| |
| |||||||
Log-Analyse und Auswertung: Windows 8.1 Firefox: Problem mit Werbeseiten, Werbung beim Öffnen eines neuen TabsWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
21.02.2014, 21:49
| #1 |
| |  Windows 8.1 Firefox: Problem mit Werbeseiten, Werbung beim Öffnen eines neuen Tabs Hallo, hier das ESET log: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=12
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=09c34dd58e606749b79090d960a440a6
# engine=17159
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-21 12:49:56
# local_time=2014-02-21 01:49:56 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=774 16777213 71 77 444910 445112 0 0
# compatibility_mode=1799 16775165 100 94 182877 5591821 177031 0
# compatibility_mode=5893 16776574 100 94 12429194 17825089 0 0
# scanned=299074
# found=0
# cleaned=0
# scan_time=16261
Code:
ATTFilter Results of screen317's Security Check version 0.99.79 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender avast! Antivirus Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Adobe Flash Player 12.0.0.44 Adobe Reader XI Mozilla Firefox (27.0.1) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` Und hier der aktuelle FRST Scan: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-02-2014 Ran by Surf (ATTENTION: The logged in user is not administrator) on LENOVO-U430 on 21-02-2014 21:44:13 Running from E:\Users\Surf\Downloads Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek semiconductor) C:\Windows\RTFTrack.exe (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe () C:\Program Files (x86)\Lenovo\MotionControl\MotionControl.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtsFT] - C:\WINDOWS\RTFTrack.exe [6340312 2013-08-02] (Realtek semiconductor) HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [677616 2013-03-01] (Synaptics) HKLM\...\Run: [Energy Manager] - C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15795696 2013-10-27] (Lenovo(beijing) Limited) HKLM\...\Run: [Lenovo Utility] - C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [101360 2013-10-27] (Lenovo(beijing) Limited) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3039984 2013-03-01] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2014-01-08] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2014-01-08] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7830328 2013-05-21] (Motorola Solutions, Inc.) HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2014-01-08] (Realtek Semiconductor) HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.) HKLM-x32\...\Run: [mcui_exe] - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [439440 2011-09-27] (CANON INC.) HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Movie_Edit_Pro_15_Plus\TrayServer.exe [90112 2008-11-13] (MAGIX AG) HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-15] (AVAST Software) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [458616 2013-09-30] (Microsoft Corporation) HKLM-x32\...\RunOnce: [20131224] - C:\Program Files\AVAST Software\Avast\setup\emupdate\bf26047e-da3e-49f2-a13a-bd1d0dc22b0a.exe /check [181136 2014-02-12] (AVAST Software) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3631967296-1992313334-902262283-1007\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2013-01-16] (Hewlett-Packard Company) HKU\S-1-5-21-3631967296-1992313334-902262283-1007\...\Run: [Google Update] - C:\Users\Surf\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-02-20] (Google Inc.) HKU\S-1-5-21-3631967296-1992313334-902262283-1007\...\MountPoints2: {3b59c6e2-7319-11e3-bed9-089e01ec257b} - "F:\ZTE_Handset_USB_Driver.exe" HKU\S-1-5-21-3631967296-1992313334-902262283-1007\...\MountPoints2: {c506dc9c-53a8-11e3-beb1-0c8bfd6d601d} - "F:\HTC_Sync_Manager_PC.exe" HKU\S-1-5-21-3631967296-1992313334-902262283-1007\...\MountPoints2: {c506dd75-53a8-11e3-beb1-0c8bfd6d601d} - "F:\HTC_Sync_Manager_PC.exe" AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-11-01] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-11-01] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com SearchScopes: HKLM - DefaultScope {DF594F21-6B32-4C50-8568-D599002895F2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB SearchScopes: HKLM - {DF594F21-6B32-4C50-8568-D599002895F2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB SearchScopes: HKLM-x32 - DefaultScope {DF594F21-6B32-4C50-8568-D599002895F2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB SearchScopes: HKLM-x32 - {DF594F21-6B32-4C50-8568-D599002895F2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB SearchScopes: HKCU - DefaultScope {DF594F21-6B32-4C50-8568-D599002895F2} URL = SearchScopes: HKCU - {DF594F21-6B32-4C50-8568-D599002895F2} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Surf\AppData\Roaming\Mozilla\Firefox\Profiles\isxk5mv2.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_44.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Surf\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Surf\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Widevine Media Optimizer - C:\Users\Surf\AppData\Roaming\Mozilla\Firefox\Profiles\isxk5mv2.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2013-12-29] FF Extension: Session Manager - C:\Users\Surf\AppData\Roaming\Mozilla\Firefox\Profiles\isxk5mv2.