Trojaner-Board - Avast springt auf einmal auf "läuft..." keine Internetverbindung

Hallo,

dann haben wir uns missverstanden, ich habe schon beim ersten Mal natürlich länger gewartet.

Leider wurde kein fixlog erstellt.

Ich habe Hitman aus Versehen nicht aufs Desktop geladen, ist das schlimm?

Code:



        Code:


        
HitmanPro 3.7.10.250

www.hitmanpro.com
 

   Computer name . . . . : MEINPC-PC

   Windows . . . . . . . : 6.1.1.7601.X64/2

   User name . . . . . . : Meinpc-PC\Meinpc

   UAC . . . . . . . . . : Enabled

   License . . . . . . . : Free
 

   Scan date . . . . . . : 2015-10-29 14:58:53

   Scan mode . . . . . . : Normal

   Scan duration . . . . : 6m 25s

   Disk access mode  . . : Direct disk access (SRB)

   Cloud . . . . . . . . : Internet

   Reboot  . . . . . . . : No
 

   Threats . . . . . . . : 0

   Traces  . . . . . . . : 5
 

   Objects scanned . . . : 1.502.023

   Files scanned . . . . : 44.454

   Remnants scanned  . . : 338.776 files / 1.118.793 keys
 

Suspicious files ____________________________________________________________
 

   C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WSQR4JC\FRST64[1].exe

      Size . . . . . . . : 2.197.504 bytes

      Age  . . . . . . . : 2.1 days (2015-10-27 13:33:18)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : C4A53C155BD170DB89D19ABCA61CB00E9DBEB7EACD2F98C184B62213618784CB

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      Forensic Cluster

         -0.3s C:\Users\Meinpc\AppData\Roaming\Microsoft\Windows\Cookies\57JKIRJR.txt

         -0.3s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41NUBSCX\82[1].htm

          0.0s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WSQR4JC\FRST64[1].exe

          0.0s C:\Users\Meinpc\Desktop\FRST64.exe

         12.4s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WSQR4JC\up64[2]
 

   C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FKM2IY8G\FRST64[1].exe

      Size . . . . . . . : 2.196.992 bytes

      Age  . . . . . . . : 8.9 days (2015-10-20 17:58:44)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 5A08C26FE732502F3812AE5F297D676EED72307534EEB08544C5A5D825616080

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 23.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      Forensic Cluster

         -0.3s C:\Users\Meinpc\AppData\Roaming\Microsoft\Windows\Cookies\46WTXYC0.txt

          0.0s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FKM2IY8G\FRST64[1].exe

          2.7s C:\Users\Meinpc\Desktop\FRST-OlderVersion\
 

   C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HOZGX5DH\FRST64[1].exe

      Size . . . . . . . : 2.196.480 bytes

      Age  . . . . . . . : 5.9 days (2015-10-23 17:34:00)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : A6CE58B50CA37F34060EF79D4A9D62EBDDBF53CDE7F047E58279B8A755CC81AE

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.
 

   C:\Users\Meinpc\Desktop\FRST-OlderVersion\FRST64.exe

      Size . . . . . . . : 2.196.480 bytes

      Age  . . . . . . . : 20.0 days (2015-10-09 14:12:21)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : A6CE58B50CA37F34060EF79D4A9D62EBDDBF53CDE7F047E58279B8A755CC81AE

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 23.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.
 

   C:\Users\Meinpc\Desktop\FRST64.exe

      Size . . . . . . . : 2.197.504 bytes

      Age  . . . . . . . : 2.1 days (2015-10-27 13:33:18)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : C4A53C155BD170DB89D19ABCA61CB00E9DBEB7EACD2F98C184B62213618784CB

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      Forensic Cluster

         -0.3s C:\Users\Meinpc\AppData\Roaming\Microsoft\Windows\Cookies\57JKIRJR.txt

         -0.3s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41NUBSCX\82[1].htm

         -0.0s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WSQR4JC\FRST64[1].exe

          0.0s C:\Users\Meinpc\Desktop\FRST64.exe

         12.4s C:\Users\Meinpc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WSQR4JC\up64[2]

Code:

Farbar Service Scanner Version: 26-07-2015

Ran by Meinpc (administrator) on 29-10-2015 at 15:31:29

Running from "C:\Users\Meinpc\Desktop"

Microsoft Windows 7 Home Premium  Service Pack 1 (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Policy: 

========================
 
 

Action Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => File is digitally signed

C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed

C:\Windows\System32\dhcpcore.dll => File is digitally signed

C:\Windows\System32\drivers\afd.sys => File is digitally signed

C:\Windows\System32\drivers\tdx.sys => File is digitally signed

C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed

C:\Windows\System32\dnsrslvr.dll => File is digitally signed

C:\Windows\System32\mpssvc.dll => File is digitally signed

C:\Windows\System32\bfe.dll => File is digitally signed

C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed

C:\Windows\System32\SDRSVC.dll => File is digitally signed

C:\Windows\System32\vssvc.exe => File is digitally signed

C:\Windows\System32\wscsvc.dll => File is digitally signed

C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed

C:\Windows\System32\wuaueng.dll => File is digitally signed

C:\Windows\System32\qmgr.dll => File is digitally signed

C:\Windows\System32\es.dll => File is digitally signed

C:\Windows\System32\cryptsvc.dll => File is digitally signed

C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed

C:\Windows\System32\ipnathlp.dll => File is digitally signed

C:\Windows\System32\iphlpsvc.dll => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed
 
 

**** End of log ****