Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card (https://www.trojaner-board.de/144675-trojaner-virus-firefoxfenster-laesst-schliessen-browser-hat-gesperrt-bundespolizei-paysafe-card.html)

Bryce 16.11.2013 16:57
Trojaner/Virus, Firefoxfenster lässt sich nicht Schliessen "Ihr Browser hat gesperrt", Bundespolizei, Paysafe Card
 
Hallo erstmal,
bin ganz neu hier und wie meisten hab ich natürlich hierher gefunden weil ich ein Problem hab :stirn: .Habe mich hier im Forum schon ein bisschen umgesehen und hoffe ich halte mich an alle Regeln und mache nicht zu viel falsch.
Habe seit gestern Abend ein Fenster das sich beim Start von Firefox mit öffnet und sich nicht schliessen lässt auch nicht mit dem Task Manager. Erst wenn ich FF selbst schließe geht das "schadfenster" mit zu. Selbstverständlich ist es auch nach einem reboot noch da. Ich füge ein Bild des Fensters mit Meldung dessen was passiert wenn ich versuche es mit "X" zu schließen (ist dann eine schleife). OS ist Windows7 64bit. AVG Antivirus Free Edition 2014 läuft immer auf dem Rechner mit.
http://i.pictr.com/229bn2ft1h.jpg
Habe mir das "Farbar's Recovery Scan Tool" (64bit) runtergeladen und ausgeführt...werde hier nun den Code posten. Ich hoffe das hab ich seweit richtig gemacht.
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2013
Ran by Jan at 2013-11-16 14:44:45
Running from C:\Users\Jan\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 15.2.1)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144)
AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Fuel (Version: 2013.0830.1944.33589)
AVG 2014 (Version: 14.0.3629)
AVG 2014 (Version: 14.0.4158)
AVG 2014 (Version: 2014.0.4158)
Battle.net (x32)
Blacklight: Retribution (x32)
Borderlands 2 (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589)
Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589)
Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589)
CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589)
CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589)
CCC Help Czech (x32 Version: 2013.0830.1943.33589)
CCC Help Danish (x32 Version: 2013.0830.1943.33589)
CCC Help Dutch (x32 Version: 2013.0830.1943.33589)
CCC Help English (x32 Version: 2013.0830.1943.33589)
CCC Help Finnish (x32 Version: 2013.0830.1943.33589)
CCC Help French (x32 Version: 2013.0830.1943.33589)
CCC Help German (x32 Version: 2013.0830.1943.33589)
CCC Help Greek (x32 Version: 2013.0830.1943.33589)
CCC Help Hungarian (x32 Version: 2013.0830.1943.33589)
CCC Help Italian (x32 Version: 2013.0830.1943.33589)
CCC Help Japanese (x32 Version: 2013.0830.1943.33589)
CCC Help Korean (x32 Version: 2013.0830.1943.33589)
CCC Help Norwegian (x32 Version: 2013.0830.1943.33589)
CCC Help Polish (x32 Version: 2013.0830.1943.33589)
CCC Help Portuguese (x32 Version: 2013.0830.1943.33589)
CCC Help Russian (x32 Version: 2013.0830.1943.33589)
CCC Help Spanish (x32 Version: 2013.0830.1943.33589)
CCC Help Swedish (x32 Version: 2013.0830.1943.33589)
CCC Help Thai (x32 Version: 2013.0830.1943.33589)
CCC Help Turkish (x32 Version: 2013.0830.1943.33589)
ccc-utility64 (Version: 2013.0830.1944.33589)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Dropbox (HKCU Version: 2.4.6)
Evernote v. 5.0.2 (x32 Version: 5.0.2.1392)
Fotogalerie (x32 Version: 16.4.3508.0205)
FreePDF (Remove only) (x32)
GPL Ghostscript (Version: 9.10)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32 Version: 1.00.0000)
Hearthstone (x32)
League of Legends (x32 Version: 3.0.1)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.19.0)
NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0)
NVIDIA Install Application (Version: 2.1002.133.902)
Open Broadcaster Software (x32)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
PlanetSide 2 (x32)
Platform (x32 Version: 1.34)
Prime World (x32)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.21.531.2010)
RedMon - Redirection Port Monitor
Skype™ 6.10 (x32 Version: 6.10.104)
Spotify (HKCU Version: 0.9.6.72.ge389c074)
Steam (x32 Version: 1.0.0.0)
swMSM (x32 Version: 12.0.0.1)
Team Fortress 2 (x32)
TeamSpeak 3 Client (Version: 3.0.13)
TeamViewer 8 (x32 Version: 8.0.20935)
Trillian (x32)
Unity Web Player (HKCU Version: )
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition (x32)
VIA Plattform-Geräte-Manager (x32 Version: 1.34)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
VLC media player 2.0.8 (x32 Version: 2.0.8)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
WinRAR 5.00 (64-bit) (Version: 5.00.0)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)

