![]() |
|
Plagegeister aller Art und deren Bekämpfung: Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
| ![]() Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. Hallo, ich habe vollgendes Problem gestern festgestellt, Avira und Malwarebytes sich nicht mehr öffnen lassen es kommt die Meldung "... ist keine zuverlässige 32 bit-anwendung". Dannach habe ich auch festgestellt das die Windows Firewall deaktiviert ist und ich kann die firewall nicht wieder aktivieren da ich nicht die nötigen Berechtigungen habe obwohl ich als Admin Angemeldet bin. Ich hoffe Ihr könnt mir Helfen vielen Dank schon mal im vorraus. |
![]() | #2 |
/// TB-Ausbilder /// Anleitungs-Guru ![]() ![]() ![]() ![]() ![]() | ![]() Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert.![]() Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das... ![]()
![]() Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean ![]() Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Das dauert dann zwar ein paar Stunden länger, garantiert aber, dass Du kompetente Hilfe und geprüfte Antworten bekommst. Siehe hier... Ich bedanke mich für Deine Geduld! ![]() Schritt 1 (Scan mit FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: ![]() (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
![]() Lesestoff Posten in CODE-Tags: So gehts... Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
![]()
__________________ |
![]() | #3 |
| ![]() Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. Ihr ist die FRST.txt
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-05-2014 Ran by Gaming pc (administrator) on GAMINGPC-PC on 10-05-2014 14:27:40 Running from C:\Users\Gaming pc\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\System32\CISVC.EXE (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe (MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe () C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe (Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe (Oracle Corporation) C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.4\MySQLNotifier.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Autodesk, Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-11] (Intel Corporation) HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation) HKLM-x32\...\Run: [d2be3e6d11846430c067fc874a79f583] => "C:\Users\Gaming pc\AppData\Local\Temp\java.exe" .. HKLM-x32\...\Run: [ApnTBMon] => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" HKLM-x32\...\Run: [ADSK DLMSession] => C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1641368 2013-02-01] (Autodesk, Inc.) HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe HKLM-x32\...\Run: [MFARestart] => C:\ProgramData\MFAData\pack\avgrunasx.exe [314896 2014-03-27] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] => "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe" HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] => "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" HKU\S-1-5-19\...\Run: [adminkey] => C:\ProgramData\folder\mtqadjqbe.exe [262033 2014-05-04] (Symantec ® Corporation SidePro) HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Run: [adminkey] => C:\ProgramData\folder\mtqadjqbe.exe [262033 2014-05-04] (Symantec ® Corporation SidePro) HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [37664 2014-03-05] (Overwolf LTD) HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Run: [MySQL Notifier] => C:\Program Files (x86)\MySQL\MySQL Notifier 1.1.4\MySqlNotifier.exe [762368 2013-07-05] (Oracle Corporation) HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-12-06] (AMD) HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Policies\system: [EnableLUA] 0 HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\CurrentVersion\Windows: [Load] C:\Windows\system32\Microsoft.com <===== ATTENTION HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Policies\Explorer: [] HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Policies\Explorer: [TaskbarNoNotification] 1 HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Policies\Explorer: [HideSCAHealth] 1 HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\Policies\Explorer: [DisallowRun] 1 HKU\S-1-5-21-1761028741-3533212565-443726766-1000\...\MountPoints2: {4371f346-7f8a-11e3-a467-d43d7ebdbc00} - E:\setup.exe IFEO\AvastSvc.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\AvastUI.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avcenter.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avconfig.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avgcsrvx.