| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 8 fb downloader entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
31.07.2013, 19:02
| #1 | |
| /// TB-Ausbilder   |  Windows 8 fb downloader entfernen Servus, Zitat:
Kannst du mir einen Screenshot von diesem grauen Rechteck machen? Welchen Browser verwendest du? Kannst du mir bitte diese Datei von AdwCleaner noch posten: C:\AdwCleaner[S1].txt ? Ich brauche erst mal einen kurzen Überblick: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
|
01.08.2013, 18:05
| #2 |
 | Windows 8 fb downloader entfernen Hallo,
__________________danke für die Antwort. Hier der Scan: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 03
Ran by Alle (administrator) on 01-08-2013 18:58:05
Running from C:\Users\Alle\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
() C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(McAfee, Inc.) c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PMMUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Acer) C:\Program Files\WindowsApps\AcerIncorporated.AcerExplorer_1.0.0.3002_neutral__48frkmn4z8aw4\AcerExplorer.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Microsoft Corporation) C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16455_none_624a7aa150f57306\TiWorker.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12921488 2012-07-02] (Realtek Semiconductor)
HKLM\...\InprocServer32: [Default-cscui] <==== ATTENTION!
HKCU\...\Run: [dradio-RecorderTimer] - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [42496 2012-10-13] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [SCheck] - C:\Users\Alle\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [SSync] - C:\Users\Alle\AppData\Roaming\SSync\SSync.exe [36864 2013-04-10] ()
HKCU\...\Run: [Intermediate] - C:\Users\Alle\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-07-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2995904 2012-07-11] (Symantec Corporation)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [CLX3180_Scan2Pc] - C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe [1990144 2011-04-29] ()
HKLM-x32\...\Run: [3180 Scan2PC] - C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe [1990144 2011-04-29] ()
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [685048 2012-08-03] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {8A723D90-1CB8-4E4A-8BD2-69FA9FC8AE87} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {8A723D90-1CB8-4E4A-8BD2-69FA9FC8AE87} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {8A723D90-1CB8-4E4A-8BD2-69FA9FC8AE87} URL =
SearchScopes: HKCU - {8A723D90-1CB8-4E4A-8BD2-69FA9FC8AE87} URL =
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Alle\AppData\Roaming\Mozilla\Firefox\Profiles\72brx6ic.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File
FF SearchPlugin: C:\Users\Alle\AppData\Roaming\Mozilla\Firefox\Profiles\72brx6ic.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\Alle\AppData\Roaming\Mozilla\Firefox\Profiles\72brx6ic.default\searchplugins\search_the_web.xml
FF Extension: om - C:\Users\Alle\AppData\Roaming\Mozilla\Firefox\Profiles\72brx6ic.default\Extensions\om@offermosquito.com.xpi
FF Extension: No Name - C:\Users\Alle\AppData\Roaming\Mozilla\Firefox\Profiles\72brx6ic.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn\
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
==================== Services (Whitelisted) =================
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2415760 2012-07-27] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [659600 2012-08-01] (Acer Incorporated)