==================== Restore Points  =========================

20-10-2013 00:50:27 Windows Update
20-10-2013 13:02:27 Microsoft Visual C++ 2005 Redistributable wird installiert
20-10-2013 13:03:27 Microsoft Visual C++ 2005 Redistributable wird installiert
20-10-2013 13:04:08 DirectX wurde installiert
27-10-2013 18:07:33 Geplanter Prüfpunkt
05-11-2013 19:59:27 Geplanter Prüfpunkt
14-11-2013 00:29:43 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {691EB1EC-B22E-4A11-8900-0ABEC61EB509} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2013-01-23] ()
Task: {90CBF5E2-FA32-4001-BA04-2B6A9BEBDF1F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-09-14 01:09 - 2013-09-14 01:06 - 00071680 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-09-14 01:09 - 2013-09-14 01:06 - 00379392 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2013-09-14 01:09 - 2013-09-14 01:06 - 00098816 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll
2013-09-14 01:09 - 2013-09-14 01:06 - 64105984 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll
2013-01-16 17:01 - 2013-01-16 17:01 - 00069632 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2013-01-16 17:00 - 2013-01-16 17:00 - 00061440 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2013-01-16 17:01 - 2013-01-16 17:01 - 00229376 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2013-01-16 17:00 - 2013-01-16 17:00 - 00143360 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2013-01-16 17:01 - 2013-01-16 17:01 - 00348160 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2011-04-30 20:04 - 2011-04-30 20:04 - 00013312 _____ () C:\Program Files (x86)\MSI Afterburner\RTTSH.dll
2013-09-14 02:27 - 2013-11-12 19:52 - 36967424 _____ () C:\Users\Jan\AppData\Roaming\Spotify\Data\libcef.dll
2013-08-21 13:18 - 2013-10-24 18:45 - 00691200 _____ () E:\Steam\SDL2.dll
2013-09-06 11:55 - 2013-10-30 20:25 - 01123240 _____ () E:\Steam\bin\chromehtml.DLL
2013-08-07 10:31 - 2013-10-23 21:07 - 20625832 _____ () E:\Steam\bin\libcef.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () E:\Steam\bin\avcodec-53.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () E:\Steam\bin\avutil-51.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () E:\Steam\bin\avformat-53.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Jan\AppData\Roaming\Dropbox\bin\libcef.dll
2013-09-26 12:50 - 2013-09-26 12:50 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2013-09-26 12:49 - 2013-09-26 12:49 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll
2013-06-12 23:00 - 2013-06-12 23:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll
2013-09-21 12:37 - 2013-11-12 19:52 - 00887808 _____ () C:\Users\Jan\AppData\Roaming\Spotify\Data\libglesv2.dll
2013-09-21 12:37 - 2013-11-12 19:52 - 00109568 _____ () C:\Users\Jan\AppData\Roaming\Spotify\Data\libegl.dll
2013-11-16 02:17 - 2013-11-16 02:17 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-10-08 22:39 - 2013-10-08 22:39 - 16233864 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/16/2013 02:07:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 01:52:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 01:22:07 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/16/2013 00:41:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/15/2013 01:57:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/14/2013 05:57:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 05:52:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2013 07:53:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2013 05:05:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2013 11:09:49 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/16/2013 02:03:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (11/16/2013 01:57:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (11/16/2013 01:55:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (11/16/2013 01:48:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1747