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avgidsagent.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avgnt.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avgrsx.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avguard.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avgui.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avgwdsvc.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avp.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\avscan.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\bdagent.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\ccuac.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\ComboFix.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\egui.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\hijackthis.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\instup.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\keyscrambler.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\mbam.exe: [Debugger] zwrstu.exe IFEO\mbamgui.exe: [Debugger] skskjb.exe IFEO\mbampt.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\mbamscheduler.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\mbamservice.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\MpCmdRun.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\MSASCui.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\MsMpEng.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\msseces.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\rstrui.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\spybotsd.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\SSScheduler.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\wireshark.exe: [Debugger] C:\Windows\system32\Microsoft.com IFEO\zlclient.exe: [Debugger] C:\Windows\system32\Microsoft.com Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM - 931B4090B162439199140CDA6E2CECDF URL = SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=103&systemid=473&v=a11465-172&apn_uid=3361143290744442&apn_dtid=BND101&o=APN10640&apn_ptnrs=AG1&q={searchTerms} SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPCAF66BCF-5A15-45D9-AAD8-951C2A465CDD&q={searchTerms}&SSPV= SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" No File Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Gaming pc\AppData\Roaming\Mozilla\Firefox\Profiles\3ngzs4ee.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Gaming pc\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Gaming pc\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR Extension: (Google Wallet) - C:\Users\Gaming pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-15] CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2013-10-15] CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-04-25] () S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-03-13] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [180200 2013-02-13] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation) R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation) R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI) R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-04-18] (MICRO-STAR INTERNATIONAL CO., LTD.) R2 MySQL56; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14256 2014-05-04] () S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2014-04-14] (The OpenVPN Project) S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation) S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe" [X] S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X] S2 Util Surftastic; "C:\Program Files (x86)\Surftastic\bin\utilSurftastic.exe" [X] ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-17] (Disc Soft Ltd) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-02-13] () S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-22] (Malwarebytes Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI) R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] () S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-05-10] () S3 ALSysIO; \??\C:\Users\GAMING~1\AppData\Local\Temp\ALSysIO64.sys [X] S3 MSICDSetup; \??