 2014-06-26 01:34 - 00121222 _____ () C:\Users\admin\Downloads\HitmanPro_20140626_0134.log 2014-06-26 01:28 - 2014-06-26 01:34 - 00000000 ____D () C:\ProgramData\HitmanPro 2014-06-26 01:28 - 2014-06-26 01:28 - 10274632 _____ (SurfRight B.V.) C:\Users\admin\Downloads\HitmanPro.exe 2014-06-26 01:01 - 2014-06-26 01:24 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-06-26 01:01 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-26 01:01 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-26 01:01 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-26 01:00 - 2014-06-26 01:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-26 00:49 - 2014-06-26 01:21 - 00000000 ____D () C:\ProgramData\EwpiSvono 2014-06-26 00:30 - 2014-06-26 00:58 - 00000000 ____D () C:\AdwCleaner 2014-06-26 00:30 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-06-26 00:29 - 2014-06-26 00:29 - 01342659 _____ () C:\Users\admin\Downloads\adwcleaner_3.213.exe 2014-06-26 00:22 - 2014-06-26 00:22 - 00015850 _____ () C:\ComboFix.txt 2014-06-25 23:58 - 2014-06-26 00:22 - 00000000 ____D () C:\Qoobox 2014-06-25 23:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-06-25 23:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-06-25 23:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-06-25 23:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-06-25 23:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-06-25 23:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-06-25 23:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-06-25 23:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-06-25 23:57 - 2014-06-26 00:20 - 00000000 ____D () C:\Windows\erdnt 2014-06-25 23:57 - 2014-06-25 23:57 - 05211571 ____R (Swearware) C:\Users\admin\Downloads\ComboFix.exe 2014-06-25 23:41 - 2014-06-25 23:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{186F2A27-6EF0-4FF8-9017-830AF6D5FE66} 2014-06-25 23:20 - 2014-06-25 23:20 - 00031594 _____ () C:\Users\admin\Downloads\Addition.txt 2014-06-25 23:18 - 2014-06-26 01:44 - 00016799 _____ () C:\Users\admin\Downloads\FRST.txt 2014-06-25 23:18 - 2014-06-26 01:44 - 00000000 ____D () C:\FRST 2014-06-25 23:18 - 2014-06-25 23:18 - 01073152 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe 2014-06-25 22:43 - 2014-06-25 22:44 - 00458833 _____ () C:\Users\admin\Downloads\kavremvr 2014-06-25 22-43-10 (pid 1952).log 2014-06-25 22:42 - 2014-06-25 22:42 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\admin\Downloads\kavremover.exe 2014-06-25 22:14 - 2014-06-25 22:20 - 173838160 _____ () C:\Users\admin\Downloads\New_PC_Studio_1.5.1.10064_2.exe 2014-06-25 11:40 - 2014-06-25 11:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{3EED6AA6-D524-4F07-A23E-4860E5EAE0FA} 2014-06-24 21:52 - 2014-06-24 21:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{EE0CC8EC-9A35-44BC-B3D4-099B1864FB9A} 2014-06-24 09:50 - 2014-06-24 09:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{53206F07-D646-4DA0-9417-B9741DC90340} 2014-06-24 00:07 - 2014-06-25 17:09 - 00020927 _____ () C:\Users\admin\Desktop\Bewerbung.odt 2014-06-23 20:48 - 2014-06-24 00:08 - 00000000 ____D () C:\Users\admin\Desktop\2014-06 (Jun) 2014-06-23 19:46 - 2014-06-23 19:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{16242B02-12BA-43F0-BE0D-423B07CD5790} 2014-06-22 11:44 - 2014-06-22 23:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{88AE844F-1371-4F20-9393-856F2B3D8B9D} 2014-06-21 15:29 - 2014-06-21 15:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{BFBB4C36-F3DB-47C7-AC18-3D5D4F33022E} 2014-06-20 23:06 - 2014-06-20 23:06 - 00000000 ____D () C:\Users\admin\AppData\Local\{5D338E0B-BF39-42C7-9C9E-DC5EF7E11EB8} 2014-06-18 18:07 - 2014-06-18 18:07 - 00000000 ____D () C:\Users\admin\AppData\Local\{949F82E3-9F21-4106-9CB9-63F221468110} 2014-06-18 16:55 - 2014-06-18 16:55 - 00000000 ____D () C:\Users\admin\AppData\Local\{638A86CE-1FF7-4B83-B9CA-B36829E18C4E} 2014-06-17 11:59 - 2014-06-17 11:59 - 00000000 ____D () C:\Users\admin\AppData\Local\{FEA4FC39-13F6-45A9-BE92-9440A4CCEBA8} 2014-06-16 23:50 - 2014-06-16 23:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{E3405660-900F-48FE-A6BF-EE7E5EAD42BC} 2014-06-16 11:49 - 2014-06-16 11:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{4873065B-A4D8-4FC7-9F47-4B235BFF68BA} 2014-06-15 12:03 - 2014-06-15 12:03 - 00000000 ____D () C:\Users\admin\AppData\Local\{8D34C924-5103-43C3-845E-85DA0FCF1DE9} 2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\admin\AppData\Local\{10937928-55C7-4757-866C-9C474354BC6B} 2014-06-13 21:50 - 2014-06-13 21:50 - 00052894 _____ () C:\Users\admin\Downloads\Dein Lebenslauf als PDF.zip 2014-06-13 19:22 - 2014-06-13 19:22 - 00000000 ____D () C:\Users\admin\Downloads\Originals 2014-06-13 19:20 - 2014-06-23 20:49 - 00006144 ____H () C:\Users\admin\Downloads\photothumb.db 2014-06-13 19:07 - 2014-06-17 20:50 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Windows Live Writer 2014-06-13 19:07 - 2014-06-13 19:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live Writer 2014-06-13 15:43 - 2014-06-13 15:44 - 00000000 ____D () C:\Users\admin\AppData\Local\{EFAE5DE0-F23D-488B-85F3-47370B533003} 2014-06-13 00:20 - 2014-06-13 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{301053BA-6CD3-4FA6-A086-052FB9A23B01} 2014-06-12 12:18 - 2014-06-12 12:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{1BF72EF0-3F48-4E5B-A4B4-6F9157DFC8BC} 2014-06-11 18:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-11 18:58 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-11 18:58 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-11 18:58 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-11 18:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-11 18:58 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-11 18:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-11 18:58 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-11 18:58 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-11 18:58 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-11 18:58 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-11 18:58 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-11 18:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-11 18:58 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-11 18:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-11 18:58 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-11 18:58 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-11 18:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-11 18:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-11 18:58 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-11 18:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-11 18:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-11 18:58 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-11 18:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-11 18:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-11 18:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-11 18:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-11 18:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-11 18:57 - 2014-05-08 11:06 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-11 18:57 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-11 18:57 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-11 18:57 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-11 18:57 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-11 18:57 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-11 18:57 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-11 18:57 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-11 18:33 - 2014-06-11 18:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-11 17:29 - 2014-06-11 17:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{570C1815-1684-4688-9D60-2AB1FCA1E52D} 2014-06-10 11:22 - 2014-06-10 23:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{A1EFE083-120B-478A-9D69-737FCD1764F5} 2014-06-09 20:24 - 2014-06-09 20:25 - 00000000 ____D () C:\Users\admin\AppData\Local\{22EADCD1-4D9E-4FDA-9DAC-DC2A6DC935CE} 2014-06-09 00:24 - 2014-06-09 00:25 - 00000000 ____D () C:\Users\admin\AppData\Local\{4CD33A4B-9A86-4AA9-A6A7-CC8611CB999D} 2014-06-08 12:23 - 2014-06-08 12:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{5ED21193-B9EA-477D-A7AC-8CBB3892C1B8} 2014-06-07 20:32 - 2014-06-07 20:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{1D38EC89-E9C7-4702-A4CD-DB2BB0D7AD14} 2014-06-06 12:33 - 2014-06-06 12:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{3F2984A0-D386-4C60-8003-19BBAFA0CB64} 2014-06-06 00:18 - 2014-06-06 00:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{7E55463D-B596-43E5-BEA7-B47DE940FB88} 2014-06-05 12:17 - 2014-06-05 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{CB1B5164-E548-42E0-8DD0-40545A9E28B1} 2014-06-05 00:17 - 2014-06-05 00:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{0BD0F7D6-C3FB-4ACE-9775-4B5296AC115D} 2014-06-04 12:16 - 2014-06-04 12:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{1B122807-7725-4D6B-955D-28B48ED5E356} 2014-06-03 12:14 - 2014-06-04 00:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{55B730A7-3FB8-4374-9002-12B26B186768} 2014-06-03 00:14 - 2014-06-03 00:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{8077B01F-A0B5-4708-9B04-8796367F3465} 2014-06-02 12:12 - 2014-06-02 12:13 - 00000000 ____D () C:\Users\admin\AppData\Local\{BBA74DDF-37FF-420D-8798-6D388996A694} 2014-06-01 11:52 - 2014-06-01 23:53 - 00000000 ____D () C:\Users\admin\AppData\Local\{3475AF7E-6E24-471E-8F9E-585BBF1B86B3} 2014-05-31 23:54 - 2014-05-31 23:55 - 59782173 _____ () C:\Users\admin\Downloads\Pokemon HeartGold.zip 2014-05-31 23:53 - 2014-06-01 00:04 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Opera Software 2014-05-31 23:53 - 2014-06-01 00:04 - 00000000 ____D () C:\Users\admin\AppData\Local\Opera Software 2014-05-31 23:52 - 2014-06-01 00:04 - 00000000 ____D () C:\Program Files\Opera 2014-05-31 23:51 - 2014-05-31 23:51 - 05250247 _____ () C:\Users\admin\Downloads\Pokemon FireRed.zip 2014-05-31 23:34 - 2014-05-31 23:34 - 00000000 ____D () C:\ProgramData\TEMP 2014-05-31 22:50 - 2014-05-31 22:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{AF090ECC-4319-438E-AD73-03F802547607} 2014-05-30 12:50 - 2014-05-31 00:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{A021ECFB-2079-4A1C-860B-85328AFF7AB0} 2014-05-30 11:56 - 2014-05-30 11:56 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype 2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-05-29 12:48 - 2014-05-30 00:49 - 00000000 ____D () C:\Users\admin\AppData\Local\{122B6BC9-CC46-4187-AE50-527B28905EE4} 2014-05-28 20:40 - 2014-06-04 20:38 - 00000000 ____D () C:\Users\admin\Desktop\PokeMMO-Client 2014-05-28 20:20 - 2014-05-28 20:21 - 00000000 ____D () C:\Users\admin\AppData\Local\{1A827180-D793-473F-9AD2-A1D63B7DA69C} 2014-05-28 00:19 - 2014-05-28 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{255B0D89-94EA-4A5F-B006-88B3F77AF1F3} 2014-05-27 12:18 - 2014-05-27 12:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{248FC10F-4936-4B0B-9DBE-FF1E957DD692} ==================== One Month Modified Files and Folders ======= 2014-06-26 01:45 - 2014-06-25 23:18 - 00016799 _____ () C:\Users\admin\Downloads\FRST.txt 2014-06-26 01:44 - 2014-06-25 23:18 - 00000000 ____D () C:\FRST 2014-06-26 01:43 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-26 01:43 - 2009-07-14 06:39 - 00092941 _____ () C:\Windows\setupact.log 2014-06-26 01:42 - 2012-03-10 17:35 - 00627532 _____ () C:\Windows\PFRO.log 2014-06-26 01:42 - 2012-03-09 20:29 - 01943143 _____ () C:\Windows\WindowsUpdate.log 2014-06-26 01:34 - 2014-06-26 01:34 - 00121222 _____ () C:\Users\admin\Downloads\HitmanPro_20140626_0134.log 2014-06-26 01:34 - 2014-06-26 01:28 - 00000000 ____D () C:\ProgramData\HitmanPro 2014-06-26 01:28 - 2014-06-26 01:28 - 10274632 _____ (SurfRight B.V.) C:\Users\admin\Downloads\HitmanPro.exe 2014-06-26 01:28 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-26 01:28 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-26 01:27 - 2012-03-09 20:53 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-26 01:24 - 2014-06-26 01:01 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-26 01:21 - 2014-06-26 00:49 - 00000000 ____D () C:\ProgramData\EwpiSvono 2014-06-26 01:21 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32 2014-06-26 01:07 - 2012-04-10 22:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-06-26 01:00 - 2014-06-26 01:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-26 00:58 - 2014-06-26 00:30 - 00000000 ____D () C:\AdwCleaner 2014-06-26 00:31 - 2012-03-13 22:38 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft 2014-06-26 00:29 - 2014-06-26 00:29 - 01342659 _____ () C:\Users\admin\Downloads\adwcleaner_3.213.exe 2014-06-26 00:22 - 2014-06-26 00:22 - 00015850 _____ () C:\ComboFix.txt 2014-06-26 00:22 - 2014-06-25 23:58 - 00000000 ____D () C:\Qoobox 2014-06-26 00:22 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-06-26 00:20 - 2014-06-25 23:57 - 00000000 ____D () C:\Windows\erdnt 2014-06-26 00:16 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-06-25 23:59 - 2012-09-08 00:14 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job 2014-06-25 23:57 - 2014-06-25 23:57 - 05211571 ____R (Swearware) C:\Users\admin\Downloads\ComboFix.exe 2014-06-25 23:41 - 2014-06-25 23:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{186F2A27-6EF0-4FF8-9017-830AF6D5FE66} 2014-06-25 23:20 - 2014-06-25 23:20 - 00031594 _____ () C:\Users\admin\Downloads\Addition.txt 2014-06-25 23:18 - 2014-06-25 23:18 - 01073152 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe 2014-06-25 23:12 - 2012-05-12 13:55 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job 2014-06-25 22:50 - 2012-03-25 22:03 - 00000000 ____D () C:\Users\admin\AppData\Local\CrashDumps 2014-06-25 22:44 - 2014-06-25 22:43 - 00458833 _____ () C:\Users\admin\Downloads\kavremvr 2014-06-25 22-43-10 (pid 1952).log 2014-06-25 22:42 - 2014-06-25 22:42 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\admin\Downloads\kavremover.exe 2014-06-25 22:32 - 2009-07-14 04:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-06-25 22:20 - 2014-06-25 22:14 - 173838160 _____ () C:\Users\admin\Downloads\New_PC_Studio_1.5.1.10064_2.exe 2014-06-25 22:18 - 2012-03-09 20:39 - 00000000 ____D () C:\Users\admin 2014-06-25 22:17 - 2012-03-13 22:36 - 00000000 ____D () C:\Users\admin\Desktop\HUONG 2014-06-25 17:09 - 2014-06-24 00:07 - 00020927 _____ () C:\Users\admin\Desktop\Bewerbung.odt 2014-06-25 14:12 - 2012-05-12 13:55 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job 2014-06-25 11:41 - 2014-06-25 11:40 - 00000000 ____D () C:\Users\admin\AppData\Local\{3EED6AA6-D524-4F07-A23E-4860E5EAE0FA} 2014-06-24 22:09 - 2012-08-08 13:39 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype 2014-06-24 21:52 - 2014-06-24 21:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{EE0CC8EC-9A35-44BC-B3D4-099B1864FB9A} 2014-06-24 17:59 - 2012-09-08 00:14 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job 2014-06-24 16:22 - 2012-07-05 23:19 - 00498794 _____ () C:\Windows\DPINST.LOG 2014-06-24 16:22 - 2012-07-05 23:19 - 00001972 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2014-06-24 16:22 - 2012-07-05 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2014-06-24 16:22 - 2012-03-10 17:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-06-24 09:50 - 2014-06-24 09:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{53206F07-D646-4DA0-9417-B9741DC90340} 2014-06-24 00:08 - 2014-06-23 20:48 - 00000000 ____D () C:\Users\admin\Desktop\2014-06 (Jun) 2014-06-23 20:49 - 2014-06-13 19:20 - 00006144 ____H () C:\Users\admin\Downloads\photothumb.db 2014-06-23 20:49 - 2012-09-08 12:57 - 00071680 ____H () C:\Users\admin\Desktop\photothumb.db 2014-06-23 19:46 - 2014-06-23 19:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{16242B02-12BA-43F0-BE0D-423B07CD5790} 2014-06-22 23:46 - 2014-06-22 11:44 - 00000000 ____D () C:\Users\admin\AppData\Local\{88AE844F-1371-4F20-9393-856F2B3D8B9D} 2014-06-21 15:29 - 2014-06-21 15:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{BFBB4C36-F3DB-47C7-AC18-3D5D4F33022E} 2014-06-20 23:06 - 2014-06-20 23:06 - 00000000 ____D () C:\Users\admin\AppData\Local\{5D338E0B-BF39-42C7-9C9E-DC5EF7E11EB8} 2014-06-18 18:08 - 2012-03-13 19:53 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live 2014-06-18 18:07 - 2014-06-18 18:07 - 00000000 ____D () C:\Users\admin\AppData\Local\{949F82E3-9F21-4106-9CB9-63F221468110} 2014-06-18 16:55 - 2014-06-18 16:55 - 00000000 ____D () C:\Users\admin\AppData\Local\{638A86CE-1FF7-4B83-B9CA-B36829E18C4E} 2014-06-17 20:50 - 2014-06-13 19:07 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Windows Live Writer 2014-06-17 11:59 - 2014-06-17 11:59 - 00000000 ____D () C:\Users\admin\AppData\Local\{FEA4FC39-13F6-45A9-BE92-9440A4CCEBA8} 2014-06-16 23:50 - 2014-06-16 23:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{E3405660-900F-48FE-A6BF-EE7E5EAD42BC} 2014-06-16 11:50 - 2014-06-16 11:49 - 00000000 ____D () C:\Users\admin\AppData\Local\{4873065B-A4D8-4FC7-9F47-4B235BFF68BA} 2014-06-15 12:03 - 2014-06-15 12:03 - 00000000 ____D () C:\Users\admin\AppData\Local\{8D34C924-5103-43C3-845E-85DA0FCF1DE9} 2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\admin\AppData\Local\{10937928-55C7-4757-866C-9C474354BC6B} 2014-06-13 21:50 - 2014-06-13 21:50 - 00052894 _____ () C:\Users\admin\Downloads\Dein Lebenslauf als PDF.zip 2014-06-13 21:02 - 2012-09-08 00:15 - 00002322 _____ () C:\Users\admin\Desktop\Google Chrome.lnk 2014-06-13 19:22 - 2014-06-13 19:22 - 00000000 ____D () C:\Users\admin\Downloads\Originals 2014-06-13 19:08 - 2014-06-13 19:07 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live Writer 2014-06-13 15:44 - 2014-06-13 15:43 - 00000000 ____D () C:\Users\admin\AppData\Local\{EFAE5DE0-F23D-488B-85F3-47370B533003} 2014-06-13 00:20 - 2014-06-13 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{301053BA-6CD3-4FA6-A086-052FB9A23B01} 2014-06-12 19:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-06-12 12:19 - 2014-06-12 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{1BF72EF0-3F48-4E5B-A4B4-6F9157DFC8BC} 2014-06-12 12:15 - 2012-04-26 19:00 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-12 01:16 - 2013-08-14 23:16 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-12 01:15 - 2012-07-07 20:26 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-11 18:33 - 2014-06-11 18:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-11 17:29 - 2014-06-11 17:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{570C1815-1684-4688-9D60-2AB1FCA1E52D} 2014-06-10 23:23 - 2014-06-10 11:22 - 00000000 ____D () C:\Users\admin\AppData\Local\{A1EFE083-120B-478A-9D69-737FCD1764F5} 2014-06-09 20:25 - 2014-06-09 20:24 - 00000000 ____D () C:\Users\admin\AppData\Local\{22EADCD1-4D9E-4FDA-9DAC-DC2A6DC935CE} 2014-06-09 00:25 - 2014-06-09 00:24 - 00000000 ____D () C:\Users\admin\AppData\Local\{4CD33A4B-9A86-4AA9-A6A7-CC8611CB999D} 2014-06-08 12:23 - 2014-06-08 12:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{5ED21193-B9EA-477D-A7AC-8CBB3892C1B8} 2014-06-07 20:33 - 2014-06-07 20:32 - 00000000 ____D () C:\Users\admin\AppData\Local\{1D38EC89-E9C7-4702-A4CD-DB2BB0D7AD14} 2014-06-06 12:33 - 2014-06-06 12:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{3F2984A0-D386-4C60-8003-19BBAFA0CB64} 2014-06-06 00:18 - 2014-06-06 00:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{7E55463D-B596-43E5-BEA7-B47DE940FB88} 2014-06-05 12:18 - 2014-06-05 12:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{CB1B5164-E548-42E0-8DD0-40545A9E28B1} 2014-06-05 00:17 - 2014-06-05 00:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{0BD0F7D6-C3FB-4ACE-9775-4B5296AC115D} 2014-06-04 20:38 - 2014-05-28 20:40 - 00000000 ____D () C:\Users\admin\Desktop\PokeMMO-Client 2014-06-04 13:40 - 2013-08-24 12:16 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-06-04 13:40 - 2013-08-24 12:16 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-04 12:16 - 2014-06-04 12:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{1B122807-7725-4D6B-955D-28B48ED5E356} 2014-06-04 00:16 - 2014-06-03 12:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{55B730A7-3FB8-4374-9002-12B26B186768} 2014-06-03 00:14 - 2014-06-03 00:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{8077B01F-A0B5-4708-9B04-8796367F3465} 2014-06-02 12:13 - 2014-06-02 12:12 - 00000000 ____D () C:\Users\admin\AppData\Local\{BBA74DDF-37FF-420D-8798-6D388996A694} 2014-06-01 23:53 - 2014-06-01 11:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{3475AF7E-6E24-471E-8F9E-585BBF1B86B3} 2014-06-01 00:04 - 2014-05-31 23:53 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Opera Software 2014-06-01 00:04 - 2014-05-31 23:53 - 00000000 ____D () C:\Users\admin\AppData\Local\Opera Software 2014-06-01 00:04 - 2014-05-31 23:52 - 00000000 ____D () C:\Program Files\Opera 2014-05-31 23:55 - 2014-05-31 23:54 - 59782173 _____ () C:\Users\admin\Downloads\Pokemon HeartGold.zip 2014-05-31 23:51 - 2014-05-31 23:51 - 05250247 _____ () C:\Users\admin\Downloads\Pokemon FireRed.zip 2014-05-31 23:34 - 2014-05-31 23:34 - 00000000 ____D () C:\ProgramData\TEMP 2014-05-31 23:33 - 2012-04-03 18:46 - 00000000 ____D () C:\Users\admin\AppData\Local\Microsoft Games 2014-05-31 22:50 - 2014-05-31 22:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{AF090ECC-4319-438E-AD73-03F802547607} 2014-05-31 00:52 - 2014-05-30 12:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{A021ECFB-2079-4A1C-860B-85328AFF7AB0} 2014-05-30 11:56 - 2014-05-30 11:56 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype 2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-05-30 11:56 - 2012-08-08 13:39 - 00000000 ___RD () C:\Program Files\Skype 2014-05-30 11:56 - 2012-08-08 13:39 - 00000000 ____D () C:\ProgramData\Skype 2014-05-30 11:18 - 2014-06-11 18:58 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-30 11:02 - 2014-06-11 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-30 11:02 - 2014-06-11 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 10:44 - 2014-06-11 18:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 10:43 - 2014-06-11 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 10:42 - 2014-06-11 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 10:38 - 2014-06-11 18:58 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 10:34 - 2014-06-11 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 10:33 - 2014-06-11 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 10:30 - 2014-06-11 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 10:28 - 2014-06-11 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 10:28 - 2014-06-11 18:58 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 10:27 - 2014-06-11 18:58 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 10:21 - 2014-06-11 18:58 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 10:16 - 2014-06-11 18:58 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 10:10 - 2014-06-11 18:58 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 10:06 - 2014-06-11 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 10:04 - 2014-06-11 