| |
| |||||||
Log-Analyse und Auswertung: Windows 7: System Care Antivirus 3.7.33 blockiert andere ProgrammeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
26.08.2013, 08:47
| #1 |
| /// the machine /// TB-Ausbilder    |  Windows 7: System Care Antivirus 3.7.33 blockiert andere ProgrammeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.08.2013, 15:17
| #2 |
 | Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme Hi, hab momentan keine Probleme mit dem Rechner.
__________________ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=4b08870a6d709445bdbdeb02f8c54116
# engine=14902
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-26 12:26:04
# local_time=2013-08-26 02:26:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 7651 148191269 323699 0
# compatibility_mode=5893 16776574 100 94 1658247 129149814 0 0
# scanned=209213
# found=3
# cleaned=0
# scan_time=7443
sh=A89566D3ECB568873577E3471AF87642CA474E36 ft=1 fh=c71c0011f32421bb vn="a variant of Win32/Kryptik.BIUX trojan" ac=I fn="C:\FRST\Quarantine\8EFC2E9560F765AC00008EFB9FA06C57\8EFC2E9560F765AC00008EFB9FA06C57.exe"
sh=23DE386FF2D3E1C8AB77AA99AFB0D7DAF6D7BE9F ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Sabine\AppData\Local\Temp\jar_cache483321477730243497.tmp"
sh=5DE7654C76C229541CD22F435257659804A71E87 ft=1 fh=fc542d735cf07284 vn="Win32/Kryptik.BILL trojan" ac=I fn="C:\Users\Sabine\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\1adfe517-5543eec4"
Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2013 TuneUp Utilities Language Pack (de-DE) Java(TM) 6 Update 21 Java version out of Date! Adobe Flash Player 11.7.700.224 Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox (3.6.8) Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013
Ran by Sabine (administrator) on 26-08-2013 16:04:05
Running from C:\Users\Sabine\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Microsoft Corporation) c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7968800 2009-07-10] (Realtek Semiconductor)
HKLM\...\Run: [TPHOTKEY] - C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [68976 2009-03-13] (Lenovo Group Limited)
HKLM\...\Run: [LENOVO.TPFNF6R] - C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe [62752 2009-08-20] (Lenovo Group Limited)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-07] (Intel Corporation)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [380704 2009-07-08] (Lenovo.)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [x]
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1888552 2009-11-25] (Synaptics Incorporated)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [15026056 2011-01-26] (Skype Technologies S.A.)
MountPoints2: {e00765f0-38a6-11df-8838-806e6f6e6963} - Q:\LenovoQDrive.exe
MountPoints2: {ea90bf23-38a8-11df-a158-806e6f6e6963} - D:\wubi.exe
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [160840 2012-02-09] (Geek Software GmbH)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-08-08] (Avira Operations GmbH & Co. KG)
HKU\Default\...\RunOnce: [wlstart] - C:\Program Files (x86)\Windows Live\Installer\wlstart.exe [786760 2009-08-20] (Microsoft Corporation)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2009-03-24] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope value is missing.
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
DPF: HKLM-x32 {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://www.fotokasten.de/javaapplet/ImageUploader5.cab
DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\..\Interfaces\{6390A93E-4764-466D-B597-4E4E7D613A07}: [NameServer]192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default\Extensions\staged
FF Extension: No Name - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default\Extensions\{30ded8b8-1fb9-4178-845b-adc824baf28a}
FF Extension: toolbar_AVIRA-V7 - C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\tg0gth5m.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-08-08] (Avira Operations GmbH & Co. KG)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation)
R2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software)
S2 RoxLiveShare10; "C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe" [x]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-08-08] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-08-08] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-08] (Avira Operations GmbH & Co. KG)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 PCDSRVC{127174DC-C366ED8B-06000000}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [x]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-26 15:57 - 2013-08-26 15:55 - 00891115 _____ C:\Users\Sabine\Desktop\SecurityCheck.exe
2013-08-26 15:50 - 2013-08-26 15:50 - 00000325 _____ C:\Users\Sabine\Desktop\ESET_1.txt
2013-08-26 12:18 - 2013-08-26 12:18 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe
2013-08-25 10:05 - 2013-08-25 10:05 - 00000000 ____D C:\Windows\ERUNT
2013-08-25 09:49 - 2013-08-25 09:53 - 00000000 ____D C:\AdwCleaner
2013-08-25 09:17 - 2013-08-25 09:17 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Malwarebytes
2013-08-25 09:14 - 2013-08-25 09:14 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-25 09:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-25 09:13 - 2013-08-25 09:03 - 00994642 _____ C:\Users\Sabine\Desktop\adwcleaner.exe
2013-08-25 09:13 - 2013-08-22 17:54 - 01021434 _____ (Thisisu) C:\Users\Sabine\Desktop\JRT.exe
2013-08-22 22:10 - 2013-08-22 22:10 - 00000000 ____D C:\FRST
