Trojaner-Board
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 7: Webseiten werden auf Werbung umgeleitet usw und grüne Links (https://www.trojaner-board.de/149579-windows-7-webseiten-werbung-umgeleitet-usw-gruene-links.html)

wallhalla23 10.02.2014 18:32
Windows 7: Webseiten werden auf Werbung umgeleitet usw und grüne Links
 
Hallo, nachdem ich 2 Tage alleine probiert habe das Problem in den Griff zu bekommen habe ich mich hier angemeldet und hoffe auf eure Hilfe.
Also es werden ziemlich viele Webseiten auf Werbung umgeleitet und in Texten sind Grün markierte Wörter die sich in links umgewandelt haben.
Habe schon einige Progs ausprobiert um das Problem zu beseitigen. Es waren Malwarebytes Anti-Malware ; Rkill ; Revo Uninstaller ; Spyhunter ; ADW-Cleaner und nun weiß ich nicht mehr weiter.

Larusso 10.02.2014 19:47
:hallo:

Code:
127.0.0.1 secure.tune-up.com
  127.0.0.1 order.tune-up.com
  127.0.0.1 tune-up.com
  127.0.0.1 tune-up.com/order
  127.0.0.1 registertuneup.com
  127.0.0.1 tuneup.de
http://www.trojaner-board.de/95393-c...-software.html

Wer crackt bitte freiwillig TuneUp. Seinen PC freiwillig noch mehr schrotten als es TuneUp von Haus aus schon tut.
Wenn die Software vollständig entfernt wurde, hätte ich gerne eine neue FRST Logfile

wallhalla23 10.02.2014 20:06
Habe es komplett entfernt...:daumenhoc

Hänge noch die andere mit an...weiß nicht ob das die richtige war.

Larusso 10.02.2014 21:10
Sehr gut. Finger weg von solch Zeugs.

Kommt dein Problem in allen Browsern vor ?

wallhalla23 11.02.2014 09:17
Ja benutze den Chrome und als ersatz hab ich nur den IE

Ich vergaß noch Auffälligkeiten auf den Webseiten. Es befinden sich auf freien stellen leere Rechtecke und darunter steht "Ads by ShowPassword". Habeschon versucht es mit ABP zu bekämpfen aber kommt immer wieder.

Larusso 11.02.2014 16:14
Hy.
Mal sehen was folgendes Tool so findet. In der FRST Log springt mich jetzt nichts an.

Deinstalliere bitte Spyhunter. Meiner Meinung nach ist diese Software selbst Malware.


Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


wallhalla23 11.02.2014 20:48
Hallo, hoffe ja du findest was...ist echt nervig diese shit Ads

Larusso 11.02.2014 21:12
Ich gehe mal davon aus, dass die Ads noch da sind.

Kannst du Chrome mal im privaten Modus starten und mir sagen, ob die Ads hier auch noch da sind.
Menü -> neues Inkognito-Fenster

( PS: Ich muss jetzt ins Bett, da morgen um 4 der Wecker läutet und es ein laaanger Arbeitstag wird -.- )

wallhalla23 11.02.2014 21:17
hab es gerade probiert und es sind immer noch die gleichen Ads vorhanden

Danke dir auf jeden Fall...kann denn jemand anderes weitermachen?

Larusso 12.02.2014 20:03
Hy und sorry für die Verzögerung. Irgendwie hab ich dich übersehen.

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

wallhalla23 12.02.2014 22:40
Hallo, und ich bin auch gerade erst zuhause aber hoffe das wir das noch über die Bühne bekommen.

Code:
ComboFix 14-02-12.01 - Andy 12.02.2014  22:10:25.1.8 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.6510.4219 [GMT 1:00]
ausgeführt von:: c:\users\Andy\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: ZoneAlarm Pro Firewall *Disabled* {E6380B7E-D4B2-19F1-083E-56486607704B}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - .lnk
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_uvnc_service
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-01-12 bis 2014-02-12  ))))))))))))))))))))))))))))))
.
.
2014-02-12 21:16 . 2014-02-12 21:16        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-02-11 14:14 . 2014-02-11 14:14        --------        d-----w-        c:\users\Andy\AppData\Roaming\ChemTable Software
2014-02-11 14:14 . 2014-02-11 14:14        --------        d-----w-        c:\program files (x86)\Reg Organizer
2014-02-11 14:14 . 2014-02-11 14:14        --------        d-----w-        c:\users\Andy\AppData\Local\ChemTable Software
2014-02-11 08:18 . 2013-12-04 03:28        10315576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{6793BA1E-1B69-42C5-8D6A-FE6F420C0E92}\mpengine.dll
2014-02-10 14:32 . 2014-02-10 19:02        --------        d-----w-        C:\FRST
2014-02-09 10:30 . 2014-02-09 10:31        --------        d-----w-        c:\users\Andy\Iso
2014-02-09 09:29 . 2014-02-10 13:39        --------        d-----w-        C:\AdwCleaner
2014-02-09 09:26 . 2010-11-21 03:25        296448        ----a-w-        c:\windows\SysWow64\mfds.dll
2014-02-09 08:22 . 2014-02-09 08:22        --------        d-----w-        c:\windows\ERUNT
2014-02-08 21:29 . 2014-02-12 01:32        --------        d-----w-        c:\program files (x86)\Enigma Software Group
2014-02-08 21:29 . 2014-02-11 19:26        --------        d-----w-        c:\windows\0028CB34D5D3460FB308A39A095A5E01.TMP
2014-02-08 19:30 . 2014-02-12 01:32        --------        d-----w-        c:\program files\Enigma Software Group
2014-02-08 19:30 . 2014-02-08 21:29        --------        d-----w-        c:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-02-08 19:30 . 2014-02-08 21:29        --------        d-----w-        c:\program files (x86)\Common Files\Wise Installation Wizard
2014-02-08 11:04 . 2014-02-08 11:04        --------        d-----w-        c:\users\Andy\AppData\Roaming\Malwarebytes
2014-02-08 11:04 . 2014-02-08 11:04        --------        d-----w-        c:\programdata\Malwarebytes
2014-02-08 11:04 . 2014-02-08 11:04        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2014-02-08 11:04 . 2013-04-04 13:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys
2014-02-08 09:00 . 2012-06-06 06:06        2004480        ----a-w-        c:\windows\system32\msxml6.dll
2014-02-08 09:00 . 2012-06-06 06:06        1881600        ----a-w-        c:\windows\system32\msxml3.dll
2014-02-08 09:00 . 2012-06-06 05:05        1390080        ----a-w-        c:\windows\SysWow64\msxml6.dll
2014-02-08 09:00 . 2012-06-06 05:05        1236992        ----a-w-        c:\windows\SysWow64\msxml3.dll
2014-02-08 09:00 . 2010-06-26 03:55        2048        ----a-w-        c:\windows\system32\msxml3r.dll
2014-02-08 09:00 . 2010-06-26 03:24        2048        ----a-w-        c:\windows\SysWow64\msxml3r.dll
2014-02-07 14:07 . 2014-02-07 14:07        --------        d-----w-        c:\program files (x86)\VS Revo Group
2014-02-07 11:25 . 2014-02-08 09:06        --------        d-----w-        c:\program files (x86)\Mozilla Thunderbird
2014-02-05 16:31 . 2014-02-05 16:31        --------        d-----w-        c:\program files (x86)\Shark007
2014-02-05 16:27 . 2014-02-09 09:27        --------        d-----w-        c:\programdata\Advanced
2014-02-03 20:30 . 2014-02-04 00:03        --------        d-----w-        c:\program files\Ekahau
2014-02-03 10:06 . 2014-02-03 10:06        --------        d-----w-        c:\windows\CheckSur
2014-02-02 10:36 . 2014-02-02 10:36        --------        d-----w-        c:\users\Andy\AppData\Local\Microsoft_Research
2014-02-02 09:59 . 2014-02-02 09:59        --------        d-----w-        c:\program files (x86)\Common Files\ASCOM
2014-02-02 09:59 . 2014-02-02 09:59        --------        d-----w-        c:\windows\Symbols
2014-02-02 09:59 . 2014-02-02 09:59        --------        d-----w-        c:\program files\Common Files\ASCOM
2014-02-02 09:59 . 2014-02-02 09:59        --------        d-----w-        c:\program files (x86)\ASCOM
2014-02-02 09:58 . 2014-02-04 00:02        --------        dc-h--w-        c:\programdata\{BBDFE733-F48B-4E86-B7C1-E6F173F01FCF}
2014-02-02 08:45 . 2010-05-26 10:41        511328        ----a-w-        c:\windows\system32\d3dx10_43.dll
2014-02-02 08:45 . 2010-05-26 10:41        470880        ----a-w-        c:\windows\SysWow64\d3dx10_43.dll
2014-02-02 08:45 . 2009-09-04 16:29        2582888        ----a-w-        c:\windows\system32\D3DCompiler_42.dll
2014-02-02 08:45 . 2009-09-04 16:29        235344        ----a-w-        c:\windows\SysWow64\d3dx11_42.dll
2014-02-02 08:45 . 2009-09-04 16:29        285024        ----a-w-        c:\windows\system32\d3dx11_42.dll
2014-02-02 08:45 . 2007-05-16 15:45        506728        ----a-w-        c:\windows\system32\d3dx10_34.dll
2014-02-02 08:45 . 2007-05-16 15:45        443752        ----a-w-        c:\windows\SysWow64\d3dx10_34.dll
2014-02-02 08:45 . 2007-05-16 15:45        1401200        ----a-w-        c:\windows\system32\D3DCompiler_34.dll
2014-02-02 08:45 . 2007-05-16 15:45        1124720        ----a-w-        c:\windows\SysWow64\D3DCompiler_34.dll
2014-02-02 08:45 . 2014-02-02 08:45        --------        d-----w-        c:\program files (x86)\Microsoft Research
2014-01-31 11:55 . 2014-01-31 11:55        --------        d-----w-        c:\users\Andy\AppData\Local\Wondershare
2014-01-31 11:55 . 2014-01-31 11:55        --------        d-----w-        c:\program files (x86)\Common Files\Wondershare
2014-01-31 11:55 . 2014-02-09 09:54        --------        d-----w-        c:\program files (x86)\Wondershare
2014-01-31 11:55 . 2014-01-31 11:55        --------        d-----w-        c:\programdata\Wondershare
2014-01-29 11:03 . 2014-01-29 11:03        1734        ----a-w-        c:\windows\patsearch.bin
2014-01-29 11:03 . 2014-01-28 14:20        55480        ----a-w-        c:\windows\system32\drivers\webinstr.sys
2014-01-28 09:57 . 2014-01-28 09:57        --------        d-----w-        c:\users\Andy\AppData\Roaming\UltraVNC
2014-01-28 09:54 . 2014-01-28 09:54        --------        d-----w-        c:\program files (x86)\uvnc bvba
2014-01-26 11:20 . 2014-01-26 11:20        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-26 11:20 . 2014-01-26 11:20        --------        d-----w-        c:\program files\iTunes
2014-01-26 11:20 . 2014-01-26 11:20        --------        d-----w-        c:\program files (x86)\iTunes
2014-01-26 11:20 . 2014-01-26 11:20        --------        d-----w-        c:\program files\iPod
2014-01-25 10:00 . 2014-01-25 10:01        --------        d-----w-        c:\programdata\Package Cache
2014-01-25 10:00 . 2014-01-28 13:14        --------        d-----w-        c:\program files (x86)\SixaxisPairTool
2014-01-21 13:57 . 2014-01-21 13:57        --------        d-----w-        c:\users\Andy\AppData\Local\MetaGeek,_LLC
2014-01-21 13:56 . 2014-01-21 13:56        --------        d-----w-        c:\program files (x86)\MetaGeek
2014-01-21 13:21 . 2014-01-21 13:21        --------        d-----w-        C:\Python27
2014-01-21 13:18 . 2014-01-21 13:18        --------        d-----w-        C:\Python33
2014-01-21 12:40 . 2014-01-21 12:41        --------        d-----w-        c:\programdata\Visan
2014-01-21 12:38 . 2014-02-05 09:34        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-21 12:38 . 2014-02-05 09:34        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-21 12:38 . 2014-01-21 12:38        --------        d-----w-        c:\windows\system32\Macromed
2014-01-21 12:35 . 2014-01-21 12:35        --------        d-----w-        c:\program files (x86)\MPC-HC
2014-01-21 12:33 . 2014-01-21 12:33        --------        d-----w-        c:\users\Default\AppData\Local\Adobe
2014-01-21 12:25 . 2014-01-21 12:25        --------        d-----w-        c:\users\Andy\AppData\Local\Secunia PSI
2014-01-21 12:25 . 2014-01-21 12:25        --------        d-----w-        c:\program files (x86)\Secunia
2014-01-18 08:55 . 2014-01-18 09:16        --------        d-----w-        c:\users\Andy\AppData\Roaming\FileZilla