\D:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-10 14:27 - 2014-05-10 14:27 - 00018289 _____ () C:\Users\Gaming pc\Desktop\FRST.txt 2014-05-10 14:26 - 2014-05-10 14:27 - 00048593 _____ () C:\Users\Gaming pc\Downloads\FRST.txt 2014-05-10 14:26 - 2014-05-10 14:26 - 02065408 _____ (Farbar) C:\Users\Gaming pc\Desktop\FRST64.exe 2014-05-10 12:01 - 2014-05-10 12:01 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Macromedia 2014-05-10 12:01 - 2014-05-10 12:01 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Adobe 2014-05-10 12:00 - 2014-05-10 12:00 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\ATI 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Apple Computer 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\MFAData 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Avg2014 2014-05-10 11:54 - 2014-05-10 11:54 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Mozilla 2014-05-10 11:51 - 2014-05-10 11:51 - 00003374 _____ () C:\Windows\System32\Tasks\Install_SSD 2014-05-10 11:38 - 2014-05-10 14:27 - 00000000 ____D () C:\FRST 2014-05-10 11:32 - 2014-05-10 11:32 - 00000000 _____ () C:\Users\Gaming pc\defogger_reenable 2014-05-10 11:15 - 2014-05-10 11:15 - 06103040 _____ () C:\Program Files (x86)\GUTDF67.tmp 2014-05-10 11:15 - 2014-05-10 11:15 - 00000000 ____D () C:\Program Files (x86)\GUMDF08.tmp 2014-05-09 21:04 - 2014-05-09 21:04 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\TuneUp Software 2014-05-09 20:59 - 2014-05-10 11:17 - 00000000 ____D () C:\ProgramData\MFAData 2014-05-09 20:43 - 2014-05-09 20:43 - 00858295 _____ () C:\Users\Gaming pc\Documents\pinfect.zip 2014-05-09 20:41 - 2014-05-09 20:42 - 19759335 _____ () C:\Windows\REGBK00.ZIP 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\VDLL.DLL 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\SysWOW64\runouce.exe 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\rundll16.exe 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\RUNDL132.EXE 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\logo1_.exe 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\logo_1.exe 2014-05-09 20:40 - 2014-05-09 20:40 - 00632064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr80.dll 2014-05-09 20:40 - 2014-05-09 20:40 - 00554240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp80.dll 2014-05-09 20:40 - 2014-05-09 20:40 - 00034048 _____ (MicroWorld Technologies Inc.) C:\Windows\SysWOW64\eEmpty.exe 2014-05-09 20:40 - 2014-05-09 20:40 - 00000028 _____ () C:\Windows\Lic.xxx 2014-05-09 20:40 - 2014-05-09 20:40 - 00000000 ____D () C:\ProgramData\MicroWorld 2014-05-09 20:40 - 2005-09-22 23:22 - 00000522 _____ () C:\Windows\SysWOW64\Microsoft.VC80.CRT.manifest 2014-05-09 20:30 - 2014-05-10 11:59 - 00000000 ____D () C:\AdwCleaner 2014-05-09 20:30 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-09 20:21 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-09 20:21 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-09 20:21 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-09 19:56 - 2014-05-09 19:56 - 00000000 ____D () C:\Users\Gaming pc\ChromeExtensions 2014-05-09 19:47 - 2014-05-09 19:47 - 00120832 _____ () C:\Windows\system32\cmlua64.exe 2014-05-09 19:41 - 2014-05-10 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-09 19:41 - 2014-05-10 11:22 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-09 19:37 - 2014-05-09 19:37 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-05-09 19:33 - 2014-05-10 12:01 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Oracle 2014-05-09 17:58 - 2014-05-09 17:58 - 00082457 _____ () C:\Users\Gaming pc\Documents\log.xml 2014-05-09 16:20 - 2014-05-09 16:20 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Music Manager 2014-05-09 16:18 - 2014-05-09 16:18 - 00000000 _____ () C:\autoexec.bat 2014-05-09 16:17 - 2014-05-09 16:22 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-09 16:17 - 2014-05-09 16:17 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-09 16:11 - 2014-03-02 18:24 - 00000426 _____ () C:\AVScanner.ini 2014-05-09 16:09 - 2014-05-10 12:00 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-09 15:51 - 2014-05-10 14:23 - 00000000 __RHO () C:\Windows\SysWOW64\Microsoft.com 2014-05-06 15:51 - 2014-05-06 15:54 - 00000302 _____ () C:\Users\Gaming pc\AppData\Roaming\BreakingPoint_Login.ini 2014-05-04 16:37 - 2014-05-04 16:37 - 00003222 _____ () C:\Windows\System32\Tasks\Windows Update Check - 0x140703D5 2014-05-04 14:08 - 2014-05-04 14:08 - 00000019 _____ () C:\Users\Gaming pc\Desktop\[76561198110998659].txt 2014-05-04 12:10 - 2014-05-06 16:03 - 00001256 _____ () C:\Users\Gaming pc\AppData\Roaming\BreakingPoint_Options.ini 2014-05-04 12:03 - 2014-05-04 12:03 - 00001034 _____ () C:\Users\Gaming pc\Desktop\Breaking Point.lnk 2014-05-04 12:02 - 2014-05-06 15:54 - 00000000 ____D () C:\Program Files (x86)\Breaking 2014-05-03 21:48 - 2014-05-03 21:48 - 00000000 ____D () C:\Users\Gaming pc\Documents\Navicat 2014-05-03 21:43 - 2014-05-03 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PremiumSoft 2014-05-03 21:43 - 2014-05-03 21:43 - 00000000 ____D () C:\Program Files\PremiumSoft 2014-05-03 21:43 - 2013-10-08 09:55 - 01988096 _____ () C:\Windows\system32\libmysql_e.dll 2014-05-03 21:41 - 2014-05-10 11:51 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\MySQL 2014-05-03 21:37 - 2014-05-09 20:19 - 00000000 ____D () C:\Program Files\MySQL 2014-05-03 21:37 - 2014-05-09 20:16 - 00000023 _____ () C:\Windows\ODBCINST.INI 2014-05-03 21:37 - 2014-05-09 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySQL 2014-05-03 21:36 - 2014-05-09 20:18 - 00000000 ____D () C:\Program Files (x86)\MySQL 2014-05-03 21:36 - 2014-05-03 21:37 - 00000000 ____D () C:\ProgramData\MySQL 2014-05-03 21:36 - 2014-05-03 21:36 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL 2014-05-01 20:03 - 2014-05-01 20:03 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PBO Manager 2014-05-01 20:03 - 2014-05-01 20:03 - 00000000 ____D () C:\Program Files\PBO Manager v.1.4 beta 2014-04-30 19:49 - 2014-04-30 19:49 - 00001103 _____ () C:\Users\Public\Desktop\OpenVPN GUI.lnk 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\Program Files\TAP-Windows 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\Program Files (x86)\OpenVPN 2014-04-30 19:14 - 2014-04-30 19:14 - 00001971 _____ () C:\Users\Public\Desktop\Overwolf.lnk 2014-04-30 19:14 - 2014-04-30 19:14 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-04-30 19:14 - 2014-04-30 19:14 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-04-30 19:13 - 2014-05-10 12:01 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Overwolf 2014-04-30 19:13 - 2014-04-30 19:13 - 00001222 _____ () C:\Users\Gaming pc\Desktop\TeamSpeak 3 Client.lnk 2014-04-30 19:13 - 2014-04-30 19:13 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\TeamSpeak 3 Client 2014-04-25 20:32 - 2014-04-25 20:32 - 00000201 _____ () C:\Users\Gaming pc\Desktop\arma3.url 2014-04-25 20:24 - 2014-04-25 20:24 - 00000222 _____ () C:\Users\Gaming pc\Desktop\Arma 3.url 2014-04-25 20:16 - 2014-05-09 15:52 - 00000000 __SHD () C:\Program Files (x86)\Windows Manager 2014-04-25 20:11 - 2014-04-25 20:16 - 00000000 ____D () C:\Program Files (x86)\Kepard 2014-04-25 19:51 - 2014-04-25 19:51 - 00003154 _____ () C:\Windows\System32\Tasks\{A8F5506E-8DE9-4484-9A04-FB634B47CB35} 2014-04-25 19:45 - 2014-05-09 16:12 - 00002300 _____ () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-04-24 20:56 - 2014-04-30 19:13 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-04-24 17:32 - 2014-05-09 15:44 - 00000000 ___RD () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-24 17:32 - 2014-04-24 17:32 - 00000000 ___RD () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-24 13:20 - 2014-04-24 13:20 - 06389248 _____ (Alderon Games) C:\Program Files (x86)\BreakingPoint.exe 2014-04-24 13:20 - 2014-04-24 13:20 - 03019880 _____ (BitTorrent, Inc.) C:\Program Files (x86)\BTSync.exe 2014-04-24 13:20 - 2014-04-24 13:20 - 01068544 _____ (Alderon Games) C:\Program Files (x86)\ApplyUpdate.exe 2014-04-22 14:58 - 2014-05-08 16:33 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Arma 3 2014-04-22 14:58 - 2014-04-22 17:31 - 00000000 ____D () C:\Users\Gaming pc\Documents\Arma 3 2014-04-22 14:58 - 2014-04-22 14:58 - 00000000 ____D () C:\ProgramData\Bohemia Interactive 2014-04-22 14:56 - 2014-04-22 19:26 - 00000772 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ARMA 3.lnk 2014-04-18 18:56 - 2014-04-22 12:51 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-17 13:04 - 2009-09-27 09:39 - 00415744 ___SH (The Public) C:\Windows\SysWOW64\avisynth.dll 2014-04-17 13:04 - 2005-07-14 12:31 - 00032256 ___SH () C:\Windows\SysWOW64\AVSredirect.dll 2014-04-17 13:04 - 2004-02-22 10:11 - 00764416 ___SH (Abysmal Software) C:\Windows\SysWOW64\devil.dll 2014-04-17 13:04 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll 2014-04-17 13:04 - 2004-01-25 00:00 - 00070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\i420vfw.dll 2014-04-17 13:00 - 2014-04-22 15:49 - 00000000 ____D () C:\Program Files (x86)\eRightSoft 2014-04-17 13:00 - 2014-04-17 13:00 - 01097384 _____ (AnyProtect.com) C:\Users\Gaming pc\AppData\Local\nsy525F.tmp 2014-04-17 13:00 - 2014-04-17 13:00 - 00000000 ____D () C:\Users\Gaming pc\Documents\eRightSoft 2014-04-17 13:00 - 2004-10-10 09:50 - 00278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll 2014-04-17 13:00 - 2004-07-02 16:33 - 00327749 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll 2014-04-15 08:49 - 2014-04-15 08:49 - 00002990 _____ () C:\Windows\System32\Tasks\{EE1C554C-CCFC-452D-AAE2-71472538B64D} 2014-04-15 08:49 - 2014-04-15 08:49 - 00002990 _____ () C:\Windows\System32\Tasks\{E40D7364-927A-4F7B-B1A6-261C7E340CB4} 2014-04-13 12:29 - 2014-05-10 12:00 - 00034752 _____ () C:\Windows\system32\Drivers\WPRO_41_2001.sys 2014-04-13 12:19 - 2014-04-13 12:22 - 00000000 ____D () C:\Users\Gaming pc\AppData\libraries 2014-04-13 12:17 - 2014-04-13 12:23 - 00000000 ____D () C:\Users\Gaming pc\AppData\assets 2014-04-13 12:17 - 2014-04-13 12:17 - 00000000 ____D () C:\Users\Gaming pc\AppData\versions 2014-04-13 12:15 - 2014-04-13 12:23 - 00000000 ____D () C:\Users\Gaming pc\AppData\Monster 2014-04-13 12:12 - 2014-04-13 12:25 - 00000000 ____D () C:\Users\Gaming pc\AppData\authlib 2014-04-13 12:12 - 2014-04-13 12:12 - 00000000 _____ () C:\Users\Gaming pc\AppData\FTBOSSent1.3.8.txt 2014-04-11 17:40 - 2014-04-11 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-04-11 17:40 - 2014-04-11 17:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-04-11 17:40 - 2014-04-11 17:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight ==================== One Month Modified Files and Folders ======= 2014-05-10 14:27 - 2014-05-10 14:27 - 00018289 _____ () C:\Users\Gaming pc\Desktop\FRST.txt 2014-05-10 14:27 - 2014-05-10 14:26 - 00048593 _____ () C:\Users\Gaming pc\Downloads\FRST.txt 2014-05-10 14:27 - 2014-05-10 11:38 - 00000000 ____D () C:\FRST 2014-05-10 14:26 - 2014-05-10 14:26 - 02065408 _____ (Farbar) C:\Users\Gaming pc\Desktop\FRST64.exe 2014-05-10 14:23 - 2014-05-09 15:51 - 00000000 __RHO () C:\Windows\SysWOW64\Microsoft.com 2014-05-10 14:23 - 2014-01-27 18:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-10 14:23 - 2014-01-27 18:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-10 14:23 - 2013-12-27 12:12 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1761028741-3533212565-443726766-1000UA.job 2014-05-10 14:23 - 2013-12-27 12:12 - 00001084 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1761028741-3533212565-443726766-1000Core.job 2014-05-10 14:23 - 2013-10-15 12:25 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-10 12:08 - 2009-07-14 06:45 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-10 12:08 - 2009-07-14 06:45 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-10 12:01 - 2014-05-10 12:01 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Macromedia 2014-05-10 12:01 - 2014-05-10 12:01 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Adobe 2014-05-10 12:01 - 2014-05-09 19:33 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Oracle 2014-05-10 12:01 - 2014-04-30 19:13 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Overwolf 2014-05-10 12:00 - 2014-05-10 12:00 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\ATI 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Apple Computer 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\MFAData 2014-05-10 12:00 - 2014-05-10 12:00 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Avg2014 2014-05-10 12:00 - 2014-05-09 16:09 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-10 12:00 - 2014-04-13 12:29 - 00034752 _____ () C:\Windows\system32\Drivers\WPRO_41_2001.sys 2014-05-10 12:00 - 2013-11-21 18:46 - 00002020 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-chromeinstaller.job 2014-05-10 12:00 - 2013-11-21 18:46 - 00001946 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-firefoxinstaller.job 2014-05-10 12:00 - 2013-11-21 18:46 - 00001386 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-updater.job 2014-05-10 12:00 - 2013-11-21 18:46 - 00001288 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-codedownloader.job 2014-05-10 12:00 - 2013-11-21 18:46 - 00001188 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-enabler.job 2014-05-10 12:00 - 2013-10-15 12:25 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-10 12:00 - 2010-11-21 05:47 - 00872946 _____ () C:\Windows\PFRO.log 2014-05-10 12:00 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-10 12:00 - 2009-07-14 06:51 - 00128300 _____ () C:\Windows\setupact.log 2014-05-10 11:59 - 2014-05-09 20:30 - 00000000 ____D () C:\AdwCleaner 2014-05-10 11:54 - 2014-05-10 11:54 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Mozilla 2014-05-10 11:51 - 2014-05-10 11:51 - 00003374 _____ () C:\Windows\System32\Tasks\Install_SSD 2014-05-10 11:51 - 2014-05-03 21:41 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\MySQL 