Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden

Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden


Log-Analyse und Auswertung: Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 26.09.2014, 18:21   #1
saphirablue
 
Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden - Standard

Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden


Hallo Schrauber,

hier kommt der nächste scan mit BCD


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-09-2014 01
Ran by Heikes (administrator) on HEIKES-PC on 26-09-2014 19:15:56
Running from C:\Users\Heikes\Desktop
Loaded Profiles: UpdatusUser & Heikes &  (Available profiles: UpdatusUser & Heikes)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dropbox, Inc.) C:\Users\Heikes\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11786344 2011-03-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1488993167-387019152-2188429667-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-1488993167-387019152-2188429667-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe"  /PROMPT /CMPID=JUNE2013_HP
HKU\S-1-5-21-1488993167-387019152-2188429667-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-1488993167-387019152-2188429667-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe"  /PROMPT /CMPID=JUNE2013_HP
HKU\S-1-5-21-1488993167-387019152-2188429667-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1563440 2014-05-28] (Samsung)
HKU\S-1-5-21-1488993167-387019152-2188429667-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1563440 2014-05-28] (Samsung)
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [226920 2011-03-31] (NVIDIA Corporation)
Startup: C:\Users\Heikes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Heikes\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 83.169.185.225 83.169.185.161

FireFox:
========
FF ProfilePath: C:\Users\Heikes\AppData\Roaming\Mozilla\Firefox\Profiles\gqlc7qvq.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.5.0 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin -> C:\Users\Heikes\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-01-02]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [{0ce6ac61-48e9-426f-9268-6f1e8ece06da}] - C:\Program Files (x86)\LyricsSeeker\131.xpi

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-03] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-04-03] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 motmodem; system32\DRIVERS\motmodem.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-25 19:37 - 2014-09-25 19:37 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-25 19:37 - 2014-09-25 19:37 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-25 19:37 - 2014-09-25 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-25 19:02 - 2014-09-25 19:02 - 00000000 __SHD () C:\Users\Heikes\AppData\Local\EmieUserList
2014-09-25 19:02 - 2014-09-25 19:02 - 00000000 __SHD () C:\Users\Heikes\AppData\Local\EmieSiteList
2014-09-25 18:44 - 2014-09-25 18:44 - 00001268 _____ () C:\Users\Heikes\Desktop\Revo Uninstaller.lnk
2014-09-25 18:44 - 2014-09-25 18:44 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-25 18:35 - 2014-09-25 18:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Heikes\Desktop\revosetup95.exe
2014-09-25 18:30 - 2014-09-25 18:30 - 00000000 ____D () C:\Users\Heikes\Desktop\FRST-OlderVersion
2014-09-24 19:42 - 2014-05-12 20:12 - 148885840 _____ (Apple Inc.) C:\Users\Heikes\Documents\iTunes64Setup.exe
2014-09-24 19:38 - 2014-09-24 19:38 - 00000000 ____D () C:\Users\Heikes\Documents\Alte Firefox-Daten
2014-09-24 19:37 - 2011-12-25 14:30 - 00606536 _____ (Google Inc.) C:\Users\Heikes\Documents\GoogleEarthSetup.exe
2014-09-24 19:35 - 2012-01-02 22:15 - 00001355 _____ () C:\Users\Heikes\Documents\HP Solution Center.lnk
2014-09-24 18:02 - 2014-09-24 18:02 - 00854417 _____ () C:\Users\Heikes\Desktop\SecurityCheck.exe
2014-09-24 15:54 - 2014-09-24 15:54 - 02347384 _____ (ESET) C:\Users\Heikes\Desktop\esetsmartinstaller_deu.exe
2014-09-23 23:35 - 2014-09-23 23:35 - 00002042 _____ () C:\Users\Heikes\Desktop\JRT.txt
2014-09-23 23:32 - 2014-09-23 23:32 - 00000000 ____D () C:\Windows\ERUNT
2014-09-23 23:29 - 2014-09-23 23:29 - 01024790 _____ (Thisisu) C:\Users\Heikes\Desktop\JRT.exe
2014-09-23 23:08 - 2014-09-23 23:08 - 00001411 _____ () C:\Users\Heikes\Desktop\mbam.txt
2014-09-23 21:56 - 2014-09-26 19:06 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-23 21:55 - 2014-09-23 22:50 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-23 21:55 - 2014-09-23 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-23 21:55 - 2014-09-23 22:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-23 21:55 - 2014-09-23 21:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-23 21:55 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-23 21:55 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-23 21:55 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-23 21:51 - 2014-09-23 21:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Heikes\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-23 21:45 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-23 21:45 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-22 18:52 - 2014-09-22 18:52 - 00022505 _____ () C:\ComboFix.txt
2014-09-22 18:01 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-22 18:01 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-22 18:01 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-22 18:01 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-22 18:01 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-22 18:01 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-22 18:01 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-22 18:01 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-22 17:57 - 2014-09-22 18:52 - 00000000 ____D () C:\Qoobox
2014-09-22 17:56 - 2014-09-22 18:20 - 00000000 ____D () C:\Windows\erdnt
2014-09-22 17:51 - 2014-09-22 17:51 - 05579290 ____R (Swearware) C:\Users\Heikes\Desktop\ComboFix.exe
2014-09-21 19:27 - 2014-09-21 19:27 - 00002724 _____ () C:\Users\Heikes\Desktop\Gmer.txt
2014-09-21 18:41 - 2014-09-21 18:43 - 00046905 _____ () C:\Users\Heikes\Desktop\Addition.txt
2014-09-21 18:40 - 2014-09-26 19:16 - 00000000 ____D () C:\FRST
2014-09-21 18:40 - 2014-09-26 19:15 - 00014519 _____ () C:\Users\Heikes\Desktop\FRST.txt
2014-09-21 18:39 - 2014-09-21 18:39 - 00000474 _____ () C:\Users\Heikes\Desktop\defogger_disable.log
2014-09-21 18:39 - 2014-09-21 18:39 - 00000000 _____ () C:\Users\Heikes\defogger_reenable
2014-09-21 18:28 - 2014-09-21 18:28 - 00380416 _____ () C:\Users\Heikes\Desktop\Gmer-19357.exe
2014-09-21 18:27 - 2014-09-25 18:30 - 02108928 _____ (Farbar) C:\Users\Heikes\Desktop\FRST64.exe
2014-09-21 18:25 - 2014-09-21 18:26 - 00050477 _____ () C:\Users\Heikes\Desktop\Defogger.exe
2014-09-21 00:49 - 2014-09-21 00:49 - 01373475 _____ () C:\Users\Heikes\Desktop\adwcleaner_3.310.exe
2014-09-11 22:49 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 22:49 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-11 22:49 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 22:49 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 22:49 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 22:49 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-11 22:49 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 22:49 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 22:49 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 22:49 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 22:49 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 22:49 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 22:49 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-11 22:49 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 22:49 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 22:49 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 22:49 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 22:49 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 22:49 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 22:49 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-11 22:49 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 22:49 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 22:49 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-11 22:49 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 22:49 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-11 22:49 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-11 22:49 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-11 22:49 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-11 22:49 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 22:49 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 22:49 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-11 22:49 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-11 22:49 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 22:49 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-11 22:49 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-11 22:49 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-11 22:49 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-11 22:49 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 22:49 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 22:49 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 22:49 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 22:49 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 22:49 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-11 22:49 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-11 22:49 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-11 22:49 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 22:49 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-11 22:49 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 22:49 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-11 22:49 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-11 22:49 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-11 22:49 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 22:49 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-11 22:49 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-11 22:49 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 22:49 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 22:38 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 22:38 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-09 21:19 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-09 21:19 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-09 21:18 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-09 21:18 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-09 21:18 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-09 21:18 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-09 21:18 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-09 21:18 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-09 21:18 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-09 21:18 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-09 21:18 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-03 20:58 - 2014-09-23 23:16 - 00000000 ____D () C:\AdwCleaner
2014-08-27 19:46 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 19:46 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 19:46 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-26 19:17 - 2014-09-21 18:40 - 00014519 _____ () C:\Users\Heikes\Desktop\FRST.txt
2014-09-26 19:16 - 2014-09-21 18:40 - 00000000 ____D () C:\FRST
2014-09-26 19:06 - 2014-09-23 21:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-25 20:06 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-25 20:06 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-25 20:00 - 2013-08-15 18:22 - 00000000 ___RD () C:\Users\Heikes\Dropbox
2014-09-25 19:59 - 2013-08-15 18:18 - 00000000 ____D () C:\Users\Heikes\AppData\Roaming\Dropbox
2014-09-25 19:58 - 2009-07-14 06:51 - 00165846 _____ () C:\Windows\setupact.log
2014-09-25 19:55 - 2011-09-15 04:32 - 02037354 _____ () C:\Windows\WindowsUpdate.log
2014-09-25 19:45 - 2012-06-07 20:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-25 19:37 - 2014-09-25 19:37 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-25 19:37 - 2014-09-25 19:37 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-25 19:37 - 2014-09-25 19:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-25 19:02 - 2014-09-25 19:02 - 00000000 __SHD () C:\Users\Heikes\AppData\Local\EmieUserList
2014-09-25 19:02 - 2014-09-25 19:02 - 00000000 __SHD () C:\Users\Heikes\AppData\Local\EmieSiteList
2014-09-25 18:44 - 2014-09-25 18:44 - 00001268 _____ () C:\Users\Heikes\Desktop\Revo Uninstaller.lnk
2014-09-25 18:44 - 2014-09-25 18:44 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-25 18:35 - 2014-09-25 18:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Heikes\Desktop\revosetup95.exe
2014-09-25 18:30 - 2014-09-25 18:30 - 00000000 ____D () C:\Users\Heikes\Desktop\FRST-OlderVersion
2014-09-25 18:30 - 2014-09-21 18:27 - 02108928 _____ (Farbar) C:\Users\Heikes\Desktop\FRST64.exe
2014-09-24 22:17 - 2010-11-21 05:47 - 00169546 _____ () C:\Windows\PFRO.log
2014-09-24 22:12 - 2011-11-13 22:39 - 00000000 ____D () C:\Users\Heikes\AppData\Roaming\SoftGrid Client
2014-09-24 20:37 - 2011-09-15 14:24 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-09-24 20:37 - 2011-09-15 14:24 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-09-24 20:37 - 2009-07-14 07:13 - 01622300 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-24 19:38 - 2014-09-24 19:38 - 00000000 ____D () C:\Users\Heikes\Documents\Alte Firefox-Daten
2014-09-24 18:02 - 2014-09-24 18:02 - 00854417 _____ () C:\Users\Heikes\Desktop\SecurityCheck.exe
2014-09-24 15:54 - 2014-09-24 15:54 - 02347384 _____ (ESET) C:\Users\Heikes\Desktop\esetsmartinstaller_deu.exe
2014-09-23 23:35 - 2014-09-23 23:35 - 00002042 _____ () C:\Users\Heikes\Desktop\JRT.txt
2014-09-23 23:32 - 2014-09-23 23:32 - 00000000 ____D () C:\Windows\ERUNT
2014-09-23 23:29 - 2014-09-23 23:29 - 01024790 _____ (Thisisu) C:\Users\Heikes\Desktop\JRT.exe
2014-09-23 23:16 - 2014-09-03 20:58 - 00000000 ____D () C:\AdwCleaner
2014-09-23 23:08 - 2014-09-23 23:08 - 00001411 _____ () C:\Users\Heikes\Desktop\mbam.txt
2014-09-23 22:50 - 2014-09-23 21:55 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-23 22:50 - 2014-09-23 21:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-23 22:50 - 2014-09-23 21:55 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-23 21:55 - 2014-09-23 21:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-23 21:51 - 2014-09-23 21:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Heikes\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-22 18:52 - 2014-09-22 18:52 - 00022505 _____ () C:\ComboFix.txt
2014-09-22 18:52 - 2014-09-22 17:57 - 00000000 ____D () C:\Qoobox
2014-09-22 18:51 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-09-22 18:22 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-09-22 18:20 - 2014-09-22 17:56 - 00000000 ____D () C:\Windows\erdnt
2014-09-22 18:11 - 2011-11-11 18:22 - 00000000 ____D () C:\Users\Heikes
2014-09-22 17:51 - 2014-09-22 17:51 - 05579290 ____R (Swearware) C:\Users\Heikes\Desktop\ComboFix.exe
2014-09-21 19:27 - 2014-09-21 19:27 - 00002724 _____ () C:\Users\Heikes\Desktop\Gmer.txt
2014-09-21 18:43 - 2014-09-21 18:41 - 00046905 _____ () C:\Users\Heikes\Desktop\Addition.txt
2014-09-21 18:39 - 2014-09-21 18:39 - 00000474 _____ () C:\Users\Heikes\Desktop\defogger_disable.log
2014-09-21 18:39 - 2014-09-21 18:39 - 00000000 _____ () C:\Users\Heikes\defogger_reenable
2014-09-21 18:28 - 2014-09-21 18:28 - 00380416 _____ () C:\Users\Heikes\Desktop\Gmer-19357.exe
2014-09-21 18:26 - 2014-09-21 18:25 - 00050477 _____ () C:\Users\Heikes\Desktop\Defogger.exe
2014-09-21 01:03 - 2013-08-15 18:22 - 00001025 _____ () C:\Users\Heikes\Desktop\Dropbox.lnk
2014-09-21 01:03 - 2013-08-15 18:19 - 00000000 ____D () C:\Users\Heikes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-21 00:49 - 2014-09-21 00:49 - 01373475 _____ () C:\Users\Heikes\Desktop\adwcleaner_3.310.exe
2014-09-16 17:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-15 17:26 - 2014-08-14 17:55 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-09-15 17:26 - 2014-08-14 17:55 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-15 17:26 - 2012-10-16 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-15 17:26 - 2012-10-16 20:54 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-09-11 22:47 - 2011-11-13 22:38 - 01596580 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-11 22:45 - 2013-08-14 09:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-11 22:40 - 2012-04-25 17:33 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-11 22:38 - 2014-05-09 20:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-10 00:11 - 2014-09-23 21:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-09 23:47 - 2014-09-23 21:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-07 23:22 - 2014-03-29 19:28 - 00001203 _____ () C:\Users\Heikes\Desktop\Linie_6-Mensa-Parkstrasse.pdf - Verknüpfung.lnk
2014-09-05 04:10 - 2014-09-09 21:18 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-09 21:18 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-29 18:12 - 2009-07-14 06:45 - 00272176 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-29 17:51 - 2011-09-15 04:57 - 00000000 ____D () C:\ProgramData\CyberLink

Some content of TEMP:
====================
C:\Users\Heikes\AppData\Local\Temp\avgnt.exe
C:\Users\Heikes\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvmrr3w.dll
C:\Users\Heikes\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows-Start-Manager
---------------------
Bezeichner              {bootmgr}
device                  partition=\Device\HarddiskVolume2
description             Windows Boot Manager
locale                  de-DE
inherit                 {globalsettings}
default                 {current}
resumeobject            {47db8249-df94-11e0-855f-974eaccb4f70}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Windows-Startladeprogramm
-------------------------
Bezeichner              {current}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  de-DE
inherit                 {bootloadersettings}
recoverysequence        {47db824b-df94-11e0-855f-974eaccb4f70}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \Windows
resumeobject            {47db8249-df94-11e0-855f-974eaccb4f70}
nx                      OptIn

Windows-Startladeprogramm
-------------------------
Bezeichner              {47db824b-df94-11e0-855f-974eaccb4f70}
device                  ramdisk=[C:]\Recovery\47db824b-df94-11e0-855f-974eaccb4f70\Winre.wim,{47db824c-df94-11e0-855f-974eaccb4f70}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
inherit                 {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\47db824b-df94-11e0-855f-974eaccb4f70\Winre.wim,{47db824c-df94-11e0-855f-974eaccb4f70}
systemroot              \windows
nx                      OptIn
winpe                   Yes

Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner              {47db8249-df94-11e0-855f-974eaccb4f70}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  de-DE
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Windows-Speichertestprogramm
----------------------------
Bezeichner              {memdiag}
device                  partition=\Device\HarddiskVolume2
path                    \boot\memtest.exe
description             Windows Memory Diagnostic
locale                  de-DE
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS-Einstellungen
-----------------
Bezeichner              {emssettings}
bootems                 Yes

Debuggereinstellungen
---------------------
Bezeichner              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

RAM-Defekte
-----------
Bezeichner              {badmemory}

Globale Einstellungen
---------------------
Bezeichner              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Startladeprogramm-Einstellungen
-------------------------------
Bezeichner              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisoreinstellungen
-------------------
Bezeichner              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner              {resumeloadersettings}
inherit                 {globalsettings}

Ger„teoptionen
--------------
Bezeichner              {47db824c-df94-11e0-855f-974eaccb4f70}
description             Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\47db824b-df94-11e0-855f-974eaccb4f70\boot.sdi



LastRegBack: 2013-09-03 22:25

==================== End Of Log ============================
--- --- ---

--- --- ---

Antwort

Themen zu Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden
adware/addlyrics.a.378, adware/addlyrics.k.14, adware/agentcv.a.6906, adware/yontoo.gen, appl/bprotector.a.3, appl/downloader.gen, appl/linkury.gen2, appl/somoto.gen2, bds/offend.696372, fehlercode 0x5, fehlercode 0xc0000005, launch, msiexec.exe, secure search, tr/bprotector.gen, trojaner und viren gefunden, wscript.exe


« Computer startet nur kurz und fährt dann wieder herunter | Skype Virus "Your skype does not support extended icons" »


Ähnliche Themen: Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden


  1. Trojaner sendet E-Mails (web.de Account) an Adressbuch (Windows7 zugriff über Google Chrome)
    Log-Analyse und Auswertung - 07.11.2015 (9)
  2. Windows7: Trojaner EXP/CVE-2013-0422 und EXP/CVE-2012-4681 gefunden
    Log-Analyse und Auswertung - 02.05.2015 (21)
  3. Windows7: Trojaner EXP/CVE-2013-0422 und EXP/CVE-2012-4681 gefunden
    Mülltonne - 08.04.2015 (3)
  4. Viren,Trojaner usw in Mails
    Diskussionsforum - 02.12.2013 (5)
  5. Viren und Trojaner gefunden
    Log-Analyse und Auswertung - 31.05.2013 (21)
  6. Viren,Trojaner,Adware und Riskware löschen
    Plagegeister aller Art und deren Bekämpfung - 13.10.2012 (2)
  7. Malwarebytes-Scan hat Viren gefunden - kann ich Dateien problemlos löschen?
    Log-Analyse und Auswertung - 30.12.2011 (3)
  8. 23 Trojaner gefunden - wie löschen?
    Plagegeister aller Art und deren Bekämpfung - 19.12.2011 (32)
  9. Trojaner/Viren direkt in System Volume Information löschen?
    Plagegeister aller Art und deren Bekämpfung - 16.06.2011 (59)
  10. Trojaner/Viren löschen, OHNE Programm
    Plagegeister aller Art und deren Bekämpfung - 07.04.2011 (1)
  11. E-Mail Account verschickt E-Mails. Nach Virenscann Trojaner gefunden!
    Plagegeister aller Art und deren Bekämpfung - 02.10.2010 (17)
  12. Trojaner und Viren gefunden
    Log-Analyse und Auswertung - 21.01.2010 (13)
  13. dropper.gen trojaner gefunden und nicht zu löschen,etc.
    Log-Analyse und Auswertung - 22.04.2009 (16)
  14. Trojaner gefunden, wie löschen ?
    Log-Analyse und Auswertung - 19.10.2008 (5)
  15. Trojaner Gefunden...wie löschen ???
    Plagegeister aller Art und deren Bekämpfung - 07.06.2008 (3)
  16. 9 viren gefunden...aber man kann sie nicht löschen ?!?
    Plagegeister aller Art und deren Bekämpfung - 04.06.2008 (7)
  17. Viren/Trojaner gefunden
    Plagegeister aller Art und deren Bekämpfung - 15.02.2007 (12)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden - Hallo Schrauber, hier kommt der nächste scan mit BCD FRST Logfile: FRST Logfile: Code: Alles auswählen Aufklappen ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-09-2014 01 - Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden...
Archiv
Du betrachtest: Windows7, unberechenbares Löschen von Mails u.a., Trojaner und Viren gefunden auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132