Trojaner-Board - WinVista: Neuer Tab öffnet sich von alleine bei MFF (http://7.rotator.wigetmedia.com/...)

Hi schrauber,

Soluto habe ich neu installiert und es funktioniert jetzt wieder.
Ebenso mußte ich Skype und SkypePlus neu installieren, weil diese nicht gestartet sind und auch manuell konnte ich diese Progs nicht ausführen. Beide funktionieren jetzt auch.

Hier ein frisches FRST:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03

Ran by Jason (administrator) on JASONS-PC on 17-09-2013 16:45:30

Running from C:\Users\Jason\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Soluto) c:\program files\soluto\soluto.exe

(Steganos GmbH) C:\Program Files\Steganos Mail CleanUp\smc.exe

() C:\Program Files\GfKLSPService\GfK-WatchDog.exe

() C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe

() C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe

(GfK) C:\Program Files\GfKLSPService\GfKLSPService.exe

(Yuna Software) C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe

(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.0.1.3\NIS.exe

(Soluto) C:\Program Files\Soluto\SolutoLauncherService.exe

(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.0.1.3\NIS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Soluto) C:\Program Files\Soluto\SolutoService.exe

(GlavSoft LLC.) C:\Program Files\Soluto\SolutoRemoteService.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

(Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Steganos Mail CleanUp] - C:\PROGRA~1\STEGAN~1\SMC.EXE [1484800 2002-10-10] (Steganos GmbH)

HKLM\...\Run: [GfK-WatchDog] - C:\Program Files\GfKLSPService\GfK-WatchDog.exe [58856 2013-07-15] ()

HKLM\...\Run: [MessengerPlusForSkypeService] - C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-06-27] (Yuna Software)

HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit

HKLM\...\Policies\Explorer: [LockTaskbar] 1

HKLM\...\Policies\Explorer: [NoDrives] 0

HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)

HKCU\...\Policies\system: [DisableLockWorkstation] 1

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKCU\...\Policies\Explorer: [NoNetConnectDisconnect] 1

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 1

HKCU\...\Policies\Explorer: [NoRecentDocsNetHood] 1

HKCU\...\Policies\Explorer: [NoDrives] 0

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\UpdatusUser\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x20BBB51E800FCE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)

BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.0.1.3\coIEPlg.dll (Symantec Corporation)

BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.0.1.3\IPS\IPSBHO.DLL (Symantec Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.0.1.3\coIEPlg.dll (Symantec Corporation)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.3.1/jinstall-1_3_1_18-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.3.1/jinstall-1_3_1_18-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: AutorunsDisabled\mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)

Handler: AutorunsDisabled\wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)

Filter: AutorunsDisabled - No CLSID Value - No File

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Path=Profiles\JonDoFox

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Adobe\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin: @pack.google.com/Google Updater;version=12 - C:\Program Files\Google\Google Updater\2.2.1273.1045\npCIDetect12.dll (Google)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Adobe\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Adobe\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF HKLM\...\Firefox\Extensions: [gacela2@nurago.com] - C:\Program Files\GfK Internet-Monitor

FF Extension: GfK Internet-Monitor - C:\Program Files\GfK Internet-Monitor

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\

FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFFPlgn\

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFFPlgn\
 

========================== Services (Whitelisted) =================
 

S4 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)

S3 Automatisches LiveUpdate - Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [554352 2007-09-26] (Symantec Corporation)

S3 GenericMount Helper Service; C:\Program Files\Norton Ghost\Shared\Drivers\GenericMountHelper.exe [1574408 2010-02-12] (Symantec)

R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3019752 2013-07-15] ()

R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376232 2013-07-15] ()

R2 GfKLSPService; C:\Program Files\GfKLSPService\GfKLSPService.exe [3300328 2013-07-15] (GfK)

S3 gupdate1c98a32f5682443; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-02-08] (Google Inc.)

