Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Prgramme lassen sich nicht starten (https://www.trojaner-board.de/151361-prgramme-lassen-starten.html)

hhh666 22.03.2014 18:04
Prgramme lassen sich nicht starten
 
Hallo,

ich habe einen Rechner mit Windows 7. Ich habe vor ein paar Tagen in großer Hektik openoffice runterladen wollen. In der Hektik habe ich anscheinend eine Datei erwischt, die nicht sauber war. Nach Öffnen des Downloads öffnete sich ein Programm, das die Windowsgeschwindigkeit steigern wollte. Als es sich das zweite oder dritte Mal automatisch starte, habe ich den Vorgang abgebrochen. Dann wurde mein Rechner von Werbung zugemüllt. Um das Schauspiel zu beenden, habe ich das System auf einen Wiederherstellungspunkt zurückgesetzt, der vor dem Download lag. Und hier beginnt mein Problem. Seit dem ich das getan habe, starten Programme wie GoogleChrome oder Word nicht mehr. Wenn ich Word starte kommt folgender Fehler. "das betriebssystem ist momentan nicht zum ausführen dieser anwendung konfiguriert". Im Internet Explorer kann ich genau einmal eine Seite aufrufen. Danach kann ich keine Adresse mehr eintippen.Bilder die auf dem Rechner gespeichert wurden, kann man nicht ansehen. Wenn ich den Sart-Button drücke und dann alle Programme anwähle, sollte eigentlich ein Liste mit Programme bzw. Ordnern kommen. Aber dort steht nur ein Ordner Windows-Update und ein Ordner Standardprogramme.
Ich habe mal alles geschrieben, was ich so beobachtet habe. Ich hoffe Ihr könnt mir helfen.

schrauber 22.03.2014 18:11
hi,

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)
Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
  • Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST Download FRST 32-Bit | FRST 64-Bit
  • Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
  • Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:
Über den Boot Manager:
  • Starte den Rechner neu.
  • Während dem Hochfahren drücke mehrmals die F8 Taste
  • Wähle nun Computer reparieren.
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Mit Windows CD/DVD (auch bei Windows 8 möglich):
  • Lege die Windows CD in dein Laufwerk.
  • Starte den Rechner neu und starte von der CD.
  • Wähle die Spracheinstellungen und klicke "Weiter".
  • Klicke auf Computerreparaturoptionen !
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Wähle in den Reparaturoptionen: Eingabeaufforderung
  • Gib nun bitte notepad ein und drücke Enter.
  • Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
    Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
  • Schließe Notepad wieder
  • Gib nun bitte folgenden Befehl ein.
    e:\frst.exe bzw. e:\frst64.exe
    Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
  • Akzeptiere den Disclaimer mit Ja und klicke Untersuchen
Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).


hhh666 23.03.2014 11:10
Hier die Antwort.
Leider hat es nicht geklappt.
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by SYSTEM on MININT-MH1G5BV on 23-03-2014 10:49:35
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet003
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.




==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2723624 2011-03-27] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-08] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-06-30] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1644680 2013-02-08] (Ask)
HKLM-x32\...\Run: [CanonQuickMenu] - C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-01] (Oracle Corporation)
HKLM-x32\...\Run: [24x7HELP] - C:\Program Files (x86)\24x7Help\App24x7Help.exe [1887824 2013-11-05] (Crawler, LLC)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-28] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()