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-02-13] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-04] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-15] (AVAST Software) S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-22] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-20] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-30] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-15] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-20] (Intel Corporation) R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [585032 2013-09-23] (LENOVO INCORPORATED.) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-02-11] (IObit) R2 lmhosts; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] () R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2012-12-13] (Nitro PDF Software) R2 NlaSvc; C:\Windows\System32\svchost.exe [37768 2013-08-22] (Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation) R2 Serviio; C:\Program Files\Serviio\bin\ServiioService.exe [359936 2013-12-20] () R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2013-09-26] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [38424 2010-10-18] (Google Inc) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [78648 2014-02-15] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-12-04] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-04] () R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1038072 2014-02-15] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [421704 2014-02-15] (AVAST Software) R3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [80184 2014-02-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-09] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-18] (Avira Operations GmbH & Co. KG) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation) R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-04-15] () R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-04-15] () R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-04-15] () S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-20] (Intel Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3607520 2014-01-09] (Intel Corporation) S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3578848 2013-05-01] (Intel Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8873688 2013-08-02] (Realtek Semiconductor Corp.) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-01] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-02-19] () S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) S3 zghsdiag; C:\Windows\system32\DRIVERS\zghsdiag.sys [122624 2011-01-13] (ZTE Incorporated) S3 zghsmdm; C:\Windows\system32\DRIVERS\zghsmdm.sys [122624 2011-01-13] (ZTE Incorporated) S3 zghsnmea; C:\Windows\system32\DRIVERS\zghsnmea.sys [122624 2011-01-13] (ZTE Incorporated) S3 usb3Hub; \SystemRoot\System32\drivers\usb3Hub.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-21 21:07 - 2014-02-21 21:07 - 00987425 _____ () C:\Users\Surf\Desktop\SecurityCheck.exe 2014-02-20 21:12 - 2014-02-20 21:12 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-02-20 21:07 - 2014-02-20 21:07 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\IDM 2014-02-20 21:06 - 2014-02-21 21:11 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3631967296-1992313334-902262283-1007UA.job 2014-02-20 21:06 - 2014-02-21 21:11 - 00001088 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3631967296-1992313334-902262283-1007Core.job 2014-02-20 21:06 - 2014-02-20 21:06 - 00000000 ____D () C:\Users\Surf\AppData\Local\Google 2014-02-20 21:06 - 2014-02-20 21:06 - 00000000 ____D () C:\Users\Surf\AppData\Local\Deployment 2014-02-20 21:06 - 2014-02-20 21:06 - 00000000 ____D () C:\Users\Surf\AppData\Local\Apps\2.0 2014-02-19 00:02 - 2014-02-19 00:02 - 00094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp 2014-02-18 23:38 - 2014-02-18 23:38 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys 2014-02-18 23:11 - 2014-02-18 23:11 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-02-18 23:01 - 2014-02-18 23:01 - 01037530 _____ (Thisisu) C:\Users\Surf\Desktop\JRT.exe 2014-02-18 20:28 - 2014-02-18 20:28 - 00000000 ____D () C:\AdwCleaner 2014-02-18 20:26 - 2014-02-18 20:26 - 00001132 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-18 20:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-02-15 14:27 - 2014-02-15 14:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-13 23:32 - 2014-02-15 23:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-13 23:32 - 2014-02-13 23:32 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-13 23:07 - 2014-02-21 21:36 - 00000000 ____D () C:\FRST 2014-02-12 20:43 - 2014-02-12 20:43 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\Avira 2014-02-12 20:39 - 2014-02-12 20:39 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\Avira 2014-02-12 20:35 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-12 20:35 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-12 20:35 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-12 20:35 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-12 20:35 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-12 20:35 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-12 20:35 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-02-12 20:35 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-12 20:35 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-12 20:35 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-02-12 20:35 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-12 20:35 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-12 