R2 iprip; C:\Windows\System32\iprip.dll [29696 2006-11-02] (Microsoft Corporation)

S3 LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE [2999664 2007-09-26] (Symantec Corporation)

R2 MsgPlusService; C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [128000 2013-06-27] (Yuna Software)

R2 NIS; C:\Program Files\Norton Internet Security\Engine\21.0.1.3\diMaster.dll [561968 2013-08-01] (Symantec Corporation)

S3 Norton Ghost; C:\Program Files\Norton Ghost\Agent\VProSvc.exe [4590432 2010-03-03] (Symantec Corporation)

R2 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [166976 2013-09-02] (Soluto)

R3 SolutoRemoteService; C:\Program Files\Soluto\SolutoRemoteService.exe [1667584 2013-09-02] (GlavSoft LLC.)

R2 SolutoService; C:\Program Files\Soluto\SolutoService.exe [819776 2013-09-02] (Soluto)

S3 Symantec RemoteAssist; C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)

S3 Symantec SymSnap VSS Provider; C:\Windows\system32\dllhost.exe [7168 2006-11-02] (Microsoft Corporation)

S3 SymSnapService; C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe [1964528 2010-02-11] (Symantec)

S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation)

S4 a2AntiMalware; "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2service.exe" [x]
 

==================== Drivers (Whitelisted) ====================
 

R3 AmUStor; C:\Windows\System32\drivers\AmUStor.SYS [63616 2012-10-28] (Alcor Micro, Corp.)

R1 BHDrvx86; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\BASHDefs\20130903.002\BHDrvx86.sys [1097816 2013-09-04] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1500010.003\ccSetx86.sys [117336 2013-07-30] (Symantec Corporation)

R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)

R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-09-14] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-09-14] (Symantec Corporation)

R3 GenericMount; C:\Windows\System32\DRIVERS\GenericMount.sys [57840 2010-02-12] (Symantec Corporation)

S3 hcdriver; C:\Windows\System32\DRIVERS\hcdriver.sys [50688 2012-01-27] (Intel Corporation)

R1 IDSVix86; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\IPSDefs\20130913.001\IDSvix86.sys [392792 2013-09-13] (Symantec Corporation)

S3 k750bus; C:\Windows\System32\DRIVERS\k750bus.sys [55216 2005-02-11] (MCCI)

S3 k750mgmt; C:\Windows\System32\DRIVERS\k750mgmt.sys [81728 2007-12-24] (MCCI)

S3 k750obex; C:\Windows\System32\DRIVERS\k750obex.sys [79488 2007-12-24] (MCCI)

R0 MxEFUF; C:\Windows\System32\DRIVERS\MxEFUF32.sys [108544 2011-08-15] (Matrox Graphics Inc.)

R3 NAVENG; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20130916.003\NAVENG.SYS [93272 2013-09-14] (Symantec Corporation)

R3 NAVEX15; C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20130916.003\NAVEX15.SYS [1612376 2013-09-14] (Symantec Corporation)

R0 Soluto; C:\Windows\System32\DRIVERS\Soluto.sys [51144 2013-09-02] (Soluto LTD.)

R3 SRTSP; C:\Windows\System32\Drivers\NIS\1500010.003\SRTSP.SYS [650840 2013-07-31] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NIS\1500010.003\SRTSPX.SYS [32344 2013-07-31] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NIS\1500010.003\SYMDS.SYS [367704 2013-08-01] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NIS\1500010.003\SYMEFA.SYS [935000 2013-08-05] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2013-09-15] (Symantec Corporation)

R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [63576 2013-08-07] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NIS\1500010.003\Ironx86.SYS [206936 2013-07-31] (Symantec Corporation)

R1 SYMTDIv; C:\Windows\System32\Drivers\NIS\1500010.003\SYMTDIV.SYS [383064 2013-07-31] (Symantec Corporation)

S3 udsstub; C:\Windows\System32\DRIVERS\udsstub.sys [16000 2012-06-18] (SysNucleus)