2014-05-10 11:47 - 2013-11-13 06:13 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-10 11:47 - 2013-09-10 14:59 - 01983837 _____ () C:\Windows\WindowsUpdate.log 2014-05-10 11:35 - 2014-05-09 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-10 11:32 - 2014-05-10 11:32 - 00000000 _____ () C:\Users\Gaming pc\defogger_reenable 2014-05-10 11:32 - 2013-09-10 15:35 - 00000000 ____D () C:\Users\Gaming pc 2014-05-10 11:26 - 2013-09-16 18:03 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\CrashDumps 2014-05-10 11:23 - 2013-11-13 06:14 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-05-10 11:22 - 2014-05-09 19:41 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-10 11:17 - 2014-05-09 20:59 - 00000000 ____D () C:\ProgramData\MFAData 2014-05-10 11:17 - 2013-10-15 12:25 - 00004112 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-10 11:17 - 2013-10-15 12:25 - 00003860 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-10 11:15 - 2014-05-10 11:15 - 06103040 _____ () C:\Program Files (x86)\GUTDF67.tmp 2014-05-10 11:15 - 2014-05-10 11:15 - 00000000 ____D () C:\Program Files (x86)\GUMDF08.tmp 2014-05-10 11:15 - 2014-03-07 20:39 - 00000000 ____D () C:\Users\DefaultAppPool 2014-05-09 21:04 - 2014-05-09 21:04 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\TuneUp Software 2014-05-09 20:43 - 2014-05-09 20:43 - 00858295 _____ () C:\Users\Gaming pc\Documents\pinfect.zip 2014-05-09 20:42 - 2014-05-09 20:41 - 19759335 _____ () C:\Windows\REGBK00.ZIP 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\VDLL.DLL 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\SysWOW64\runouce.exe 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\rundll16.exe 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\RUNDL132.EXE 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\logo1_.exe 2014-05-09 20:41 - 2014-05-09 20:41 - 00000000 ____D () C:\Windows\logo_1.exe 2014-05-09 20:40 - 2014-05-09 20:40 - 00632064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr80.dll 2014-05-09 20:40 - 2014-05-09 20:40 - 00554240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp80.dll 2014-05-09 20:40 - 2014-05-09 20:40 - 00034048 _____ (MicroWorld Technologies Inc.) C:\Windows\SysWOW64\eEmpty.exe 2014-05-09 20:40 - 2014-05-09 20:40 - 00000028 _____ () C:\Windows\Lic.xxx 2014-05-09 20:40 - 2014-05-09 20:40 - 00000000 ____D () C:\ProgramData\MicroWorld 2014-05-09 20:19 - 2014-05-03 21:37 - 00000000 ____D () C:\Program Files\MySQL 2014-05-09 20:18 - 2014-05-03 21:36 - 00000000 ____D () C:\Program Files (x86)\MySQL 2014-05-09 20:16 - 2014-05-03 21:37 - 00000023 _____ () C:\Windows\ODBCINST.INI 2014-05-09 20:16 - 2014-05-03 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySQL 2014-05-09 19:59 - 2013-11-17 13:33 - 00003036 _____ () C:\Windows\System32\Tasks\MSIAfterburner 2014-05-09 19:56 - 2014-05-09 19:56 - 00000000 ____D () C:\Users\Gaming pc\ChromeExtensions 2014-05-09 19:54 - 2013-09-11 00:52 - 02396496 _____ () C:\Windows\system32\perfh007.dat 2014-05-09 19:54 - 2013-09-11 00:52 - 00680496 _____ () C:\Windows\system32\perfc007.dat 2014-05-09 19:54 - 2009-07-14 07:13 - 00612130 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-09 19:47 - 2014-05-09 19:47 - 00120832 _____ () C:\Windows\system32\cmlua64.exe 2014-05-09 19:37 - 2014-05-09 19:37 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-05-09 19:20 - 2014-03-07 20:03 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-09 17:58 - 2014-05-09 17:58 - 00082457 _____ () C:\Users\Gaming pc\Documents\log.xml 2014-05-09 16:22 - 2014-05-09 16:17 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-05-09 16:20 - 2014-05-09 16:20 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Music Manager 2014-05-09 16:18 - 2014-05-09 16:18 - 00000000 _____ () C:\autoexec.bat 2014-05-09 16:17 - 2014-05-09 16:17 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-09 16:12 - 2014-04-25 19:45 - 00002300 _____ () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-05-09 16:12 - 2014-03-03 11:28 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-05-09 16:12 - 2014-01-27 18:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-05-09 16:12 - 2014-01-27 18:21 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-05-09 15:54 - 2014-01-27 18:13 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-09 15:54 - 2013-09-17 15:47 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-09 15:54 - 2013-09-17 15:47 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-09 15:52 - 2014-04-25 