==================== Services (Whitelisted) =================

S2 24x7HelpSvc; C:\Program Files (x86)\24x7Help\App24x7Svc.exe [342608 2013-03-11] (PCRx.com, LLC)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-09-05] (WildTangent)
S2 HPSLPSVC; C:\Users\hwm\AppData\Local\Temp\7zS0AC8\hpslpsvc64.dll [1039360 2012-11-14] (Hewlett-Packard Co.)
S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-18] (Siliten)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-23 10:49 - 2014-03-23 10:49 - 00000000 ____D () C:\FRST
2014-03-22 08:35 - 2014-03-22 08:35 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-03-22 05:55 - 2014-03-22 05:55 - 00000000 ____D () C:\ProgramData\Virtualized Applications
2014-03-21 23:08 - 2014-01-08 18:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-21 23:08 - 2014-01-03 14:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2014-03-21 07:32 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2014-03-21 07:32 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt(63).sys
2014-03-21 07:32 - 2013-10-01 18:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-21 07:32 - 2013-10-01 18:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-21 07:32 - 2013-10-01 17:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2014-03-21 07:32 - 2013-10-01 17:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2014-03-21 07:32 - 2013-10-01 17:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2014-03-21 07:32 - 2013-10-01 17:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2014-03-21 07:32 - 2013-10-01 16:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll
2014-03-21 07:32 - 2013-10-01 16:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-21 07:32 - 2013-10-01 16:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-03-21 07:32 - 2013-10-01 16:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2014-03-21 07:32 - 2013-10-01 16:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2014-03-21 07:32 - 2013-10-01 15:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-03-21 07:32 - 2013-10-01 15:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2014-03-21 07:32 - 2013-10-01 15:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-21 07:32 - 2013-10-01 14:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-03-21 07:31 - 2012-08-23 06:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2014-03-21 07:31 - 2012-08-23 06:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2014-03-21 07:31 - 2012-08-23 06:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbGD.sys
2014-03-21 07:31 - 2012-08-23 05:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2014-03-21 07:31 - 2012-08-23 03:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-03-21 07:31 - 2012-08-23 02:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll
2014-03-21 07:31 - 2012-08-23 01:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2014-03-21 07:30 - 2013-09-24 18:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll
2014-03-21 07:30 - 2013-09-24 17:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-21 07:29 - 2012-05-04 03:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2014-03-21 07:29 - 2012-05-04 01:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-03-21 06:00 - 2014-03-21 07:12 - 00000000 ____D () C:\Users\hwm\AppData\Local\newplayer
2014-03-21 05:59 - 2014-03-21 07:14 - 00000000 ____D () C:\ProgramData\WPM
2014-03-21 05:59 - 2014-03-21 07:14 - 00000000 ____D () C:\ProgramData\IePluginService
2014-03-21 05:59 - 2014-03-21 07:14 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-21 05:59 - 2014-03-21 06:00 - 00002866 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.results
2014-03-21 05:59 - 2014-03-21 06:00 - 00001192 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.quick.results
2014-03-21 05:59 - 2014-03-21 06:00 - 00000320 _____ () C:\Users\hwm\AppData\Roaming\aps.uninstall.scan.results
2014-03-21 05:58 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\NewPlayer
2014-03-21 05:58 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\Uniblue
2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-03-21 05:57 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\media enhance
2014-03-21 05:57 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
2014-03-21 05:57 - 2014-03-21 05:57 - 01172736 _____ (AnyProtect.com) C:\Users\hwm\AppData\Local\nsd24D2.tmp
2014-03-21 05:56 - 2014-03-22 07:42 - 00000000 ____D () C:\Program Files (x86)\free  ven
2014-03-19 08:36 - 2014-03-21 05:55 - 00000000 _____ () C:\END
2014-03-19 08:36 - 2014-03-19 08:36 - 00000000 ____D () C:\Users\hwm\AppData\Local\SearchProtect
2014-03-18 09:56 - 2014-03-22 07:43 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\IminentToolbar
2014-03-18 09:56 - 2014-03-22 07:40 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2014-03-18 09:56 - 2014-03-22 07:40 - 00000000 ____D () C:\Program Files (x86)\Iminent
2014-03-18 09:56 - 2014-03-21 07:12 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\systweak
2014-03-18 09:56 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-18 09:55 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\View-Password-soft
2014-03-18 09:55 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-9.5
2014-03-13 01:08 - 2014-02-28 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-03-13 01:08 - 2014-02-28 20:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-03-13 01:08 - 2014-02-28 19:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 01:08 - 2014-02-28 19:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 01:08 - 2014-02-06 17:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2014-03-13 01:08 - 2014-01-28 18:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2014-03-13 01:08 - 2014-01-28 18:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 01:08 - 2014-01-27 18:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2014-03-13 01:07 - 2014-02-28 22:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-03-13 01:07 - 2014-02-28 22:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml(64).dll
2014-03-13 01:07 - 2014-02-28 21:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-03-13 01:07 - 2014-02-28 20:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-03-13 01:07 - 2014-02-28 20:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-03-13 01:07 - 2014-02-28 20:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-03-13 01:07 - 2014-02-28 20:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-03-13 01:07 - 2014-02-28 20:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-03-13 01:07 - 2014-02-28 20:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-03-13 01:07 - 2014-02-28 20:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-03-13 01:07 - 2014-02-28 20:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-03-13 01:07 - 2014-02-28 20:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 01:07 - 2014-02-28 20:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-13 01:07 - 2014-02-28 20:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-03-13 01:07 - 2014-02-28 20:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 01:07 - 2014-02-28 20:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-03-13 01:07 - 2014-02-28 19:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-03-13 01:07 - 2014-02-28 19:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 01:07 - 2014-02-28 19:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 01:07 - 2014-02-28 19:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 01:07 - 2014-02-28 19:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-03-13 01:07 - 2014-02-28 19:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 01:07 - 2014-02-28 19:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 01:07 - 2014-02-28 19:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 01:07 - 2014-02-28 19:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-03-13 01:07 - 2014-02-28 19:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-03-13 01:07 - 2014-02-28 19:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 01:07 - 2014-02-28 19:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 01:07 - 2014-02-28 19:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-03-13 01:07 - 2014-02-28 19:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 01:07 - 2014-02-28 19:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 01:07 - 2014-02-28 18:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 01:07 - 2014-02-28 18:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-03-13 01:07 - 2014-02-28 18:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 01:07 - 2014-02-28 18:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 01:07 - 2014-02-28 18:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-03-13 01:07 - 2014-02-28 18:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 01:06 - 2014-02-03 18:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2014-03-13 01:06 - 2014-02-03 18:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2014-03-13 01:06 - 2014-02-03 18:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 01:06 - 2014-02-03 18:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-10 06:16 - 2014-03-12 02:39 - 00000000 ____D () C:\Users\hwm\Desktop\Bilder Regina
2014-02-25 04:50 - 2014-02-25 04:50 - 00000000 ___RD () C:\Program Files (x86)\Skype