2013-08-22 22:09 - 2013-08-22 22:09 - 00000000 _____ C:\Users\Sabine\defogger_reenable
2013-08-22 22:01 - 2013-08-22 21:57 - 00377856 _____ C:\Users\Sabine\Desktop\1ki7fe1b.exe
2013-08-22 21:53 - 2013-08-22 21:49 - 00050477 _____ C:\Users\Sabine\Desktop\Defogger.exe
2013-08-20 19:35 - 2013-08-20 19:35 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care Antivirus
2013-08-20 19:33 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-20 19:33 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-20 19:33 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-20 19:33 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-20 19:33 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-20 19:33 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-20 19:33 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-20 19:33 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-20 19:33 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-20 19:33 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-20 19:33 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-20 19:33 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-20 19:33 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-20 19:33 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-20 19:32 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-20 19:32 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-20 19:32 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-20 19:32 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-20 19:32 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-20 19:32 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-20 19:32 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-20 19:32 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-20 19:32 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-20 19:32 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-20 19:32 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-20 19:02 - 2013-08-20 19:08 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 17:58 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-16 17:55 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-16 17:55 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-16 17:55 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-16 17:55 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-16 17:55 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-16 17:55 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-16 17:55 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-16 17:55 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-16 17:53 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-16 17:53 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-16 17:52 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-16 17:52 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-16 17:52 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-16 17:52 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-16 17:52 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-16 17:39 - 2013-08-16 17:39 - 00000240 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job
2013-08-08 21:04 - 2013-08-08 21:04 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Avira
2013-08-08 21:01 - 2013-08-08 21:01 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-08 21:00 - 2013-08-15 14:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-08 21:00 - 2013-08-08 21:06 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-08 21:00 - 2013-08-08 21:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-08 21:00 - 2013-08-08 21:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-08 20:59 - 2013-08-08 20:59 - 00000000 ____D C:\Windows\system32\Macromed
2013-08-08 20:58 - 2013-08-08 20:58 - 00002005 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\ProgramData\Avira
2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-08 20:58 - 2013-08-08 20:43 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-08 20:58 - 2013-08-08 20:43 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-08 20:58 - 2013-08-08 20:43 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-28 19:28 - 2013-07-28 19:28 - 00000118 _____ C:\Windows\system32\MRT.INI
==================== One Month Modified Files and Folders =======
2013-08-26 15:55 - 2013-08-26 15:57 - 00891115 _____ C:\Users\Sabine\Desktop\SecurityCheck.exe
2013-08-26 15:50 - 2013-08-26 15:50 - 00000325 _____ C:\Users\Sabine\Desktop\ESET_1.txt
2013-08-26 15:48 - 2010-03-26 09:15 - 01948933 _____ C:\Windows\WindowsUpdate.log
2013-08-26 12:23 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-26 12:23 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-26 12:18 - 2013-08-26 12:18 - 02347384 _____ (ESET) C:\Users\Sabine\Downloads\esetsmartinstaller_enu.exe
2013-08-26 12:18 - 2010-03-26 18:07 - 00711370 _____ C:\Windows\system32\perfh007.dat
2013-08-26 12:18 - 2010-03-26 18:07 - 00153766 _____ C:\Windows\system32\perfc007.dat
2013-08-26 12:18 - 2009-07-14 07:13 - 01646182 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 12:15 - 2010-08-31 20:21 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Skype
2013-08-26 12:13 - 2010-08-31 20:22 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\skypePM
2013-08-26 12:12 - 2009-07-14 06:51 - 00082731 _____ C:\Windows\setupact.log
2013-08-26 02:57 - 2013-08-26 16:03 - 01577068 _____ (Farbar) C:\Users\Sabine\Desktop\FRST64.exe
2013-08-25 10:05 - 2013-08-25 10:05 - 00000000 ____D C:\Windows\ERUNT
2013-08-25 09:53 - 2013-08-25 09:49 - 00000000 ____D C:\AdwCleaner