2014-01-15 07:40 . 2013-11-27 01:41        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys
2014-01-15 07:40 . 2013-11-27 01:41        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys
2014-01-15 07:40 . 2013-11-27 01:41        53248        ----a-w-        c:\windows\system32\drivers\usbehci.sys
2014-01-15 07:40 . 2013-11-27 01:41        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys
2014-01-15 07:40 . 2013-11-27 01:41        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys
2014-01-15 07:40 . 2013-11-27 01:41        30720        ----a-w-        c:\windows\system32\drivers\usbuhci.sys
2014-01-15 07:40 . 2013-11-27 01:41        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys
2014-01-15 07:40 . 2013-11-26 11:40        376768        ----a-w-        c:\windows\system32\drivers\netio.sys
2014-01-15 07:40 . 2013-11-26 10:32        3156480        ----a-w-        c:\windows\system32\win32k.sys
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-16 08:10 . 2013-10-27 09:52        86054176        ----a-w-        c:\windows\system32\MRT.exe
2013-12-18 05:13 . 2010-11-21 03:27        270496        ------w-        c:\windows\system32\MpSigStub.exe
2013-12-17 13:18 . 2013-10-26 12:24        84720        ----a-w-        c:\windows\system32\drivers\avnetflt.sys
2013-12-17 13:18 . 2013-10-26 12:24        131576        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2013-12-17 13:18 . 2013-10-26 12:24        108440        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2013-12-11 08:38 . 2013-12-11 08:38        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-11 08:38 . 2013-12-11 08:38        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll
2013-12-11 08:38 . 2013-12-11 08:38        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-11 08:38 . 2013-12-11 08:38        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll
2013-12-11 08:38 . 2013-12-11 08:38        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx
2013-12-11 08:38 . 2013-12-11 08:38        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-11 08:38 . 2013-12-11 08:38        337408        ----a-w-        c:\windows\SysWow64\html.iec
2013-12-11 08:38 . 2013-12-11 08:38        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2013-12-11 08:38 . 2013-12-11 08:38        235008        ----a-w-        c:\windows\system32\elshyph.dll
2013-12-11 08:38 . 2013-12-11 08:38        182272        ----a-w-        c:\windows\SysWow64\msls31.dll
2013-12-11 08:38 . 2013-12-11 08:38        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2013-12-11 08:38 . 2013-12-11 08:38        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-11 08:38 . 2013-12-11 08:38        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2013-12-11 08:38 . 2013-12-11 08:38        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2013-12-11 08:38 . 2013-12-11 08:38        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2013-12-11 08:38 . 2013-12-11 08:38        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2013-12-11 08:38 . 2013-12-11 08:38        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll
2013-12-11 08:38 . 2013-12-11 08:38        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll
2013-12-11 08:38 . 2013-12-11 08:38        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe
2013-12-11 08:38 . 2013-12-11 08:38        139264        ----a-w-        c:\windows\SysWow64\wextract.exe
2013-12-11 08:38 . 2013-12-11 08:38        13312        ----a-w-        c:\windows\SysWow64\mshta.exe
2013-12-11 08:38 . 2013-12-11 08:38        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2013-12-11 08:38 . 2013-12-11 08:38        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2013-12-11 08:38 . 2013-12-11 08:38        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2013-12-11 08:38 . 2013-12-11 08:38        942592        ----a-w-        c:\windows\system32\jsIntl.dll
2013-12-11 08:38 . 2013-12-11 08:38        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-12-11 08:38 . 2013-12-11 08:38        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-12-11 08:38 . 2013-12-11 08:38        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll
2013-12-11 08:38 . 2013-12-11 08:38        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-12-11 08:38 . 2013-12-11 08:38        247808        ----a-w-        c:\windows\system32\msls31.dll
2013-12-11 08:38 . 2013-12-11 08:38        195584        ----a-w-        c:\windows\system32\msrating.dll
2013-12-11 08:38 . 2013-12-11 08:38        13312        ----a-w-        c:\windows\system32\msfeedssync.exe
2013-12-11 08:38 . 2013-12-11 08:38        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-12-11 08:38 . 2013-12-11 08:38        105984        ----a-w-        c:\windows\system32\iesysprep.dll
2013-12-11 08:38 . 2013-12-11 08:38        84992        ----a-w-        c:\windows\system32\mshtmled.dll
2013-12-11 08:38 . 2013-12-11 08:38        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2013-12-11 08:38 . 2013-12-11 08:38        81408        ----a-w-        c:\windows\system32\icardie.dll
2013-12-11 08:38 . 2013-12-11 08:38        774144        ----a-w-        c:\windows\system32\jscript.dll
2013-12-11 08:38 . 2013-12-11 08:38        77312        ----a-w-        c:\windows\system32\tdc.ocx
2013-12-11 08:38 . 2013-12-11 08:38        626176        ----a-w-        c:\windows\system32\msfeeds.dll
2013-12-11 08:38 . 2013-12-11 08:38        62464        ----a-w-        c:\windows\system32\pngfilt.dll
2013-12-11 08:38 . 2013-12-11 08:38        616104        ----a-w-        c:\windows\system32\ieapfltr.dat
2013-12-11 08:38 . 2013-12-11 08:38        548352        ----a-w-        c:\windows\system32\vbscript.dll
2013-12-11 08:38 . 2013-12-11 08:38        48128        ----a-w-        c:\windows\system32\imgutil.dll
2013-12-11 08:38 . 2013-12-11 08:38        453120        ----a-w-        c:\windows\system32\dxtmsft.dll
2013-12-11 08:38 . 2013-12-11 08:38        413696        ----a-w-        c:\windows\system32\html.iec
2013-12-11 08:38 . 2013-12-11 08:38        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-11 08:38 . 2013-12-11 08:38        30208        ----a-w-        c:\windows\system32\licmgr10.dll
2013-12-11 08:38 . 2013-12-11 08:38        296960        ----a-w-        c:\windows\system32\dxtrans.dll
2013-12-11 08:38 . 2013-12-11 08:38        263376        ----a-w-        c:\windows\system32\iedkcs32.dll
2013-12-11 08:38 . 2013-12-11 08:38        243200        ----a-w-        c:\windows\system32\webcheck.dll
2013-12-11 08:38 . 2013-12-11 08:38        235520        ----a-w-        c:\windows\system32\url.dll
2013-12-11 08:38 . 2013-12-11 08:38        167424        ----a-w-        c:\windows\system32\iexpress.exe
2013-12-11 08:38 . 2013-12-11 08:38        147968        ----a-w-        c:\windows\system32\occache.dll
2013-12-11 08:38 . 2013-12-11 08:38        143872        ----a-w-        c:\windows\system32\wextract.exe
2013-12-11 08:38 . 2013-12-11 08:38        13824        ----a-w-        c:\windows\system32\mshta.exe
2013-12-11 08:38 . 2013-12-11 08:38        135680        ----a-w-        c:\windows\system32\iepeers.dll
2013-12-11 08:38 . 2013-12-11 08:38        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-12-11 08:38 . 2013-12-11 08:38        101376        ----a-w-        c:\windows\system32\inseng.dll
2013-11-26 11:54 . 2013-12-13 07:18        23183360        ----a-w-        c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-13 07:18        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-13 07:18        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-13 07:18        66048        ----a-w-        c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-13 07:18        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-13 07:18        2764288        ----a-w-        c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-13 07:18        53760        ----a-w-        c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-13 07:18        33792        ----a-w-        c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-13 07:18        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-13 07:18        574976        ----a-w-        c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-13 07:18        