==================== One Month Modified Files and Folders =======

2014-03-23 10:49 - 2014-03-23 10:49 - 00000000 ____D () C:\FRST
2014-03-23 01:41 - 2012-05-25 11:51 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-23 01:41 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-23 01:41 - 2009-07-13 20:51 - 00180137 _____ () C:\Windows\setupact.log
2014-03-22 13:07 - 2011-11-29 14:59 - 01721605 _____ () C:\Windows\WindowsUpdate.log
2014-03-22 13:06 - 2012-05-25 11:51 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-22 13:06 - 2012-04-11 00:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-22 09:46 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2014-03-22 08:41 - 2012-01-21 06:06 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\SoftGrid Client
2014-03-22 08:35 - 2014-03-22 08:35 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-03-22 07:43 - 2014-03-18 09:56 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\IminentToolbar
2014-03-22 07:43 - 2012-01-21 05:21 - 00000000 ____D () C:\Users\hwm\AppData\Local\PowerCinema
2014-03-22 07:43 - 2011-10-27 04:12 - 00000000 ____D () C:\Windows\System32\Macromed
2014-03-22 07:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\schemas
2014-03-22 07:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-22 07:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\L2Schemas
2014-03-22 07:42 - 2014-03-21 05:56 - 00000000 ____D () C:\Program Files (x86)\free  ven
2014-03-22 07:42 - 2013-03-13 01:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-22 07:42 - 2013-03-13 01:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-22 07:42 - 2012-01-22 01:09 - 00000000 ____D () C:\ProgramData\clear.fi
2014-03-22 07:42 - 2011-10-27 04:14 - 00000000 ____D () C:\ProgramData\BackupManager
2014-03-22 07:42 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\registration
2014-03-22 07:40 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2014-03-22 07:40 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\Iminent
2014-03-22 07:40 - 2012-01-22 05:05 - 00000000 __RHD () C:\MSOCache
2014-03-22 07:20 - 2011-11-29 23:46 - 00700134 _____ () C:\Windows\System32\perfh007.dat
2014-03-22 07:20 - 2011-11-29 23:46 - 00149984 _____ () C:\Windows\System32\perfc007.dat
2014-03-22 07:20 - 2009-07-13 21:13 - 01622236 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-03-22 06:56 - 2009-07-13 20:45 - 00016752 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-22 06:56 - 2009-07-13 20:45 - 00016752 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-22 05:56 - 2012-01-21 06:06 - 00000000 ____D () C:\Users\hwm\AppData\Local\SoftGrid Client
2014-03-22 05:55 - 2014-03-22 05:55 - 00000000 ____D () C:\ProgramData\Virtualized Applications
2014-03-21 23:47 - 2013-08-17 05:49 - 00000000 ____D () C:\Windows\System32\MRT
2014-03-21 23:45 - 2012-04-11 00:14 - 90015360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-03-21 22:59 - 2012-01-21 05:21 - 00000000 ____D () C:\users\hwm
2014-03-21 07:14 - 2014-03-21 05:59 - 00000000 ____D () C:\ProgramData\WPM
2014-03-21 07:14 - 2014-03-21 05:59 - 00000000 ____D () C:\ProgramData\IePluginService
2014-03-21 07:14 - 2014-03-21 05:59 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-21 07:13 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\NewPlayer
2014-03-21 07:13 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-03-21 07:13 - 2014-03-21 05:57 - 00000000 ____D () C:\Program Files (x86)\media enhance
2014-03-21 07:13 - 2014-03-21 05:57 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
2014-03-21 07:13 - 2014-03-18 09:55 - 00000000 ____D () C:\Program Files (x86)\View-Password-soft
2014-03-21 07:13 - 2014-03-18 09:55 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-9.5
2014-03-21 07:12 - 2014-03-21 06:00 - 00000000 ____D () C:\Users\hwm\AppData\Local\newplayer
2014-03-21 07:12 - 2014-03-18 09:56 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\systweak
2014-03-21 06:00 - 2014-03-21 05:59 - 00002866 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.results
2014-03-21 06:00 - 2014-03-21 05:59 - 00001192 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.quick.results