S4 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe [120592 2013-05-22] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-11] (Symantec Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00A\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-07-13] (Samsung Electronics Co., Ltd.)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-07-13] (Samsung Electronics Co., Ltd.)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [498032 2012-07-12] (Intel Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-18] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-03-30] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130731.001\IDSvia64.sys [513184 2013-02-09] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130731.001\IDSvia64.sys [513184 2013-02-09] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130801.004\ENG64.SYS [126040 2013-05-25] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130801.004\ENG64.SYS [126040 2013-05-25] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130801.004\EX64.SYS [2098776 2013-05-25] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20130801.004\EX64.SYS [2098776 2013-05-25] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 PcdrNdisuio; \SystemRoot\syswow64\drivers\pcdrndisuio.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-01 18:50 - 2013-08-01 18:50 - 00024284 _____ C:\Users\Alle\Downloads\Addition.txt
2013-08-01 18:50 - 2013-08-01 18:50 - 00023449 _____ C:\Users\Alle\Downloads\FRST.txt
2013-08-01 18:49 - 2013-08-01 18:49 - 00000000 ____D C:\FRST
2013-08-01 18:46 - 2013-08-01 18:46 - 01781589 _____ (Farbar) C:\Users\Alle\Downloads\FRST64.exe
2013-08-01 18:37 - 2013-08-01 18:37 - 01781589 _____ (Farbar) C:\Users\Alle\Desktop\FRST64.exe
2013-07-31 21:38 - 2013-07-31 21:38 - 00422810 _____ C:\Users\Alle\Downloads\Screenshot.zip
2013-07-31 20:01 - 2013-07-31 20:02 - 00001483 _____ C:\AdwCleaner[S3].txt
2013-07-31 20:01 - 2013-07-31 20:01 - 00001415 _____ C:\AdwCleaner[R8].txt
2013-07-31 20:00 - 2013-07-31 20:01 - 00001355 _____ C:\AdwCleaner[R7].txt
2013-07-30 21:07 - 2013-07-30 21:07 - 00001295 _____ C:\AdwCleaner[R6].txt
2013-07-30 20:55 - 2013-07-30 20:55 - 00001234 _____ C:\AdwCleaner[R5].txt
2013-07-30 20:52 - 2013-07-30 20:53 - 00001183 _____ C:\AdwCleaner[S2].txt
2013-07-30 20:51 - 2013-07-30 20:51 - 00001114 _____ C:\AdwCleaner[R4].txt
2013-07-30 20:38 - 2013-07-30 20:38 - 00001053 _____ C:\AdwCleaner[R3].txt
2013-07-30 20:33 - 2013-07-31 20:02 - 00000303 _____ C:\Windows\DeleteOnReboot.bat
2013-07-30 20:33 - 2013-07-30 20:34 - 00002759 _____ C:\AdwCleaner[S1].txt
2013-07-30 20:32 - 2013-07-30 20:32 - 00002816 _____ C:\AdwCleaner[R2].txt
2013-07-30 20:24 - 2013-07-30 20:24 - 00002756 _____ C:\AdwCleaner[R1].txt
2013-07-30 20:22 - 2013-07-30 20:22 - 00666633 _____ C:\Users\Alle\Downloads\AdwCleaner.exe
2013-07-20 11:50 - 2013-07-20 11:50 - 00000102 _____ C:\Users\Public\sdelevURL.tmp
2013-07-20 10:48 - 2013-07-30 20:11 - 00000000 ____D C:\Users\Alle\AppData\Local\Google
2013-07-20 10:48 - 2013-07-30 20:11 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-20 10:48 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Roaming\SSync
2013-07-20 10:48 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Roaming\SCheck
2013-07-20 10:48 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Roaming\Intermediate
2013-07-20 10:47 - 2013-07-20 10:47 - 00000000 ____D C:\Users\Alle\AppData\Roaming\PiccShare
2013-07-20 10:47 - 2013-07-20 10:47 - 00000000 ____D C:\Users\Alle\AppData\Roaming\Common
2013-07-03 10:58 - 2013-07-03 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-02 21:21 - 2013-07-17 20:51 - 00023552 ___SH C:\Users\Alle\Downloads\Thumbs.db
==================== One Month Modified Files and Folders =======
2013-08-01 18:53 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-01 18:52 - 2012-12-15 15:42 - 00000000 ____D C:\Users\Alle\Documents\Reinhard
2013-08-01 18:50 - 2013-08-01 18:50 - 00024284 _____ C:\Users\Alle\Downloads\Addition.txt
2013-08-01 18:50 - 2013-08-01 18:50 - 00023449 _____ C:\Users\Alle\Downloads\FRST.txt
2013-08-01 18:49 - 2013-08-01 18:49 - 00000000 ____D C:\FRST
2013-08-01 18:49 - 2012-12-14 16:28 - 01854438 _____ C:\Windows\WindowsUpdate.log
2013-08-01 18:46 - 2013-08-01 18:46 - 01781589 _____ (Farbar) C:\Users\Alle\Downloads\FRST64.exe
2013-08-01 18:39 - 2012-12-14 16:35 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1467736113-4030554430-827067306-1001
2013-08-01 18:37 - 2013-08-01 18:37 - 01781589 _____ (Farbar) C:\Users\Alle\Desktop\FRST64.exe
2013-08-01 18:28 - 2012-12-15 13:19 - 00000000 ____D C:\Users\Alle\AppData\Roaming\Skype