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-13 07:18        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-13 07:18        708608        ----a-w-        c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-13 07:18        218624        ----a-w-        c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-13 07:18        5769216        ----a-w-        c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-13 07:18        553472        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-13 07:18        4243968        ----a-w-        c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-13 07:18        1995264        ----a-w-        c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-13 07:18        12996608        ----a-w-        c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-13 07:18        1928192        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-13 07:18        2334208        ----a-w-        c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-13 07:18        1395200        ----a-w-        c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-13 07:18        817664        ----a-w-        c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-13 07:18        1820160        ----a-w-        c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-12 13:09        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 13:09        465920        ----a-w-        c:\windows\system32\WMPhoto.dll
2013-11-21 15:45 . 2013-11-22 10:00        655872        ----a-w-        c:\windows\msvcr90.dll
2013-11-21 15:25 . 2013-11-21 15:17        76384        ----a-w-        c:\windows\system32\libusb0.dll
2013-11-21 15:25 . 2013-11-21 15:17        52832        ----a-w-        c:\windows\system32\drivers\libusb0.sys
2013-11-21 15:17 . 2013-11-21 15:24        25088        ----a-w-        c:\windows\SysWow64\installer_x64.exe
2013-11-21 15:17 . 2013-11-21 15:24        23552        ----a-w-        c:\windows\SysWow64\installer_x86.exe
2013-11-18 20:19 . 2013-11-18 20:19        3923456        ----a-w-        c:\windows\system32\python33.dll
2013-11-18 20:18 . 2013-11-18 20:18        94208        ----a-w-        c:\windows\pyw.exe
2013-11-18 20:18 . 2013-11-18 20:18        93696        ----a-w-        c:\windows\py.exe
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-10-27 08:58        220632        ----a-w-        c:\users\Andy\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-10-27 08:58        220632        ----a-w-        c:\users\Andy\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-10-27 08:58        220632        ----a-w-        c:\users\Andy\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"HP Deskjet 3050 J610 series (NET)"="c:\program files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-13 283160]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-24 336384]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-17 684600]
"AllShareAgent"="c:\program files (x86)\Samsung\AllShare\AllShareAgent.exe" [2012-01-19 285072]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-01-20 43848]
"ZoneAlarm"="c:\program files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [2013-10-25 73832]
"BackupManagerTray"="c:\program files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" [2011-03-09 295744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"HP Software Update"=c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SimpleSlideShowServer;SimpleSlideShowServer;c:\program files (x86)\Samsung\AllShare\AllShareSlideShowService.exe;c:\program files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 TwonkyServer;TwonkyServer;c:\program files (x86)\Twonky\TwonkyServer\twonkystarter.exe;c:\program files (x86)\Twonky\TwonkyServer\twonkystarter.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R4 CGVPNCliService;CyberGhost VPN 5 Client Service;c:\program files\CyberGhost 5\Service.exe;c:\program files\CyberGhost 5\Service.exe [x]
R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R4 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [x]
R4 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe;c:\program files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [x]