S3 VProEventMonitor; C:\Windows\System32\DRIVERS\vproeventmonitor.sys [15096 2009-09-21] (Symantec Corporation)

S3 a2acc; \??\C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2accx86.sys [x]

U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

R3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x32.sys [x]

U2 V2iMount; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-17 16:44 - 2013-09-17 16:44 - 00000000 ____D C:\FRST

2013-09-17 16:43 - 2013-09-17 16:43 - 01083437 _____ (Farbar) C:\Users\Jason\Desktop\FRST.exe

2013-09-17 16:29 - 2013-09-17 16:30 - 00000000 ____D C:\Users\Jason\AppData\Local\{4D30A8BD-D9DE-4111-807C-D488DFF99C4E}

2013-09-16 18:11 - 2013-09-16 18:11 - 00000000 ____D C:\ProgramData\Messenger Plus! for Skype

2013-09-16 18:10 - 2013-09-16 18:10 - 00987504 _____ (Yuna Software) C:\Users\Jason\Downloads\Setup-PlusForSkype-2.0_FF.exe

2013-09-16 16:52 - 2013-09-16 16:52 - 00000000 ____D C:\Users\Jason\AppData\Local\{01C14C6B-AD33-4FF9-AAD7-6BB48AEFAC91}

2013-09-15 20:43 - 2013-09-15 20:43 - 00000000 ____D C:\Program Files\Soluto

2013-09-15 20:43 - 2013-09-02 13:51 - 00051144 _____ (Soluto LTD.) C:\Windows\system32\Drivers\Soluto.sys

2013-09-15 20:08 - 2013-09-15 20:14 - 00002210 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk

2013-09-15 08:47 - 2013-09-15 20:43 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin

2013-09-15 08:43 - 2013-09-15 08:43 - 01511488 _____ (Soluto Inc) C:\Users\Jason\Downloads\solutoinstaller_1.3.1328.exe

2013-09-15 08:32 - 2013-09-15 08:32 - 00000000 ____D C:\Users\Jason\AppData\Local\{0FA2F25E-551B-4F3F-90C3-2EBA82D1B209}

2013-09-14 04:47 - 2013-09-14 04:48 - 00000000 ____D C:\Users\Jason\AppData\Local\{9C13A9AE-D0AA-40CA-868A-13CDACCFC6E0}

2013-09-13 17:28 - 2013-09-13 17:28 - 00275181 _____ C:\Users\Jason\Downloads\WindowsUpdateDiagnostic.diagcab

2013-09-13 16:45 - 2013-09-13 16:45 - 00000000 ____D C:\Users\Jason\AppData\Local\{60DED220-4B05-421C-9ADF-B292049AFD47}

2013-09-12 16:57 - 2013-09-12 16:57 - 00000000 ____D C:\Users\Jason\AppData\Local\{8DADB1EA-2A01-4B9A-A889-8377032F69C8}

2013-09-12 03:12 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 03:12 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 03:12 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 03:12 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 03:12 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-12 03:12 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 03:12 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-12 03:12 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 03:12 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 03:12 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-12 03:12 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-12 03:12 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 03:12 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 03:12 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 03:12 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-12 03:12 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-11 21:47 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 21:47 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll

2013-09-11 21:30 - 2013-09-11 21:30 - 00000000 ____D C:\Users\Jason\AppData\Local\{107D6498-8605-45E3-9388-BC56CF52A801}

2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Jason\AppData\Local\{E95A276B-30B9-4CC1-A1A2-F04EFB0DBE6B}

2013-09-10 21:43 - 2013-09-12 20:01 - 00000000 ____D C:\Windows\ERUNT

2013-09-10 16:37 - 2013-09-12 19:51 - 00000000 ____D C:\Windows\erdnt

2013-09-08 20:12 - 2013-09-08 20:12 - 00000912 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-08 20:12 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-08 20:10 - 2013-09-08 20:11 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jason\Downloads\mbam-setup-1.75.0.1300.exe