20:16 - 00000000 __SHD () C:\Program Files (x86)\Windows Manager 2014-05-09 15:44 - 2014-04-24 17:32 - 00000000 ___RD () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-08 16:33 - 2014-04-22 14:58 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Arma 3 2014-05-08 16:33 - 2014-02-19 15:38 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-05-08 15:01 - 2013-09-17 15:59 - 00000304 _____ () C:\Windows\Tasks\Registry Optimizer_DEFAULT.job 2014-05-07 15:59 - 2013-09-17 15:59 - 00000312 _____ () C:\Windows\Tasks\Registry Optimizer_UPDATES.job 2014-05-06 16:03 - 2014-05-04 12:10 - 00001256 _____ () C:\Users\Gaming pc\AppData\Roaming\BreakingPoint_Options.ini 2014-05-06 15:54 - 2014-05-06 15:51 - 00000302 _____ () C:\Users\Gaming pc\AppData\Roaming\BreakingPoint_Login.ini 2014-05-06 15:54 - 2014-05-04 12:02 - 00000000 ____D () C:\Program Files (x86)\Breaking 2014-05-04 16:37 - 2014-05-04 16:37 - 00003222 _____ () C:\Windows\System32\Tasks\Windows Update Check - 0x140703D5 2014-05-04 16:21 - 2013-11-13 16:52 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner 2014-05-04 14:08 - 2014-05-04 14:08 - 00000019 _____ () C:\Users\Gaming pc\Desktop\[76561198110998659].txt 2014-05-04 12:03 - 2014-05-04 12:03 - 00001034 _____ () C:\Users\Gaming pc\Desktop\Breaking Point.lnk 2014-05-04 11:13 - 2013-12-27 13:39 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\Microsoft Games 2014-05-04 11:08 - 2013-09-10 15:52 - 00068600 _____ () C:\Users\Gaming pc\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-04 11:07 - 2009-07-14 06:45 - 00309392 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-04 10:12 - 2013-09-10 15:48 - 00603450 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-03 21:48 - 2014-05-03 21:48 - 00000000 ____D () C:\Users\Gaming pc\Documents\Navicat 2014-05-03 21:43 - 2014-05-03 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PremiumSoft 2014-05-03 21:43 - 2014-05-03 21:43 - 00000000 ____D () C:\Program Files\PremiumSoft 2014-05-03 21:37 - 2014-05-03 21:36 - 00000000 ____D () C:\ProgramData\MySQL 2014-05-03 21:36 - 2014-05-03 21:36 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL 2014-05-03 20:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-01 20:03 - 2014-05-01 20:03 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PBO Manager 2014-05-01 20:03 - 2014-05-01 20:03 - 00000000 ____D () C:\Program Files\PBO Manager v.1.4 beta 2014-05-01 17:09 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-30 19:49 - 2014-04-30 19:49 - 00001103 _____ () C:\Users\Public\Desktop\OpenVPN GUI.lnk 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\Program Files\TAP-Windows 2014-04-30 19:49 - 2014-04-30 19:49 - 00000000 ____D () C:\Program Files (x86)\OpenVPN 2014-04-30 19:14 - 2014-04-30 19:14 - 00001971 _____ () C:\Users\Public\Desktop\Overwolf.lnk 2014-04-30 19:14 - 2014-04-30 19:14 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-04-30 19:14 - 2014-04-30 19:14 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-04-30 19:13 - 2014-04-30 19:13 - 00001222 _____ () C:\Users\Gaming pc\Desktop\TeamSpeak 3 Client.lnk 2014-04-30 19:13 - 2014-04-30 19:13 - 00000000 ____D () C:\Users\Gaming pc\AppData\Local\TeamSpeak 3 Client 2014-04-30 19:13 - 2014-04-24 20:56 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-04-29 20:08 - 2013-10-15 12:34 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\Skype 2014-04-27 09:05 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-04-27 08:59 - 2013-11-22 16:52 - 00000000 ____D () C:\Program Files (x86)\Ubisoft 2014-04-27 08:58 - 2014-02-06 21:59 - 00000000 ____D () C:\Users\Gaming pc\Desktop\Games 2014-04-27 08:55 - 2014-03-04 15:03 - 00000000 ____D () C:\ProgramData\e13531e87054441f 2014-04-26 17:50 - 2014-03-31 16:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games 2014-04-26 17:50 - 2013-09-10 16:08 - 00000000 ____D () C:\Program Files (x86)\EA GAMES 2014-04-25 20:32 - 2014-04-25 20:32 - 00000201 _____ () C:\Users\Gaming pc\Desktop\arma3.url 2014-04-25 20:24 - 2014-04-25 20:24 - 00000222 _____ () C:\Users\Gaming pc\Desktop\Arma 3.url 2014-04-25 20:16 - 2014-04-25 20:11 - 00000000 ____D () C:\Program Files (x86)\Kepard 2014-04-25 19:51 - 2014-04-25 19:51 - 00003154 _____ () C:\Windows\System32\Tasks\{A8F5506E-8DE9-4484-9A04-FB634B47CB35} 2014-04-25 12:59 - 2013-09-10 15:54 - 00000000 ____D () C:\Windows\System32\Tasks\Intel(R) Small Business Advantage 2014-04-25 11:36 - 2013-09-10 16:03 - 00430540 _____ () C:\Windows\DirectX.log 2014-04-24 17:32 - 2014-04-24 