R4 TwonkyProxy;TwonkyProxy;c:\program files (x86)\Twonky\TwonkyServer\twonkyproxy.exe;c:\program files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 SamsungAllShareV2.0;Samsung AllShare PC;c:\program files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe;c:\program files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 webinstr;webinstr;c:\windows\system32\Drivers\webinstr.sys;c:\windows\SYSNATIVE\Drivers\webinstr.sys [x]
S2 ZAPrivacyService;ZoneAlarm Privacy Service;c:\program files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe;c:\program files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 libusb0;libusb-win32 - Kernel Driver 01/25/2014 0.0.0.0;c:\windows\system32\DRIVERS\libusb0.sys;c:\windows\SYSNATIVE\DRIVERS\libusb0.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192se.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-10 12:41        1211720        ----a-w-        c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-21 09:34]
.
2014-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-02-10 12:16]
.
2014-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-02-10 12:16]
.
2014-02-12 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2011-09-20 09:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
2013-12-20 19:28        13776        ----a-w-        c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" [2013-12-20 13776]
.
[HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-10 11785832]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-15 168216]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-15 416024]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-28 497648]
"Power Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2011-05-10 1831528]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.192.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{11111111-1111-1111-1111-110511071178} - (no file)
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-2296709744-1596721445-3321598109-1001_Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-2296709744-1596721445-3321598109-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
@DACL=(02 0000)
@="SyncingOverlayHandler Class"
.
[HKEY_USERS\S-1-5-21-2296709744-1596721445-3321598109-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
@DACL=(02 0000)
@="ErrorOverlayHandler Class"
.
[HKEY_USERS\S-1-5-21-2296709744-1596721445-3321598109-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
@DACL=(02 0000)
@="UpToDateOverlayHandler Class"
.
[HKEY_USERS\S-1-5-21-2296709744-1596721445-3321598109-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}]
@DACL=(02 0000)
@="SyncFileInformationProvider Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\AnVir Task Manager\anvir.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-02-12  22:24:41 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-02-12 21:24
.
Vor Suchlauf: 18 Verzeichnis(se), 310.030.000.128 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 309.913.411.584 Bytes frei
.
- - End Of File - - C1B2D092CFAE066DE98FC28401A05A41

Larusso 13.02.2014 16:57
Hy.

Deinstalliere bitte
Reg Organizer




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


wallhalla23 14.02.2014 01:04
Hallo, so hier jetzt der Online Logfile.

Code:
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=64a125d60a4a8e499dca7e463787a397
# engine=17063
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-13 11:51:38
# local_time=2014-02-14 12:51:38 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 16733 11803826 9520 0
# compatibility_mode=5893 16776573 100 94 58896 143965348 0 0
# compatibility_mode=9217 16777214 75 4 8958266 8958266 0 0
# scanned=259507
# found=0
# cleaned=0
# scan_time=13056

Larusso 14.02.2014 13:02
Die Werbungen immer noch da ?

wallhalla23 14.02.2014 13:28
Hallo, ja leider ist diese shit Werbung immer noch da. Ich war schon am überlegen ob ich das System ganz neu aufspiele oder hast du noch eine idee?

Also Kritik hab ich keine da ich dabei ja lerne...ihr macht das ja auch freiwillig und dafür zolle ich höchsten Respekt.
Dann erzähl mal was als nächstes kommt :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:22 Uhr.
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20