2013-08-28 17:48 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
 

==================== One Month Modified Files and Folders =======
 

2013-09-17 16:44 - 2013-09-17 16:44 - 00000000 ____D C:\FRST

2013-09-17 16:44 - 2013-02-06 17:44 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Skype

2013-09-17 16:43 - 2013-09-17 16:43 - 01083437 _____ (Farbar) C:\Users\Jason\Desktop\FRST.exe

2013-09-17 16:30 - 2013-09-17 16:29 - 00000000 ____D C:\Users\Jason\AppData\Local\{4D30A8BD-D9DE-4111-807C-D488DFF99C4E}

2013-09-17 16:30 - 2012-04-06 20:30 - 00000000 ____D C:\Users\Jason\AppData\Local\Windows Live

2013-09-17 16:30 - 2009-04-11 14:37 - 01683325 _____ C:\Windows\WindowsUpdate.log

2013-09-17 16:24 - 2012-04-30 11:44 - 00000000 ____D C:\Program Files\GfK Internet-Monitor

2013-09-17 16:24 - 2012-04-30 11:43 - 00000000 ____D C:\Program Files\GfKLSPService

2013-09-17 16:24 - 2011-07-27 17:09 - 00000000 ____D C:\Windows\system32\NtmsData

2013-09-17 16:23 - 2008-01-21 04:47 - 00082620 _____ C:\Windows\PFRO.log

2013-09-17 16:23 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-17 16:23 - 2006-11-02 14:47 - 00006848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-17 16:23 - 2006-11-02 14:47 - 00006848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-16 18:18 - 2006-11-02 15:01 - 00032628 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-09-16 18:11 - 2013-09-16 18:11 - 00000000 ____D C:\ProgramData\Messenger Plus! for Skype

2013-09-16 18:10 - 2013-09-16 18:10 - 00987504 _____ (Yuna Software) C:\Users\Jason\Downloads\Setup-PlusForSkype-2.0_FF.exe

2013-09-16 17:53 - 2013-02-09 10:07 - 00000000 ___RD C:\Program Files\Skype

2013-09-16 17:53 - 2013-02-06 17:44 - 00000000 ____D C:\ProgramData\Skype

2013-09-16 17:13 - 2007-10-14 14:13 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

2013-09-16 16:52 - 2013-09-16 16:52 - 00000000 ____D C:\Users\Jason\AppData\Local\{01C14C6B-AD33-4FF9-AAD7-6BB48AEFAC91}

2013-09-16 16:51 - 2010-12-31 18:49 - 00000000 ____D C:\ProgramData\Soluto

2013-09-15 20:46 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-09-15 20:43 - 2013-09-15 20:43 - 00000000 ____D C:\Program Files\Soluto

2013-09-15 20:43 - 2013-09-15 08:47 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin

2013-09-15 20:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration

2013-09-15 20:15 - 2010-09-12 11:33 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton

2013-09-15 20:15 - 2009-11-08 21:12 - 00000000 ____D C:\Windows\system32\Drivers\NIS

2013-09-15 20:15 - 2009-03-28 02:29 - 00000000 ____D C:\ProgramData\Norton

2013-09-15 20:14 - 2013-09-15 20:08 - 00002210 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk

2013-09-15 20:09 - 2012-06-21 18:12 - 00142936 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS

2013-09-15 20:09 - 2012-06-21 18:12 - 00008194 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT

2013-09-15 20:08 - 2012-06-21 18:11 - 00000000 ____D C:\Program Files\Norton Internet Security

2013-09-15 17:56 - 2010-09-12 08:44 - 00000000 ____D C:\Users\Public\Downloads\Norton

2013-09-15 17:49 - 2012-09-23 11:09 - 01021936 _____ (Symantec Corporation) C:\Users\Jason\Downloads\NISDownloader.exe

2013-09-15 08:43 - 2013-09-15 08:43 - 01511488 _____ (Soluto Inc) C:\Users\Jason\Downloads\solutoinstaller_1.3.1328.exe