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-30 10:02 - 2014-06-11 18:58 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 09:57 - 2014-06-11 18:58 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 09:56 - 2014-06-11 18:58 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 09:54 - 2014-06-11 18:58 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 09:50 - 2014-06-11 18:58 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-30 09:49 - 2014-06-11 18:58 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 09:40 - 2014-06-11 18:58 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 09:21 - 2014-06-11 18:58 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 09:15 - 2014-06-11 18:58 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 09:13 - 2014-06-11 18:58 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-30 00:49 - 2014-05-29 12:48 - 00000000 ____D () C:\Users\admin\AppData\Local\{122B6BC9-CC46-4187-AE50-527B28905EE4} 2014-05-28 20:21 - 2014-05-28 20:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{1A827180-D793-473F-9AD2-A1D63B7DA69C} 2014-05-28 00:20 - 2014-05-28 00:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{255B0D89-94EA-4A5F-B006-88B3F77AF1F3} 2014-05-27 12:19 - 2014-05-27 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{248FC10F-4936-4B0B-9DBE-FF1E957DD692} 2014-05-27 00:14 - 2014-05-26 12:13 - 00000000 ____D () C:\Users\admin\AppData\Local\{93E7D62A-2DDD-4946-AC45-78B125FFAD72} Some content of TEMP: ==================== C:\Users\admin\AppData\Local\temp\avgnt.exe C:\Users\admin\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-18 22:19 ==================== End Of Log ============================ |
26.06.2014, 00:51 | #20 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Gut... Um die Gruppenrichtlinien kümmern wir uns später... Jetzt noch das hier. Ein Scan, der sehr lange dauert. Schritt 1 ESET Online Scanner
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
26.06.2014, 00:53 | #21 |
| "Avira wird durch eine Gruppenrichtlinie blockiert" sehr lange ? haha können wir morgen Abend damit weiter machen ? Ist für meine Verhältnisse schon spät und muss morgen früh aufstehen.. bis hierhin vielen vielen lieben dank ich fange morgen abend mit dem scan an Gute Nacht und bis morgen !! |
26.06.2014, 00:57 | #22 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Na klar reicht das morgen auch noch... Gute Nacht...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
26.06.2014, 22:05 | #23 |
| "Avira wird durch eine Gruppenrichtlinie blockiert" halloooo bin wieder da Fange jz mit dem scan an |
26.06.2014, 22:06 | #24 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Der wird aber heute nicht mehr fertig...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
26.06.2014, 22:24 | #25 |
| "Avira wird durch eine Gruppenrichtlinie blockiert" der scan?? warum :O dauert der etwa so lange? |
26.06.2014, 22:26 | #26 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Jup...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
26.06.2014, 23:25 | #27 |
| "Avira wird durch eine Gruppenrichtlinie blockiert" oh man... heute wirds wohl wirklich nichts.. morgen bin ich nicht zuhause und samstag auch nicht lang... also dann wohl sonntag :/ bis dahin ! |
26.06.2014, 23:32 | #28 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Lass halt über Nacht laufen und poste in der Früh...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
26.06.2014, 23:33 | #29 |
| "Avira wird durch eine Gruppenrichtlinie blockiert" meinst du es wird bis morgen früh fertig sein? |
26.06.2014, 23:35 | #30 |
/// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Naja...so mache ich es halt immer mit den PC's die Freunde anschleppen... Und bis morgen früh sollte es fertig sein. Muss ja nicht unbedingt so gemacht werden. Wir richten uns nach den Usern.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |