![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 7, BKA-Virus, Bildschirm gesperrtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
| | #7 |
| | Windows 7, BKA-Virus, Bildschirm gesperrt So, hier die neuen .txt Dateien von Anti-Malware Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.15.04 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 10.0.9200.16721 Hauke :: HAUKE-PC [Administrator] 15.11.2013 11:37:04 mbam-log-2013-11-15 (11-37-04).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 251892 Laufzeit: 8 Minute(n), 34 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\Users\Hauke\AppData\Local\Temp\7VD8z3x0.exe (Trojan.Winlock.U) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hauke\AppData\Local\Temp\InstallShare9509\bab_setup.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hauke\AppData\Local\Temp\InstallShare16369\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) von AdwCleaner: Code:
ATTFilter # AdwCleaner v3.012 - Report created 15/11/2013 at 12:00:29
# Updated 11/11/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : Hauke - HAUKE-PC
# Running from : C:\Users\Hauke\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\Program Files\NCH Software
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Users\Hauke\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\Hauke\AppData\Roaming\NCH Software
Folder Deleted : C:\Users\Hauke\AppData\Roaming\pdfforge
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\NCH Software
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16720
-\\ Mozilla Firefox v25.0 (de)
[ File : C:\Users\Hauke\AppData\Roaming\Mozilla\Firefox\Profiles\898f1ex3.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [1374 octets] - [15/11/2013 11:56:14]
AdwCleaner[S0].txt - [1331 octets] - [15/11/2013 12:00:29]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1391 octets] ##########
von Junkware Removal Tool: Code:
ATTFilter # AdwCleaner v3.012 - Report created 15/11/2013 at 12:00:29
# Updated 11/11/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : Hauke - HAUKE-PC
# Running from : C:\Users\Hauke\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\Program Files\NCH Software
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Users\Hauke\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\Hauke\AppData\Roaming\NCH Software
Folder Deleted : C:\Users\Hauke\AppData\Roaming\pdfforge
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\NCH Software
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16720
-\\ Mozilla Firefox v25.0 (de)
[ File : C:\Users\Hauke\AppData\Roaming\Mozilla\Firefox\Profiles\898f1ex3.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [1374 octets] - [15/11/2013 11:56:14]
AdwCleaner[S0].txt - [1331 octets] - [15/11/2013 12:00:29]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1391 octets] ##########
von Farbar´s Recovery Scan Tool die FRST.txt: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by Hauke (administrator) on HAUKE-PC on 15-11-2013 12:14:15
Running from C:\Users\Hauke\Desktop
Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files\BitKinex\bitkinexsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Akamai Technologies, Inc.) C:\Users\Hauke\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Akamai Technologies, Inc.) C:\Users\Hauke\AppData\Local\Akamai\netsession_win.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [155648 2006-01-12] (Nero AG)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Hauke\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
Startup: C:\Users\Hauke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE0B0B5313D43CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Hauke\AppData\Roaming\Mozilla\Firefox\Profiles\898f1ex3.default
FF Homepage: spiegel.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Hauke\AppData\Roaming\Mozilla\Firefox\Profiles\898f1ex3.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: itrans - C:\Users\Hauke\AppData\Roaming\Mozilla\Firefox\Profiles\898f1ex3.default\Extensions\itrans@tenshi.xpi
FF Extension: DVDVideoSoft Menu - C:\Users\Hauke\AppData\Roaming\Mozilla\Firefox\Profiles\898f1ex3.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
========================== Services (Whitelisted) =================
R2 BitKinex; C:\Program Files\BitKinex\bitkinexsvc.exe [32944 2010-07-12] ()
==================== Drivers (Whitelisted) ====================
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-15 12:14 - 2013-11-15 12:14 - 00006976 _____ C:\Users\Hauke\Desktop\FRST.txt
2013-11-15 12:13 - 2013-11-15 12:13 - 01090529 _____ (Farbar) C:\Users\Hauke\Desktop\FRST.exe
2013-11-15 12:09 - 2013-11-15 12:09 - 00000754 _____ C:\Users\Hauke\Desktop\JRT.txt
2013-11-15 12:07 - 2013-11-15 12:07 - 00000000 ____D C:\Windows\ERUNT
2013-11-15 12:05 - 2013-11-15 12:05 - 01034531 _____ (Thisisu) C:\Users\Hauke\Downloads\JRT.exe
2013-11-15 12:05 - 2013-11-15 12:05 - 01034531 _____ (Thisisu) C:\Users\Hauke\Desktop\JRT.exe
2013-11-15 11:56 - 2013-11-15 12:00 - 00000000 ____D C:\AdwCleaner
2013-11-15 11:55 - 2013-11-15 11:55 - 01085542 _____ C:\Users\Hauke\Downloads\adwcleaner.exe
2013-11-15 11:55 - 2013-11-15 11:55 - 01085542 _____ C:\Users\Hauke\Desktop\adwcleaner.exe
2013-11-15 11:34 - 2013-11-15 11:34 - 00000000 ____D C:\Users\Hauke\AppData\Roaming\Malwarebytes
2013-11-15 11:33 - 2013-11-15 11:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-15 11:33 - 2013-11-15 11:33 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 11:33 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-15 11:31 - 2013-11-15 11:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hauke\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-11 21:43 - 2013-11-11 21:43 - 00000000 ____D C:\FRST
2013-11-06 14:42 - 2013-11-06 14:42 - 00000000 ____D C:\Program Files\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2013-11-15 12:14 - 2013-11-15 12:14 - 00006976 _____ C:\Users\Hauke\Desktop\FRST.txt
2013-11-15 12:13 - 2013-11-15 12:13 - 01090529 _____ (Farbar) C:\Users\Hauke\Desktop\FRST.exe
2013-11-15 12:09 - 2013-11-15 12:09 - 00000754 _____ C:\Users\Hauke\Desktop\JRT.txt
2013-11-15 12:08 - 2009-07-14 05:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-15 12:08 - 2009-07-14 05:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-15 12:07 - 2013-11-15 12:07 - 00000000 ____D C:\Windows\ERUNT
2013-11-15 12:06 - 2012-09-28 15:48 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-15 12:05 - 2013-11-15 12:05 - 01034531 _____ (Thisisu) C:\Users\Hauke\Downloads\JRT.exe
2013-11-15 12:05 - 2013-11-15 12:05 - 01034531 _____ (Thisisu) C:\Users\Hauke\Desktop\JRT.exe
2013-11-15 12:05 - 2012-09-28 15:46 - 01562930 _____ C:\Windows\WindowsUpdate.log
2013-11-15 12:03 - 2012-09-30 16:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-15 12:01 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 12:01 - 2009-07-14 05:39 - 00064983 _____ C:\Windows\setupact.log
2013-11-15 12:00 - 2013-11-15 11:56 - 00000000 ____D C:\AdwCleaner
2013-11-15 11:55 - 2013-11-15 11:55 - 01085542 _____ C:\Users\Hauke\Downloads\adwcleaner.exe
2013-11-15 11:55 - 2013-11-15 11:55 - 01085542 _____ C:\Users\Hauke\Desktop\adwcleaner.exe
2013-11-15 11:54 - 2012-09-29 11:24 - 00008232 _____ C:\Windows\PFRO.log
2013-11-15 11:54 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\Performance
2013-11-15 11:34 - 2013-11-15 11:34 - 00000000 ____D C:\Users\Hauke\AppData\Roaming\Malwarebytes
2013-11-15 11:33 - 2013-11-15 11:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-15 11:33 - 2013-11-15 11:33 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 11:31 - 2013-11-15 11:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hauke\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-11 21:43 - 2013-11-11 21:43 - 00000000 ____D C:\FRST
2013-11-11 02:19 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Microsoft Games
2013-11-11 02:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-11-07 08:59 - 2012-09-28 19:08 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-06 14:42 - 2013-11-06 14:42 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-05 09:04 - 2009-07-14 05:53 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-25 22:24 - 2012-09-28 16:27 - 00000000 ____D C:\Users\Hauke\AppData\Local\Microsoft Help
