Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 14-08-31.01 - Vano 31.08.2014 11:35:52.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.8189.6614 [GMT 2:00]
ausgeführt von:: c:\users\Vano\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Vano\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\Vano\Desktop\EqniLexce.bat
G:\install.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-07-28 bis 2014-08-31 ))))))))))))))))))))))))))))))
.
.
2014-08-31 07:13 . 2014-07-25 13:42 48128 ----a-w- c:\program files\Internet Explorer\DiagnosticsHub_is.dll
2014-08-30 12:13 . 2014-08-30 12:13 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-08-30 12:13 . 2014-08-30 12:13 699568 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-08-30 12:08 . 2014-08-30 12:10 -------- d-----w- c:\program files (x86)\Google
2014-08-30 08:37 . 2014-08-30 08:40 -------- d-----w- C:\FRST
2014-08-30 07:41 . 2014-08-30 07:41 -------- d-----w- c:\windows\SysWow64\wbem\en-US
2014-08-30 07:41 . 2014-08-30 07:41 -------- d-----w- c:\windows\system32\wbem\en-US
2014-08-30 07:32 . 2014-08-30 07:34 -------- d-----w- c:\program files (x86)\PDF24
2014-08-30 07:28 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-08-30 07:23 . 2014-08-30 07:23 878080 ----a-w- c:\windows\system32\advapi32.dll
2014-08-30 07:22 . 2014-08-30 07:22 1887232 ----a-w- c:\windows\system32\d3d11.dll
2014-08-30 07:22 . 2014-08-30 07:22 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2014-08-30 07:19 . 2014-08-30 07:20 -------- d-----w- c:\windows\system32\MRT
2014-08-30 07:12 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-08-30 07:12 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2014-08-30 07:12 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-08-30 07:12 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2014-08-30 07:12 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2014-08-30 07:12 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-08-30 07:11 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-08-30 07:11 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-08-30 07:09 . 2014-06-03 10:02 1719296 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-08-30 07:08 . 2012-06-06 06:05 495616 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2014-08-30 07:04 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2014-08-30 07:04 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2014-08-29 22:31 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2014-08-29 22:29 . 2013-07-26 02:24 197120 ----a-w- c:\windows\system32\shdocvw.dll
2014-08-29 22:29 . 2014-06-03 10:02 112064 ----a-w- c:\windows\system32\consent.exe
2014-08-29 22:29 . 2014-06-03 10:02 504320 ----a-w- c:\windows\system32\msihnd.dll
2014-08-29 22:29 . 2014-06-03 10:02 3241984 ----a-w- c:\windows\system32\msi.dll
2014-08-29 22:29 . 2014-06-03 10:02 1941504 ----a-w- c:\windows\system32\authui.dll
2014-08-29 22:29 . 2014-06-03 09:29 337408 ----a-w- c:\windows\SysWow64\msihnd.dll
2014-08-29 22:29 . 2014-06-03 09:29 2363392 ----a-w- c:\windows\SysWow64\msi.dll
2014-08-29 22:29 . 2014-06-03 09:29 1805824 ----a-w- c:\windows\SysWow64\authui.dll
2014-08-29 22:29 . 2013-02-27 05:47 70144 ----a-w- c:\windows\system32\appinfo.dll
2014-08-29 22:27 . 2010-12-23 10:42 961024 ----a-w- c:\windows\system32\CPFilters.dll