20:35 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-12 20:35 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-02-12 20:35 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-12 20:35 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-12 20:35 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-02-12 20:35 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-02-12 20:35 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-02-12 20:35 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-02-12 20:35 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-02-12 20:35 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-02-12 20:35 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-02-12 20:35 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-02-12 20:35 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-02-12 20:34 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-12 20:34 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-12 20:34 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-12 20:34 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-12 20:34 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-12 20:34 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-12 20:34 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-12 20:34 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-12 20:34 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-02-12 20:34 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-02-12 20:34 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-12 20:34 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-12 20:34 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-02-12 20:34 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-12 20:34 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-12 20:34 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-12 20:34 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-02-12 20:34 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-02-12 20:34 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-02-12 20:34 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-12 20:34 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-02-12 20:34 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-02-12 20:34 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-12 20:34 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-12 20:34 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-02-12 20:34 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-02-12 20:34 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-02-12 20:34 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-02-12 20:34 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms 2014-02-12 20:34 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms 2014-02-12 20:34 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-02-12 20:34 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-02-12 20:34 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-02-12 20:34 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-02-12 20:33 - 2014-02-12 20:33 - 00002093 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-02-12 20:33 - 2014-02-12 20:33 - 00000000 ____D () C:\ProgramData\Avira 2014-02-12 20:33 - 2014-02-12 20:33 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-02-12 20:33 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-02-12 20:33 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-02-12 20:33 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-12 20:33 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-02-12 20:33 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-02-12 20:33 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-02-12 20:33 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-02-12 20:33 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-12 20:33 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-02-12 20:33 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-12 20:33 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2014-02-12 20:33 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2014-02-12 20:33 - 2013-12-24 04:16 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-12 20:33 - 2013-12-18 09:32 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2014-02-12 20:33 - 2013-12-18 09:32 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2014-02-12 20:33 - 2013-12-18 09:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys 2014-02-11 22:20 - 2014-02-11 22:20 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\Malwarebytes 2014-02-11 22:17 - 2014-02-18 20:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-11 22:17 - 2014-02-11 22:17 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-11 22:04 - 2014-02-11 22:04 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\IObit 2014-02-11 22:03 - 2014-02-11 22:03 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\ProductData 2014-02-11 22:02 - 2014-02-18 23:34 - 00000000 ____D () C:\ProgramData\ProductData 2014-02-11 22:02 - 2014-02-11 22:02 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\ProductData 2014-02-11 22:02 - 2014-02-11 22:02 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\IObit 2014-02-11 22:02 - 2014-02-11 22:02 - 00000000 ____D () C:\ProgramData\IObit 2014-02-11 22:01 - 2014-02-11 22:02 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-02-05 21:54 - 2014-02-05 21:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 