2013-10-17 09:48 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
Some content of TEMP:
====================
C:\Users\Hauke\AppData\Local\Temp\7VD8z3x.exe
C:\Users\Hauke\AppData\Local\Temp\AcDeltree.exe
C:\Users\Hauke\AppData\Local\Temp\mp3el.exe
C:\Users\Hauke\AppData\Local\Temp\ose00000.exe
C:\Users\Hauke\AppData\Local\Temp\Quarantine.exe
C:\Users\Hauke\AppData\Local\Temp\Vista_Win7_Win8_R270.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-31 08:42
==================== End Of Log ============================
--- --- --- Von Farbar´s Recovery Scan Tool die Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-11-2013
Ran by Hauke at 2013-11-15 12:15:47
Running from C:\Users\Hauke\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader X (10.1.5) - Deutsch (Version: 10.1.5)
Akamai NetSession Interface
Apple Application Support (Version: 2.3.2)
Apple Mobile Device Support (Version: 6.0.1.3)
Apple Software Update (Version: 2.1.3.127)
Audacity 2.0.3 (Version: 2.0.3)
AutoCAD 2011 - Deutsch (Version: 18.1.49.0)
AutoCAD 2011 Language Pack - Deutsch (Version: 18.1.49.0)
Autodesk DWG TrueView 2014 (Version: 19.1.18.0)
Autodesk Material Library 2011 (Version: 2.0.0.49)
Autodesk Material Library 2011 Base Image library (Version: 2.0.0.49)
BitKinex (Version: 3.2.3)
Bonjour (Version: 3.0.0.10)
Crystal (Version: 1.3.382.0)
DWGdirectX Core (Version: 3.2.0.0)
FARO LS 1.1.406.58 (Version: 4.6.58.2)
Free YouTube to iPod Converter version 3.10.37.1212 (Version: 3.10.37.1212)
Free YouTube to MP3 Converter version 3.11.34.1015 (Version: 3.11.34.1015)
iTunes (Version: 11.0.1.12)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
mb WorkSuite 2012 (Version: 20.12.0630)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 25.0 (x86 de) (Version: 25.0)
Mozilla Maintenance Service (Version: 25.0)
Nero 7 Essentials (Version: 7.02.4142)
NVIDIA Control Panel 307.83 (Version: 307.83)
NVIDIA Graphics Driver 307.83 (Version: 307.83)
NVIDIA Install Application (Version: 2.1002.109.706)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
OpenProj (Version: 1.4.0)
PDFCreator (Version: 1.5.0)
Realtek High Definition Audio Driver (Version: 6.0.1.6662)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition
VLC media player 2.0.4 (Version: 2.0.4)
WavePad Sound Editor
ZUB Argos® Pro 2012
==================== Restore Points =========================
15-11-2013 10:35:35 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1EDC6212-2AC0-4D4D-A272-A3AB3BDBC99D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-06 14:42 - 2013-11-06 14:42 - 03368048 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-10-15 13:03 - 2013-10-15 13:03 - 16233864 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 41%
Total physical RAM: 2046.55 MB
Available physical RAM: 1196.88 MB
Total Pagefile: 4093.11 MB
Available Pagefile: 3062.06 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.46 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:34.18 GB) (Free:0.78 GB) NTFS
Drive d: () (Fixed) (Total:263.81 GB) (Free:180.37 GB) NTFS
Drive g: (TOSHIBA) (Removable) (Total:29.05 GB) (Free:29.05 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: AAD4AAD4)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=34 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=264 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 29 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=29 GB) - (Type=0C)
==================== End Of Log ============================
|
| Themen zu Windows 7, BKA-Virus, Bildschirm gesperrt |
| abgesicherte, abgesicherten, betriebssystem, bildschirm, computer, desktop, gesperrt, interne, internet, java/exploit.agent.qcz, komplett, modus, pup.optional.babylon.a, pup.optional.optimizepro.a, runter, sekunden, starte, surfe, trojan.winlock.u, win32/lockscreen.avp, win32/webprefix.b, windows, windows 7, zahlen |