2014-08-29 22:26 . 2011-06-15 10:02 212992 ----a-w- c:\windows\system32\odbctrac.dll
2014-08-28 21:06 . 2014-08-28 21:16 -------- d-----w- c:\program files (x86)\Samsung
2014-08-28 21:06 . 2014-08-28 21:06 -------- d-----w- c:\programdata\Samsung
2014-08-28 18:54 . 2014-08-28 18:55 -------- d-----w- c:\program files\PDF XChange Viewer
2014-08-28 15:16 . 2014-08-30 15:39 -------- d-----w- c:\programdata\EqniLexce
2014-08-28 13:46 . 2014-08-28 13:47 -------- d-----w- c:\program files\KMSpico
2014-08-28 13:45 . 2014-08-28 21:27 -------- d-----w- c:\windows\AutoKMS
2014-08-28 13:44 . 2014-08-28 13:44 -------- d-----w- c:\programdata\Microsoft Toolkit
2014-08-28 12:05 . 2014-08-28 12:05 -------- d-----w- c:\program files\Common Files\DESIGNER
2014-08-28 12:05 . 2014-08-28 12:05 -------- d-----w- c:\program files\Microsoft.NET
2014-08-28 12:05 . 2014-08-28 12:05 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2014-08-28 12:05 . 2014-08-28 12:05 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2014-08-28 12:05 . 2014-08-28 12:05 -------- d-----w- c:\program files\Microsoft SQL Server
2014-08-28 12:05 . 2014-08-28 12:05 -------- d-----w- c:\windows\PCHEALTH
2014-08-28 12:02 . 2014-08-28 12:02 -------- d-----w- c:\program files\Microsoft Analysis Services
2014-08-28 12:02 . 2014-08-28 12:02 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-08-28 12:02 . 2014-08-28 12:05 -------- d-----w- c:\program files\Microsoft Office
2014-08-28 12:02 . 2014-08-28 12:02 -------- d-----r- C:\MSOCache
2014-08-28 11:40 . 2007-12-13 20:16 73728 ------w- c:\windows\SysWow64\BrDctF2.dll
2014-08-28 11:40 . 2007-12-13 20:16 5632 ------w- c:\windows\SysWow64\BrDctF2L.dll
2014-08-28 11:40 . 2007-12-13 20:16 3072 ------w- c:\windows\SysWow64\BrDctF2S.dll
2014-08-28 11:40 . 2006-12-28 11:39 176128 ------w- c:\windows\SysWow64\BroSNMP.dll
2014-08-28 11:40 . 2014-08-28 11:40 -------- d-----w- c:\program files (x86)\Brother
2014-08-28 11:40 . 2008-06-17 13:33 167936 ------w- c:\windows\SysWow64\NSSearch.dll
2014-08-28 11:39 . 2014-08-28 11:39 -------- d-----w- c:\programdata\Brother
2014-08-28 06:46 . 2014-08-28 06:47 -------- d-----w- c:\users\Public\TVgenial
2014-08-28 06:46 . 2014-08-28 06:46 -------- d-----w- c:\program files (x86)\TVgenial
2014-08-28 00:17 . 2014-08-28 00:17 -------- d-----w- C:\Games
2014-08-27 23:26 . 2010-04-10 07:03 77824 ----a-w- c:\windows\KMService.exe
2014-08-27 23:26 . 2003-04-18 17:06 8192 ----a-w- c:\windows\SysWow64\srvany.exe
2014-08-27 23:20 . 2014-08-28 12:12 -------- d-----w- c:\programdata\Microsoft Help
2014-08-27 22:55 . 2014-08-27 22:55 7168 ----a-w- c:\windows\system32\kbdRuBxA.dll
2014-08-27 22:55 . 2014-08-27 22:55 6656 ----a-w- c:\windows\SysWow64\kbdRuBxA.dll
2014-08-27 21:06 . 2014-08-27 21:06 -------- d-----w- c:\program files (x86)\SopCast
2014-08-27 21:01 . 2014-08-27 21:03 -------- d-----w- c:\programdata\Skype
2014-08-27 20:18 . 2014-08-27 20:19 -------- d-----w- c:\program files (x86)\Winamp
2014-08-27 20:03 . 2014-08-27 20:03 -------- d-----w- c:\program files\VideoLAN
2014-08-27 19:55 . 2014-08-27 19:55 -------- d-----w- c:\windows\SysWow64\Macromed
2014-08-27 19:55 . 2014-08-27 19:55 -------- d-----w- c:\windows\system32\Macromed