2013-09-15 08:32 - 2013-09-15 08:32 - 00000000 ____D C:\Users\Jason\AppData\Local\{0FA2F25E-551B-4F3F-90C3-2EBA82D1B209}

2013-09-14 05:00 - 2009-10-30 21:14 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-14 04:48 - 2013-09-14 04:47 - 00000000 ____D C:\Users\Jason\AppData\Local\{9C13A9AE-D0AA-40CA-868A-13CDACCFC6E0}

2013-09-13 17:53 - 2010-07-22 18:06 - 00000000 ____D C:\ProgramData\VideoViewer

2013-09-13 17:28 - 2013-09-13 17:28 - 00275181 _____ C:\Users\Jason\Downloads\WindowsUpdateDiagnostic.diagcab

2013-09-13 16:45 - 2013-09-13 16:45 - 00000000 ____D C:\Users\Jason\AppData\Local\{60DED220-4B05-421C-9ADF-B292049AFD47}

2013-09-12 20:50 - 2007-10-14 11:54 - 00000000 ____D C:\Users\Jason\AppData\Local\VirtualStore

2013-09-12 20:01 - 2013-09-10 21:43 - 00000000 ____D C:\Windows\ERUNT

2013-09-12 19:51 - 2013-09-10 16:37 - 00000000 ____D C:\Windows\erdnt

2013-09-12 16:57 - 2013-09-12 16:57 - 00000000 ____D C:\Users\Jason\AppData\Local\{8DADB1EA-2A01-4B9A-A889-8377032F69C8}

2013-09-12 16:51 - 2006-11-02 14:47 - 00495576 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 03:10 - 2013-07-16 17:31 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 03:01 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-09-11 21:30 - 2013-09-11 21:30 - 00000000 ____D C:\Users\Jason\AppData\Local\{107D6498-8605-45E3-9388-BC56CF52A801}

2013-09-11 16:34 - 2009-04-11 18:55 - 01445460 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Jason\AppData\Local\{E95A276B-30B9-4CC1-A1A2-F04EFB0DBE6B}

2013-09-10 17:10 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default

2013-09-10 17:10 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public

2013-09-10 17:02 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini

2013-09-08 20:12 - 2013-09-08 20:12 - 00000912 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-08 20:12 - 2011-01-26 17:54 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-09-08 20:11 - 2013-09-08 20:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jason\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 18:51 - 2006-11-02 12:22 - 61865984 _____ C:\Windows\system32\config\SOFTWARE.bak

2013-09-05 18:51 - 2006-11-02 12:22 - 30670848 _____ C:\Windows\system32\config\COMPONENTS.bak

2013-09-05 18:51 - 2006-11-02 12:22 - 20447232 _____ C:\Windows\system32\config\SYSTEM.bak

2013-09-05 18:51 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\DEFAULT.bak

2013-09-05 18:51 - 2006-11-02 12:22 - 00057344 _____ C:\Windows\system32\config\SAM.bak

2013-09-05 18:51 - 2006-11-02 12:22 - 00028672 _____ C:\Windows\system32\config\SECURITY.bak

2013-09-02 13:51 - 2013-09-15 20:43 - 00051144 _____ (Soluto LTD.) C:\Windows\system32\Drivers\Soluto.sys

2013-09-01 17:51 - 2007-10-23 18:47 - 00000000 ____D C:\Users\Jason\Documents\Meine Dokumente

2013-08-19 16:16 - 2012-04-25 18:46 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-08-18 19:56 - 2013-08-17 11:20 - 00000000 ____D C:\Program Files\Mozilla Firefox
 

Some content of TEMP:

====================

C:\Users\Jason\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-17 16:31
 

==================== End Of Log ============================
--- --- ---

--- --- ---

MfG.

Als ich ebend FRST gedownloadet habe und es gestartet habe, hat sich Skype verabschiedet und geschlossen?!

MfG.