2014-02-02 23:07 - 2014-02-02 23:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-02-02 23:07 - 2014-02-02 23:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-24 21:25 - 2014-01-24 21:25 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-01-24 21:25 - 2014-01-24 21:25 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-01-24 21:25 - 2014-01-24 21:25 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-01-24 21:25 - 2014-01-24 21:25 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2014-01-24 21:25 - 2014-01-24 21:25 - 00000000 ____D () C:\Program Files\Java ==================== One Month Modified Files and Folders ======= 2014-02-21 21:44 - 2014-02-13 23:07 - 00000000 ____D () C:\FRST 2014-02-21 21:41 - 2013-10-26 08:58 - 00000189 _____ () C:\.dir 2014-02-21 21:18 - 2013-10-21 19:31 - 01394297 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-21 21:11 - 2014-02-20 21:06 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3631967296-1992313334-902262283-1007UA.job 2014-02-21 21:11 - 2014-02-20 21:06 - 00001088 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3631967296-1992313334-902262283-1007Core.job 2014-02-21 21:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-02-21 21:07 - 2014-02-21 21:07 - 00987425 _____ () C:\Users\Surf\Desktop\SecurityCheck.exe 2014-02-21 21:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-02-20 21:12 - 2014-02-20 21:12 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-02-20 21:07 - 2014-02-20 21:07 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\IDM 2014-02-20 21:06 - 2014-02-20 21:06 - 00000000 ____D () C:\Users\Surf\AppData\Local\Google 2014-02-20 21:06 - 2014-02-20 21:06 - 00000000 ____D () C:\Users\Surf\AppData\Local\Deployment 2014-02-20 21:06 - 2014-02-20 21:06 - 00000000 ____D () C:\Users\Surf\AppData\Local\Apps\2.0 2014-02-19 21:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-02-19 00:03 - 2013-11-10 23:38 - 00000369 _____ () C:\Users\Surf\AppData\Local\RegisteredPackageInformation.xml 2014-02-19 00:02 - 2014-02-19 00:02 - 00094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp 2014-02-19 00:02 - 2013-11-24 22:57 - 00034752 _____ () C:\WINDOWS\system32\Drivers\WPRO_41_2001.sys 2014-02-19 00:02 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-02-19 00:01 - 2013-09-29 20:04 - 00133040 _____ () C:\WINDOWS\PFRO.log 2014-02-19 00:01 - 2013-09-26 17:00 - 00008704 _____ () C:\WINDOWS\system32\VfService.trf 2014-02-18 23:38 - 2014-02-18 23:38 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys 2014-02-18 23:34 - 2014-02-11 22:02 - 00000000 ____D () C:\ProgramData\ProductData 2014-02-18 23:11 - 2014-02-18 23:11 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-02-18 23:01 - 2014-02-18 23:01 - 01037530 _____ (Thisisu) C:\Users\Surf\Desktop\JRT.exe 2014-02-18 22:36 - 2013-09-30 05:14 - 00005884 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-02-18 22:36 - 2013-09-30 04:56 - 01163042 _____ () C:\WINDOWS\system32\perfh007.dat 2014-02-18 22:36 - 2013-09-30 04:56 - 00277342 _____ () C:\WINDOWS\system32\perfc007.dat 2014-02-18 20:28 - 2014-02-18 20:28 - 00000000 ____D () C:\AdwCleaner 2014-02-18 20:26 - 2014-02-18 20:26 - 00001132 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-18 20:26 - 2014-02-11 22:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-17 23:37 - 2013-10-21 20:33 - 00000000 ____D () C:\Users\Surf 2014-02-17 23:31 - 2013-10-21 19:38 - 00000000 ____D () C:\Users\adria_000 2014-02-17 23:30 - 2013-10-27 20:12 - 00136704 ___SH () C:\Users\Surf\Desktop\Thumbs.db 2014-02-17 23:28 - 2013-12-27 21:27 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-02-17 23:28 - 2013-12-27 21:27 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-02-17 23:28 - 2013-09-26 16:16 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-17 23:17 - 2014-01-01 20:16 - 634034163 _____ () C:\WINDOWS\MEMORY.DMP 2014-02-17 23:17 - 2014-01-01 20:16 - 00000000 ____D () C:\WINDOWS\Minidump 2014-02-15 23:13 - 2014-02-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 23:12 - 2013-12-04 00:17 - 00001993 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-02-15 23:11 - 2014-01-09 20:43 - 00080184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys 2014-02-15 23:11 - 2013-12-04 00:16 - 01038072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2014-02-15 23:11 - 2013-12-04 00:16 - 00421704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2014-02-15 23:11 - 2013-12-04 00:16 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2014-02-15 23:11 - 2013-12-04 00:16 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2014-02-15 23:11 - 2013-12-04 00:16 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-02-15 23:04 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-02-15 23:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-02-15 23:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-02-15 23:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-02-15 14:27 - 2014-02-15 14:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-13 23:32 - 2014-02-13 23:32 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-12 20:43 - 2014-02-12 20:43 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\Avira 2014-02-12 20:39 - 2014-02-12 20:39 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\Avira 2014-02-12 20:33 - 2014-02-12 20:33 - 00002093 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2014-02-12 20:33 - 2014-02-12 20:33 - 00000000 ____D () C:\ProgramData\Avira 2014-02-12 20:33 - 2014-02-12 20:33 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-02-11 22:20 - 2014-02-11 22:20 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\Malwarebytes 2014-02-11 22:17 - 2014-02-11 22:17 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-11 22:04 - 2014-02-11 22:04 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\IObit 2014-02-11 22:03 - 2014-02-11 22:03 - 00000000 ____D () C:\Users\Surf\AppData\Roaming\ProductData 2014-02-11 22:02 - 2014-02-11 22:02 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\ProductData 2014-02-11 22:02 - 2014-02-11 22:02 - 00000000 ____D () C:\Users\adria_000\AppData\Roaming\IObit 2014-02-11 22:02 - 2014-02-11 22:02 - 00000000 ____D () C:\ProgramData\IObit 2014-02-11 22:02 - 2014-02-11 22:01 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-02-09 23:32 - 2013-08-22 14:25 - 00000188 _____ () C:\WINDOWS\win.ini 2014-02-06 22:35 - 2013-11-02 20:52 - 00000000 ____D () C:\ProgramData\Lexware 2014-02-06 13:16 - 2014-02-12 20:34 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-12 20:35 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-12 20:35 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-12 20:35 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-12 20:34 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-12 20:35 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-12 20:34 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-12 20:35 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-06 11:49 - 2014-02-12 20:34 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-12 20:35 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-06 11:48 - 2014-02-12 20:34 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-06 11:38 - 2014-02-12 20:35 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-12 20:34 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-12 20:34 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-12 20:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-06 11:11 - 2014-02-12 20:34 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-12 20:35 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-12 20:35 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-12 20:35 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-12 20:34 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-12 20:35 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-12 20:35 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-12 20:34 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-06 10:47 - 2014-02-12 20:34 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-12 20:35 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-12 20:34 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-12 20:34 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-12 20:34 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-06 10:22 - 2014-02-12 20:34 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-12 20:35 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-12 20:35 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-12 20:34 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-12 20:35 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-12 20:34 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-12 20:34 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-12 20:35 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-12 20:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-05 21:54 - 2014-02-05 21:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 2014-02-02 23:07 - 2014-02-02 23:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-02-02 23:07 - 2014-02-02 23:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-30 08:33 - 2013-11-02 20:23 - 00000000 ____D () C:\Users\Banking\AppData\Roaming\Adobe 2014-01-26 16:33 - 2013-10-21 21:21 - 00000000 ___RD () C:\Users\adria_000\SkyDrive 2014-01-24 22:41 - 2013-09-26 17:03 - 00000000 ____D () C:\Program Files\Lenovo 2014-01-24 21:25 - 2014-01-24 21:25 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-01-24 21:25 - 2014-01-24 21:25 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-01-24 21:25 - 2014-01-24 21:25 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-01-24 21:25 - 2014-01-24 21:25 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2014-01-24 21:25 - 2014-01-24 21:25 - 00000000 ____D () C:\Program Files\Java Some content of TEMP: ==================== C:\Users\Surf\AppData\Local\Temp\avgnt.exe C:\Users\Surf\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Surf\AppData\Local\Temp\i4jdel0.exe C:\Users\Surf\AppData\Local\Temp\setup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== End Of Log ============================ --- --- --- Muss jetzt noch ein bisschen mit Firefox spielen, um zu sehen, ob das Problem noch existiert. Aber eigentlich habe ich ja immer nur gescannt und nichts entfernt. Deswegen würde ich mich wundern, wenn es weg sein sollte. Oder liege ich da falsch? Viele Grüße |
|
| Themen zu Windows 8.1 Firefox: Problem mit Werbeseiten, Werbung beim Öffnen eines neuen Tabs |
| abbrüche, antivir, antivirus, avira, browser, canon, cpu, desktop, device driver, firefox, flash player, helper, homepage, mozilla, msiinstaller, performance, problem, programm, realtek, registry, security, services.exe, software, svchost.exe, system, usb, warnung, werbung, windows |
Hybrid-Darstellung