2014-08-27 19:28 . 2014-08-15 08:30 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2014-08-27 19:28 . 2014-08-15 08:30 130584 ----a-w- c:\windows\system32\drivers\avipbb.sys
2014-08-27 19:28 . 2014-08-15 08:30 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-08-27 19:27 . 2014-08-27 19:28 -------- d-----w- c:\programdata\Avira
2014-08-27 19:27 . 2014-08-27 19:28 -------- d-----w- c:\program files (x86)\Avira
2014-08-27 19:19 . 2006-06-09 13:20 3072 ----a-w- c:\windows\SysWow64\CTXFIGER.DLL
2014-08-27 19:19 . 2006-06-09 13:20 3072 ----a-w- c:\windows\system32\CTXFIGER.DLL
2014-08-27 19:19 . 2004-07-30 12:46 20480 ----a-w- c:\windows\SysWow64\INRESGER.DLL
2014-08-27 19:19 . 2004-07-30 12:46 20480 ----a-w- c:\windows\system32\INRESGER.DLL
2014-08-27 19:19 . 2014-08-27 19:19 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2014-08-27 19:11 . 2013-01-25 11:58 1368064 ----a-w- c:\programdata\Microsoft\Windows\Templates\OEM\GamingMouseEditor\Setup.exe
2014-08-27 19:11 . 2014-08-27 19:11 -------- d-----w- c:\program files (x86)\GamingMouseEditor
2014-08-27 19:00 . 2014-08-27 19:00 -------- d-----w- c:\program files (x86)\MonitorDriver
2014-08-27 18:40 . 2014-08-27 18:40 -------- d-----w- c:\programdata\ATI
2014-08-27 18:34 . 2014-08-27 18:34 0 ----a-w- c:\windows\ativpsrm.bin
2014-08-27 18:33 . 2014-08-27 18:33 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2014-08-27 18:33 . 2014-08-27 18:33 -------- d-----w- c:\program files\Common Files\ATI Technologies
2014-08-27 18:26 . 2014-05-14 16:23 44512 ----a-w- c:\windows\system32\wups2.dll
2014-08-27 18:26 . 2014-05-14 16:23 58336 ----a-w- c:\windows\system32\wuauclt.exe
2014-08-27 18:26 . 2014-05-14 16:23 2477536 ----a-w- c:\windows\system32\wuaueng.dll
2014-08-27 18:26 . 2014-05-14 16:21 2620928 ----a-w- c:\windows\system32\wucltux.dll
2014-08-27 18:25 . 2014-05-14 16:23 38880 ----a-w- c:\windows\system32\wups.dll
2014-08-27 18:25 . 2014-05-14 16:23 36320 ----a-w- c:\windows\SysWow64\wups.dll
2014-08-27 18:25 . 2014-05-14 16:23 700384 ----a-w- c:\windows\system32\wuapi.dll
2014-08-27 18:25 . 2014-05-14 16:23 581600 ----a-w- c:\windows\SysWow64\wuapi.dll
2014-08-27 18:25 . 2014-05-14 16:20 97792 ----a-w- c:\windows\system32\wudriver.dll
2014-08-27 18:25 . 2014-05-14 16:17 92672 ----a-w- c:\windows\SysWow64\wudriver.dll
2014-08-27 18:25 . 2014-05-14 07:23 198600 ----a-w- c:\windows\system32\wuwebv.dll
2014-08-27 18:25 . 2014-05-14 07:23 179656 ----a-w- c:\windows\SysWow64\wuwebv.dll
2014-08-27 18:25 . 2014-05-14 07:20 36864 ----a-w- c:\windows\system32\wuapp.exe
2014-08-27 18:25 . 2014-05-14 07:17 33792 ----a-w- c:\windows\SysWow64\wuapp.exe
2014-08-27 18:09 . 2014-08-27 19:26 -------- d-----w- c:\programdata\Package Cache
2014-08-27 17:45 . 2014-08-27 17:45 -------- d-----w- c:\program files (x86)\AMD AVT
2014-08-27 17:45 . 2014-08-27 18:10 -------- d-----w- c:\program files\AMD
2014-08-27 17:44 . 2014-08-27 17:45 -------- d-----w- c:\programdata\AMD
2014-08-27 17:44 . 2014-08-27 17:44 -------- d-----w- c:\program files (x86)\ATI Technologies
2014-08-27 17:42 . 2014-08-27 17:42 -------- d-----w- C:\AMD
2014-08-27 17:29 . 2014-08-28 12:05 -------- d-----w- c:\program files (x86)\Microsoft.NET
2014-08-27 17:28 . 2014-08-27 17:28 -------- d-----w- c:\windows\Migration