2013-08-01 18:18 - 2012-12-15 13:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-01 18:16 - 2012-12-13 01:27 - 00751892 _____ C:\Windows\system32\perfh007.dat
2013-08-01 18:16 - 2012-12-13 01:27 - 00155620 _____ C:\Windows\system32\perfc007.dat
2013-08-01 18:16 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-01 18:12 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-01 10:46 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-31 21:45 - 2012-12-14 21:41 - 00000000 ____D C:\Users\Alle\AppData\Local\Deployment
2013-07-31 21:38 - 2013-07-31 21:38 - 00422810 _____ C:\Users\Alle\Downloads\Screenshot.zip
2013-07-31 20:02 - 2013-07-31 20:01 - 00001483 _____ C:\AdwCleaner[S3].txt
2013-07-31 20:02 - 2013-07-30 20:33 - 00000303 _____ C:\Windows\DeleteOnReboot.bat
2013-07-31 20:02 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-07-31 20:01 - 2013-07-31 20:01 - 00001415 _____ C:\AdwCleaner[R8].txt
2013-07-31 20:01 - 2013-07-31 20:00 - 00001355 _____ C:\AdwCleaner[R7].txt
2013-07-31 19:06 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-07-30 21:07 - 2013-07-30 21:07 - 00001295 _____ C:\AdwCleaner[R6].txt
2013-07-30 20:55 - 2013-07-30 20:55 - 00001234 _____ C:\AdwCleaner[R5].txt
2013-07-30 20:53 - 2013-07-30 20:52 - 00001183 _____ C:\AdwCleaner[S2].txt
2013-07-30 20:51 - 2013-07-30 20:51 - 00001114 _____ C:\AdwCleaner[R4].txt
2013-07-30 20:38 - 2013-07-30 20:38 - 00001053 _____ C:\AdwCleaner[R3].txt
2013-07-30 20:34 - 2013-07-30 20:33 - 00002759 _____ C:\AdwCleaner[S1].txt
2013-07-30 20:32 - 2013-07-30 20:32 - 00002816 _____ C:\AdwCleaner[R2].txt
2013-07-30 20:24 - 2013-07-30 20:24 - 00002756 _____ C:\AdwCleaner[R1].txt
2013-07-30 20:22 - 2013-07-30 20:22 - 00666633 _____ C:\Users\Alle\Downloads\AdwCleaner.exe
2013-07-30 20:11 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Local\Google
2013-07-30 20:11 - 2013-07-20 10:48 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-28 20:00 - 2012-12-16 16:32 - 00000121 _____ C:\Users\Public\LMDebug.log
2013-07-27 10:08 - 2012-12-18 22:16 - 00000000 ____D C:\Users\Alle\Documents\Sabine
2013-07-20 11:50 - 2013-07-20 11:50 - 00000102 _____ C:\Users\Public\sdelevURL.tmp
2013-07-20 10:51 - 2012-10-22 19:40 - 00060102 _____ C:\Windows\PFRO.log
2013-07-20 10:48 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Roaming\SSync
2013-07-20 10:48 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Roaming\SCheck
2013-07-20 10:48 - 2013-07-20 10:48 - 00000000 ____D C:\Users\Alle\AppData\Roaming\Intermediate
2013-07-20 10:47 - 2013-07-20 10:47 - 00000000 ____D C:\Users\Alle\AppData\Roaming\PiccShare
2013-07-20 10:47 - 2013-07-20 10:47 - 00000000 ____D C:\Users\Alle\AppData\Roaming\Common
2013-07-18 20:46 - 2012-07-26 09:21 - 00030317 _____ C:\Windows\setupact.log
2013-07-17 20:51 - 2013-07-02 21:21 - 00023552 ___SH C:\Users\Alle\Downloads\Thumbs.db
2013-07-15 14:36 - 2012-12-20 12:49 - 00002184 ____H C:\Users\Alle\Documents\Default.rdp
2013-07-11 20:37 - 2012-12-15 22:57 - 00000000 ____D C:\Users\Alle\AppData\Local\CrashDumps
2013-07-11 18:00 - 2012-12-15 13:19 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-11 18:00 - 2012-12-15 13:19 - 00000000 ____D C:\ProgramData\Skype
2013-07-10 20:00 - 2012-12-15 15:08 - 00000000 ____D C:\Users\Alle\Documents\Aufnahmen
2013-07-03 16:23 - 2012-12-15 12:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-03 10:58 - 2013-07-03 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-22 19:26
==================== End Of Log ============================
Gruß Birke |
|
01.08.2013, 18:10
| #3 |
| /// TB-Ausbilder | Windows 8 fb downloader entfernen Servus,
__________________FRST erstellt 2 Logdateien, die Addition.txt fehlt. Zudem stehen noch Antworten auf meine Fragen aus...  |
|
| Themen zu Windows 8 fb downloader entfernen |
| adw-cleaner, appdata, bericht, betriebssystem, browser, datei, dateien, downloader, entfernen, explorer, festplatte, firefox, formatieren, google, internet, internet browser, internet explorer, internetseite, löschen, mozilla, ordner, registrierungsdatenbank, roaming, seite, startseite, suche, suchmaschine, windows |
Hybrid-Darstellung