Error: (11/16/2013 01:48:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst AVGIDSAgent konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (11/16/2013 01:19:04 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (11/02/2013 04:08:20 AM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/31/2013 02:35:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (10/31/2013 02:35:25 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (10/30/2013 11:49:02 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 77%
Total physical RAM: 4094.18 MB
Available physical RAM: 923.6 MB
Total Pagefile: 8186.54 MB
Available Pagefile: 4602.94 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:297.99 GB) (Free:247.54 GB) NTFS
Drive e: (Games) (Fixed) (Total:279.46 GB) (Free:173.07 GB) NTFS
Drive f: (Extern) (Fixed) (Total:465.76 GB) (Free:42.38 GB) NTFS
Drive g: (SKYRIM_EN) (CDROM) (Total:5.12 GB) (Free:0 GB) UDF
Drive h: () (Removable) (Total:1.91 GB) (Free:0.8 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 279 GB) (Disk ID: 00026770)
Partition 1: (Not Active) - (Size=279 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 318D318C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 6E652072)
No partition Table on disk 2.

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 216A51CA)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Falls zur Analyse noch was gebraucht wird bitte sagen...werde mich allen erforderlichen schritten unterziehen :).

EDIT:
Gerade festgestellt das zum einen das Fenster doch nicht zu geht wenn ich Browser schließe sondenr nur wenn ich das fenster per Task Manager "abschiesse".

Beste Grüße
Bryce

aharonov 16.11.2013 20:40
Hallo,

FRST erstellt 2 Logfiles. Du hast nur die Addition.txt gepostet. Kannst du bitte auch noch die FRST.txt nachreichen?

Bryce 16.11.2013 20:59
Ah ok, sorry!
Hier ist das was glaub ich noch gefehlt hat.


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013
Ran by Jan (administrator) on JAN-PC on 16-11-2013 14:43:53
Running from C:\Users\Jan\Downloads
Windows 7 Professional N Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\spotify.exe
(Valve Corporation) E:\Steam\Steam.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Jan\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Spotify] - C:\Users\Jan\AppData\Roaming\Spotify\spotify.exe [5955072 2013-11-12] (Spotify Ltd)
HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Jan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-12] (Spotify Ltd)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
MountPoints2: {8681ebed-37d2-11e3-84e7-bcaec52d2602} - G:\INSTALL.EXE
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2369536 2013-09-14] (VIA)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [373760 2013-03-14] (shbox.de)
Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)

==================== Internet (Whitelisted) ====================

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default
FF Homepage: chrome://speeddial/content/speeddial.xul
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\ich@maltegoetz.de
FF Extension: DownloadHelper - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: amznUWL2 - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\amznUWL2@amazon.com.xpi
FF Extension: speeddial - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
FF Extension: Adblock Plus - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\3el331f0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-08-30] (Advanced Micro Devices, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-18] (DT Soft Ltd)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-16 14:43 - 2013-11-16 14:44 - 00010381 _____ C:\Users\Jan\Downloads\FRST.txt
2013-11-16 14:43 - 2013-11-16 14:43 - 00000000 ____D C:\FRST
2013-11-16 13:56 - 2013-11-16 13:57 - 00000000 ___RD C:\Users\Administrator\Podcasts
2013-11-16 13:56 - 2013-11-16 13:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2013-11-16 13:34 - 2013-11-16 13:34 - 01957794 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe
2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Malwarebytes
2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-16 13:09 - 2013-11-16 13:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jan\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-16 02:17 - 2013-11-16 02:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 20:17 - 2013-11-15 22:28 - 735920614 _____ C:\Users\Jan\Downloads\wall.avi
2013-11-14 01:31 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 01:31 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 01:31 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 01:31 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 01:31 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 01:31 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 01:31 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 01:31 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 01:31 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 01:31 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 01:31 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 01:31 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 00:44 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 00:44 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 00:44 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 00:44 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 00:44 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 00:44 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 00:44 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 00:44 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 00:44 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 00:44 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 00:44 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 00:44 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 00:44 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 00:44 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 00:44 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 00:44 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 00:44 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 00:44 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 00:44 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 00:44 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 00:44 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 00:44 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 00:44 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 00:44 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-09 19:11 - 2013-11-10 00:33 - 745630751 _____ C:\Users\Jan\Downloads\Were.the.Millers.2013.EXTENDED.BDRip.X264-SPARKS.mkv
2013-11-02 14:00 - 2013-11-16 00:47 - 00011485 _____ C:\Users\Jan\Desktop\Hearthstone.xlsx
2013-10-29 22:24 - 2013-10-29 22:24 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard
2013-10-29 21:37 - 2013-10-29 21:37 - 00000443 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-10-29 21:00 - 2013-10-29 21:00 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-enGB.exe
2013-10-29 20:38 - 2013-11-13 22:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-10-29 20:34 - 2013-11-16 02:55 - 00000000 ____D C:\Users\Jan\AppData\Local\Battle.net
2013-10-29 20:34 - 2013-10-29 21:32 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Battle.net
2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard Entertainment
2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-10-29 20:31 - 2013-10-29 20:31 - 00000000 ____D C:\ProgramData\Battle.net
2013-10-29 20:26 - 2013-10-29 20:30 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-deDE.exe
2013-10-26 14:17 - 2013-10-26 14:17 - 00020140 _____ C:\Users\Jan\Downloads\google.csv
2013-10-18 13:03 - 2013-10-18 13:03 - 00000000 ____D C:\Users\Jan\AppData\Local\Skyrim
2013-10-18 12:21 - 2013-10-18 12:21 - 00000037 _____ C:\Windows\WET.INI
2013-10-18 11:54 - 2013-10-18 11:55 - 00000000 ____D C:\Users\Jan\AppData\Roaming\DAEMON Tools Lite
2013-10-18 11:54 - 2013-10-18 11:54 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-10-18 11:52 - 2013-10-18 11:55 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-10-18 11:52 - 2013-10-18 11:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Jan\Downloads\DTLite4471-0333.exe
2013-10-18 03:28 - 2013-11-16 13:54 - 00003014 _____ C:\Windows\System32\Tasks\MSIAfterburner
2013-10-18 02:16 - 2013-10-18 11:19 - 00000000 ____D C:\Users\Jan\Documents\Battlefield Heroes
2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

==================== One Month Modified Files and Folders =======

2013-11-16 14:44 - 2013-11-16 14:43 - 00010381 _____ C:\Users\Jan\Downloads\FRST.txt
2013-11-16 14:44 - 2013-09-25 23:15 - 00000000 ____D C:\Users\Jan\AppData\Roaming\NetSpeedMonitor
2013-11-16 14:43 - 2013-11-16 14:43 - 00000000 ____D C:\FRST
2013-11-16 14:40 - 2013-09-14 01:19 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Skype
2013-11-16 14:39 - 2013-09-14 02:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-16 14:13 - 2009-07-14 05:50 - 00020112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-16 14:13 - 2009-07-14 05:50 - 00020112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-16 14:12 - 2011-04-12 09:14 - 00699416 _____ C:\Windows\system32\perfh007.dat
2013-11-16 14:12 - 2011-04-12 09:14 - 00149556 _____ C:\Windows\system32\perfc007.dat
2013-11-16 14:12 - 2009-07-14 06:12 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-16 14:10 - 2013-09-14 00:31 - 01211612 _____ C:\Windows\WindowsUpdate.log
2013-11-16 14:07 - 2013-10-16 15:16 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Dropbox
2013-11-16 14:07 - 2013-09-14 02:26 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify
2013-11-16 14:06 - 2013-10-16 15:34 - 00000000 ___RD C:\Users\Jan\Dropbox
2013-11-16 14:06 - 2013-10-06 15:26 - 00000000 ____D C:\Users\Jan\AppData\Local\FreePDF_XP
2013-11-16 14:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-16 14:06 - 2009-07-14 05:56 - 00192621 _____ C:\Windows\setupact.log
2013-11-16 13:57 - 2013-11-16 13:56 - 00000000 ___RD C:\Users\Administrator\Podcasts
2013-11-16 13:57 - 2013-09-14 14:23 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-16 13:57 - 2013-09-14 14:23 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-16 13:56 - 2013-11-16 13:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2013-11-16 13:56 - 2013-09-14 14:23 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-16 13:56 - 2013-09-14 14:23 - 00000000 ____D C:\Users\Administrator
2013-11-16 13:56 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-16 13:54 - 2013-10-18 03:28 - 00003014 _____ C:\Windows\System32\Tasks\MSIAfterburner
2013-11-16 13:34 - 2013-11-16 13:34 - 01957794 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe
2013-11-16 13:20 - 2013-09-20 16:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 13:20 - 2010-11-21 04:47 - 00153480 _____ C:\Windows\PFRO.log
2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Malwarebytes
2013-11-16 13:11 - 2013-11-16 13:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-16 13:09 - 2013-11-16 13:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jan\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-16 12:45 - 2013-09-14 01:23 - 00000000 ____D C:\ProgramData\MFAData
2013-11-16 02:55 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\Battle.net
2013-11-16 02:17 - 2013-11-16 02:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 00:47 - 2013-11-02 14:00 - 00011485 _____ C:\Users\Jan\Desktop\Hearthstone.xlsx
2013-11-15 22:28 - 2013-11-15 20:17 - 735920614 _____ C:\Users\Jan\Downloads\wall.avi
2013-11-15 15:44 - 2013-09-21 15:56 - 00000000 ____D C:\Users\Jan\AppData\Roaming\vlc
2013-11-14 01:31 - 2013-10-16 08:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 22:05 - 2013-10-29 20:38 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-11-13 17:52 - 2013-09-14 02:27 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify
2013-11-12 19:53 - 2013-09-14 01:19 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-12 19:53 - 2013-09-14 01:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-10 00:33 - 2013-11-09 19:11 - 745630751 _____ C:\Users\Jan\Downloads\Were.the.Millers.2013.EXTENDED.BDRip.X264-SPARKS.mkv
2013-11-03 22:00 - 2013-10-16 08:00 - 00000000 ____D C:\Users\Jan\AppData\Local\Microsoft Help
2013-11-03 21:29 - 2013-10-16 15:18 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-11-03 21:29 - 2013-09-14 00:44 - 00000000 ___RD C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-30 17:19 - 2013-10-15 22:09 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-10-29 22:24 - 2013-10-29 22:24 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard
2013-10-29 21:37 - 2013-10-29 21:37 - 00000443 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-10-29 21:32 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Battle.net
2013-10-29 21:00 - 2013-10-29 21:00 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-enGB.exe
2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\Blizzard Entertainment
2013-10-29 20:34 - 2013-10-29 20:34 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-10-29 20:31 - 2013-10-29 20:31 - 00000000 ____D C:\ProgramData\Battle.net
2013-10-29 20:30 - 2013-10-29 20:26 - 05906904 _____ (Blizzard Entertainment) C:\Users\Jan\Downloads\Hearthstone-Beta-Setup-deDE.exe
2013-10-26 14:17 - 2013-10-26 14:17 - 00020140 _____ C:\Users\Jan\Downloads\google.csv
2013-10-23 22:02 - 2013-09-14 14:09 - 00000000 ____D C:\Users\Jan\AppData\Roaming\TS3Client
2013-10-18 13:03 - 2013-10-18 13:03 - 00000000 ____D C:\Users\Jan\AppData\Local\Skyrim
2013-10-18 13:03 - 2013-10-06 19:34 - 00000000 ____D C:\Users\Jan\Documents\My Games
2013-10-18 12:22 - 2013-09-14 00:44 - 00000000 ____D C:\Users\Jan\AppData\Local\VirtualStore
2013-10-18 12:21 - 2013-10-18 12:21 - 00000037 _____ C:\Windows\WET.INI
2013-10-18 12:03 - 2013-09-15 13:37 - 00141959 _____ C:\Windows\DirectX.log
2013-10-18 11:55 - 2013-10-18 11:54 - 00000000 ____D C:\Users\Jan\AppData\Roaming\DAEMON Tools Lite
2013-10-18 11:55 - 2013-10-18 11:52 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-10-18 11:54 - 2013-10-18 11:54 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-10-18 11:54 - 2013-10-18 11:54 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2013-10-18 11:52 - 2013-10-18 11:52 - 13901152 _____ (Disc Soft Ltd) C:\Users\Jan\Downloads\DTLite4471-0333.exe
2013-10-18 11:19 - 2013-10-18 02:16 - 00000000 ____D C:\Users\Jan\Documents\Battlefield Heroes
2013-10-18 10:07 - 2013-10-14 20:35 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-18 10:07 - 2013-10-12 12:13 - 00270240 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-18 02:17 - 2013-10-14 20:34 - 00000000 ____D C:\Users\Jan\AppData\Local\PunkBuster
2013-10-17 11:59 - 2013-10-06 19:33 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-10-17 10:58 - 2013-09-14 02:01 - 00064352 _____ C:\Users\Jan\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-17 10:06 - 2009-07-14 05:50 - 00305712 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-17 00:28 - 2013-10-17 00:28 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-17 00:28 - 2013-10-16 08:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Works

Some content of TEMP:
====================
C:\Users\Jan\AppData\Local\Temp\BunndleOfferManager.dll
C:\Users\Jan\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Jan\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Jan\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Jan\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll
C:\Users\Jan\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Jan\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Jan\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Jan\AppData\Local\Temp\nvStInst.exe
C:\Users\Jan\AppData\Local\Temp\ose00000.exe
C:\Users\Jan\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Jan\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Jan\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Jan\AppData\Local\Temp\sfextra.dll
C:\Users\Jan\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Jan\AppData\Local\Temp\_is3ED6.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-10 20:06

==================== End Of Log ============================
--- --- ---

--- --- ---

aharonov 16.11.2013 21:14
Und wenn du den Firefox abschiesst und den Rechner neu startest, erscheint diese Seite immer noch?

Bryce 16.11.2013 21:24
Ich werde es später nochmal ausprobieren (kann den Rechner grade nicht neustarten) aber wenn ich mich richtig erinnere dann ja, das war so.

aharonov 16.11.2013 21:26
Ja teste das bitte nochmals und gib dann Bescheid.

Bryce 17.11.2013 00:57
Jap also es besteht weiterhin auch nach dem Neustart wenn ich Firefox über den Task Manager "abschiesse".
Ich bin nicht sicher ob das bisher so richtig klar geworden ist aber das kein Tab im Firefox wenn ich ihn öffne, sondern ich starte Firefox (der geht ganz normal auf, mit meiner alten session/tabs) und DAZU öffnet sich diesen im Bild dargestellte zusätzliche Firefox fenster (welche sich wie gesagt nicht schließt wenn man firefox mit dem "X" beendet).

Kann man aus den Log files bisher nix aussagekräftiges raus ziehen?
Ich kenn mich zwar bisschen mit PCs aus aber log-files sind für mich trotzdem eher chinesisch ^^.

Danke schonmal :)

aharonov 17.11.2013 01:31
Hi,

deaktiviere im Firefox die "Sitzungswiederherstellung nach einem Crash" genau wie hier beschrieben: Sitzungswiederherstellung | Hilfe zu Firefox
Dann den Firefox wieder im Taskmanager abschiessen und neu starten. Besteht das Problem danach weiterhin?

Bryce 17.11.2013 01:45
Achje! Hätte ich eigentlich auch selber drauf kommen können! Hat echt funktioniert!
Ganz vielen Dank!
Jetzt is die frage ob das warklich nur ein nerviges Firefox fenster war das jetzt weg ist oder ob es eine tieferliegendes Problem gab/gibt das behoben werden muss?

aharonov 17.11.2013 01:57
Ja ich hab im FRST-Log eben keinerlei Anhaltspunkte gesehen, dass sich da was tiefer eingegraben hat bei dir.
Noch eine Kontrolle:



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


aharonov 07.01.2014 15:17
Fehlende Rückmeldung
Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten.
Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:09 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55