17:32 - 00000000 ___RD () C:\Users\Gaming pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-24 17:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources 2014-04-24 13:20 - 2014-04-24 13:20 - 06389248 _____ (Alderon Games) C:\Program Files (x86)\BreakingPoint.exe 2014-04-24 13:20 - 2014-04-24 13:20 - 03019880 _____ (BitTorrent, Inc.) C:\Program Files (x86)\BTSync.exe 2014-04-24 13:20 - 2014-04-24 13:20 - 01068544 _____ (Alderon Games) C:\Program Files (x86)\ApplyUpdate.exe 2014-04-23 21:02 - 2013-09-10 16:03 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\.minecraft 2014-04-22 19:26 - 2014-04-22 14:56 - 00000772 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ARMA 3.lnk 2014-04-22 17:31 - 2014-04-22 14:58 - 00000000 ____D () C:\Users\Gaming pc\Documents\Arma 3 2014-04-22 15:49 - 2014-04-17 13:00 - 00000000 ____D () C:\Program Files (x86)\eRightSoft 2014-04-22 15:03 - 2014-03-08 14:00 - 00000000 ____D () C:\ProgramData\Steam 2014-04-22 14:58 - 2014-04-22 14:58 - 00000000 ____D () C:\ProgramData\Bohemia Interactive 2014-04-22 12:51 - 2014-04-18 18:56 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-19 15:59 - 2013-10-06 17:41 - 00000000 ____D () C:\Windows\Minidump 2014-04-17 22:15 - 2013-10-20 09:18 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\vlc 2014-04-17 13:00 - 2014-04-17 13:00 - 01097384 _____ (AnyProtect.com) C:\Users\Gaming pc\AppData\Local\nsy525F.tmp 2014-04-17 13:00 - 2014-04-17 13:00 - 00000000 ____D () C:\Users\Gaming pc\Documents\eRightSoft 2014-04-15 08:49 - 2014-04-15 08:49 - 00002990 _____ () C:\Windows\System32\Tasks\{EE1C554C-CCFC-452D-AAE2-71472538B64D} 2014-04-15 08:49 - 2014-04-15 08:49 - 00002990 _____ () C:\Windows\System32\Tasks\{E40D7364-927A-4F7B-B1A6-261C7E340CB4} 2014-04-13 16:18 - 2014-01-17 18:38 - 00000000 ____D () C:\Users\Gaming pc\Documents\My Games 2014-04-13 12:25 - 2014-04-13 12:12 - 00000000 ____D () C:\Users\Gaming pc\AppData\authlib 2014-04-13 12:23 - 2014-04-13 12:17 - 00000000 ____D () C:\Users\Gaming pc\AppData\assets 2014-04-13 12:23 - 2014-04-13 12:15 - 00000000 ____D () C:\Users\Gaming pc\AppData\Monster 2014-04-13 12:22 - 2014-04-13 12:19 - 00000000 ____D () C:\Users\Gaming pc\AppData\libraries 2014-04-13 12:17 - 2014-04-13 12:17 - 00000000 ____D () C:\Users\Gaming pc\AppData\versions 2014-04-13 12:13 - 2013-11-01 19:54 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\ftblauncher 2014-04-13 12:12 - 2014-04-13 12:12 - 00000000 _____ () C:\Users\Gaming pc\AppData\FTBOSSent1.3.8.txt 2014-04-13 12:10 - 2013-10-31 15:52 - 00000000 ____D () C:\Users\Gaming pc\AppData\Roaming\.technic 2014-04-11 17:41 - 2013-09-16 15:19 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-11 17:40 - 2014-04-11 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-04-11 17:40 - 2014-04-11 17:40 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-04-11 17:40 - 2014-04-11 17:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-04-11 17:40 - 2013-09-16 15:19 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.4516.dll Some content of TEMP: ==================== C:\Users\Gaming pc\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-09 21:32 ==================== End Of Log ============================ |
![]() | #4 |
/// TB-Ausbilder /// Anleitungs-Guru ![]() ![]() ![]() ![]() ![]() | ![]() Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. Ok, bitte auch noch die Addition.txt posten... ![]()
__________________ Gruß deeprybka ![]() Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
![]() | #5 |
| ![]() Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. Wo finde ich die Addition.txt |
![]() | #6 |
/// TB-Ausbilder /// Anleitungs-Guru ![]() ![]() ![]() ![]() ![]() | ![]() Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. Die sollte eigentlich auch Code:
ATTFilter C:\Users\Gaming pc\Desktop Wenn Du sie nicht findest nicht schlimm, FRST starten, Haken setzen bei Addition.txt und nochmal auf Scan drücken... ![]()
__________________ --> Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. |
![]() |
Themen zu Antiviren- und Antimalwareprogramme können nicht installiert oder geöffnet werden, Firewall wurde auch deaktiviert. |
admin, aktiviere, aktivieren, angemeldet, antimalwareprogramme, avira, avira funktioniert nicht, berechtigungen, deaktiviert, festgestellt, firewall, firewall deaktiviert, gemeldet, gestellt, gestern, hoffe, installier, installiert, malwarebytes, malwarebytes geht nicht, meldung, nicht mehr, nicht mehr öffnen, problem, windows, windows firewall, öffnen |