2014-08-27 17:10 . 2014-08-27 17:12 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2014-08-27 17:07 . 2011-09-29 09:30 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2014-08-27 17:07 . 2011-09-29 09:30 646248 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2014-08-27 17:07 . 2011-09-29 09:30 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2014-08-27 17:07 . 2014-08-28 11:40 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2014-08-27 17:07 . 2014-08-27 17:07 -------- d-----w- c:\program files (x86)\Realtek
2014-08-27 16:31 . 2014-08-27 16:31 -------- d-----w- c:\program files\DIFX
2014-08-27 16:31 . 2014-08-27 16:31 -------- dc----w- c:\windows\system32\DRVSTORE
2014-08-27 16:31 . 2014-08-27 16:31 -------- d-----w- c:\program files (x86)\AMD
2014-08-27 16:31 . 2009-04-03 04:39 34872 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2014-08-27 16:31 . 2014-08-27 16:31 -------- d-----w- c:\program files\ATI
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-07-27 09:45 1730256 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-07-27 09:45 1730256 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-07-27 09:45 1730256 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GamingMouseEditor"="c:\program files (x86)\GamingMouseEditor\GamingMouseEditor\GamingMouseEditor.exe" [2013-04-09 3352576]
"EqniLexce"="c:\programdata\EqniLexce\EqniLexce.dat" [2014-08-28 255488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
"CTxfiHlp"="CTXFIHLP.EXE" [2014-02-28 26112]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-14 165624]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-08-15 751184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 KMService;KMService;c:\windows\system32\srvany.exe;c:\windows\SYSNATIVE\srvany.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2014-08-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-30 12:13]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-07-27 09:41 2335960 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-07-27 09:41 2335960 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-07-27 09:41 2335960 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~1\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Vano\AppData\Roaming\Mozilla\Firefox\Profiles\n5khvye1.default\
FF - prefs.js: browser.startup.homepage - hxxp://gazeta.ru/
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\SysWOW64\srvany.exe
c:\windows\KMService.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-08-31 11:45:33 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2014-08-31 09:45
.
Vor Suchlauf: 9 Verzeichnis(se), 60.928.978.944 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 61.439.668.224 Bytes frei
.
- - End Of File - - ED69CBF7747A55D974A36FCF01BDFEDF
A36C5E4F47E84449FF07ED3517B43A31
Combofix hat übrigens die Datei "Eqnilexce.dat" von meinem Desktop gelöscht, die ich oben als Zip-Archiv gepostet hatte.
Allerdings ist die ursprüngliche Datei "Eqnilexce.dat" im Ordner "C:\ProgramData\EqniLexce" immer noch vorhanden.
Ich merke gerade, dass meine Surfgeschwindigkeit im Internet stark zugenommen hat.
Vor der Ausführung von Combofix wurde jede neue URL langsam geladen und danach noch ewig "nachgeladen". Jetzt werden die Webseiten schnell und ohne "Nachladen" dargestellt.
31.08.2014, 10:57
Baum-Darstellung