2013-08-25 09:44 - 2010-07-16 01:10 - 00331490 _____ C:\Windows\PFRO.log
2013-08-25 09:17 - 2013-08-25 09:17 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Malwarebytes
2013-08-25 09:14 - 2013-08-25 09:14 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-25 09:14 - 2013-08-25 09:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-25 09:03 - 2013-08-25 09:13 - 00994642 _____ C:\Users\Sabine\Desktop\adwcleaner.exe
2013-08-22 22:10 - 2013-08-22 22:10 - 00000000 ____D C:\FRST
2013-08-22 22:09 - 2013-08-22 22:09 - 00000000 _____ C:\Users\Sabine\defogger_reenable
2013-08-22 22:09 - 2010-07-16 01:13 - 00000000 ____D C:\Users\Sabine
2013-08-22 21:57 - 2013-08-22 22:01 - 00377856 _____ C:\Users\Sabine\Desktop\1ki7fe1b.exe
2013-08-22 21:49 - 2013-08-22 21:53 - 00050477 _____ C:\Users\Sabine\Desktop\Defogger.exe
2013-08-22 17:54 - 2013-08-25 09:13 - 01021434 _____ (Thisisu) C:\Users\Sabine\Desktop\JRT.exe
2013-08-21 16:37 - 2010-09-02 18:55 - 00000000 ___RD C:\Users\Sabine\Dateien
2013-08-20 19:35 - 2013-08-20 19:35 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care Antivirus
2013-08-20 19:08 - 2013-08-20 19:02 - 00000000 ____D C:\Windows\system32\MRT
2013-08-20 19:01 - 2010-09-02 17:04 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 17:39 - 2013-08-16 17:39 - 00000240 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job
2013-08-16 17:28 - 2010-07-18 16:04 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Obliq
2013-08-16 17:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-15 14:40 - 2013-08-08 21:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-08 21:06 - 2013-08-08 21:00 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-08 21:06 - 2013-08-08 21:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-08 21:06 - 2013-08-08 21:00 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-08 21:04 - 2013-08-08 21:04 - 00000000 ____D C:\Users\Sabine\AppData\Roaming\Avira
2013-08-08 21:01 - 2013-08-08 21:01 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-08 20:59 - 2013-08-08 20:59 - 00000000 ____D C:\Windows\system32\Macromed
2013-08-08 20:58 - 2013-08-08 20:58 - 00002005 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\ProgramData\Avira
2013-08-08 20:58 - 2013-08-08 20:58 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-08 20:43 - 2013-08-08 20:58 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-08 20:43 - 2013-08-08 20:58 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-08 20:43 - 2013-08-08 20:58 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-05 17:41 - 2010-10-24 15:19 - 00000000 ____D C:\Users\Sabine\AppData\Local\Microsoft Help
2013-07-28 19:57 - 2009-07-14 06:45 - 00418592 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 19:54 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-28 19:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-28 19:54 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-28 19:28 - 2013-07-28 19:28 - 00000118 _____ C:\Windows\system32\MRT.INI
Files to move or delete:
====================
C:\Users\Sabine\AppData\Local\Temp\AskSLib.dll
C:\Users\Sabine\AppData\Local\Temp\ffunzip.exe
C:\Users\Sabine\AppData\Local\Temp\GLFF912.tmp.ConduitEngineSetup.exe
C:\Users\Sabine\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Users\Sabine\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Sabine\AppData\Local\Temp\ose00000.exe
C:\Users\Sabine\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Sabine\AppData\Local\Temp\prxGLFF912.tmp.tbDVDV.dll
C:\Users\Sabine\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabine\AppData\Local\Temp\setup.exe
C:\Users\Sabine\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Sabine\AppData\Local\Temp\ytb.exe
C:\Users\Sabine\AppData\Local\Temp\xpiC928.tmp\config\skin\widgets\com.avira.dnt\widget\lib\ContentPolicy.dll
C:\Users\Sabine\AppData\Local\Temp\WLZAEAD.tmp\CddbLangDE.dll
C:\Users\Sabine\AppData\Local\Temp\WLZ38A4.tmp\CddbLangDE.dll
C:\Users\Sabine\AppData\Local\Temp\UpdateWizard_44391\SilentUpdater.exe
C:\Users\Sabine\AppData\Local\Temp\Temp1_mein_hpl_2009.zip\MEIN-HPL_2010.exe
C:\Users\Sabine\AppData\Local\Temp\Temp1_0101-30D[1].zip\SETUP.EXE
C:\Users\Sabine\AppData\Local\Temp\nskFDDF.tmp\System.dll
C:\Users\Sabine\AppData\Local\Temp\nskFDDF.tmp\UAC.dll
C:\Users\Sabine\AppData\Local\Temp\nsb5A59.tmp\System.dll
C:\Users\Sabine\AppData\Local\Temp\nsb5A59.tmp\UserInfo.dll
C:\Users\Sabine\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Sabine\AppData\Local\Temp\IXP270.TMP\SetupAdmin.exe
C:\Users\Sabine\AppData\Local\Temp\is-A8FLP.tmp\APNStub.exe
C:\Users\Sabine\AppData\Local\Temp\D2E0.dir\InstallFlashPlayer.exe
C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.0.2971.exe
C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.1.3099.exe
C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.1.3341.exe
C:\Users\Sabine\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3717.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-13 11:28
==================== End Of Log ============================
--- --- --- |
|
| Themen zu Windows 7: System Care Antivirus 3.7.33 blockiert andere Programme |
| antivirus, avira, avira searchfree toolbar, bildschirm, blockiert, browser, cdburnerxp, converter, error, excel, farbar, farbar recovery scan tool, fehler, festplatte, flash player, helper, home, homepage, installation, mozilla, msiinstaller, newtab, pirates, plug-in, programm, realtek, registry, richtlinie, scan, security, smartbar, software, svchost.exe, system, system care, windows, wsearch |
Hybrid-Darstellung