2014-03-21 06:00 - 2014-03-21 05:59 - 00000320 _____ () C:\Users\hwm\AppData\Roaming\aps.uninstall.scan.results
2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\Uniblue
2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-03-21 05:57 - 2014-03-21 05:57 - 01172736 _____ (AnyProtect.com) C:\Users\hwm\AppData\Local\nsd24D2.tmp
2014-03-21 05:55 - 2014-03-19 08:36 - 00000000 _____ () C:\END
2014-03-19 08:36 - 2014-03-19 08:36 - 00000000 ____D () C:\Users\hwm\AppData\Local\SearchProtect
2014-03-18 09:56 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-18 01:00 - 2012-10-30 01:24 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{0B938386-96E1-440C-888B-AF774E0BF8E8}
2014-03-16 08:54 - 2012-05-25 11:54 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-13 02:57 - 2009-07-13 20:45 - 00291832 _____ () C:\Windows\System32\FNTCACHE.DAT
2014-03-13 02:49 - 2012-04-11 00:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-13 02:49 - 2012-04-11 00:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-13 02:49 - 2011-10-27 04:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 02:39 - 2014-03-10 06:16 - 00000000 ____D () C:\Users\hwm\Desktop\Bilder Regina
2014-03-04 09:51 - 2013-08-02 04:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-03-02 02:36 - 2009-07-13 21:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-28 22:05 - 2014-03-13 01:07 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-02-28 22:05 - 2014-03-13 01:07 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml(64).dll
2014-02-28 21:17 - 2014-03-13 01:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-02-28 21:16 - 2014-03-13 01:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-02-28 20:58 - 2014-03-13 01:08 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-02-28 20:52 - 2014-03-13 01:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-02-28 20:51 - 2014-03-13 01:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-02-28 20:42 - 2014-03-13 01:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-02-28 20:40 - 2014-03-13 01:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-02-28 20:37 - 2014-03-13 01:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-02-28 20:33 - 2014-03-13 01:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-02-28 20:33 - 2014-03-13 01:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-02-28 20:32 - 2014-03-13 01:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-02-28 20:30 - 2014-03-13 01:07 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-28 20:23 - 2014-03-13 01:07 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-02-28 20:17 - 2014-03-13 01:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-02-28 20:11 - 2014-03-13 01:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-28 20:02 - 2014-03-13 01:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-02-28 19:54 - 2014-03-13 01:07 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-02-28 19:52 - 2014-03-13 01:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-28 19:51 - 2014-03-13 01:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-28 19:47 - 2014-03-13 01:08 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-28 19:43 - 2014-03-13 01:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-28 19:43 - 2014-03-13 01:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-28 19:42 - 2014-03-13 01:07 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-02-28 19:40 - 2014-03-13 01:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-28 19:38 - 2014-03-13 01:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-28 19:37 - 2014-03-13 01:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-28 19:35 - 2014-03-13 01:07 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-02-28 19:18 - 2014-03-13 01:07 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-02-28 19:16 - 2014-03-13 01:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-28 19:14 - 2014-03-13 01:07 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-28 19:10 - 2014-03-13 01:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-02-28 19:03 - 2014-03-13 01:07 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-28 19:00 - 2014-03-13 01:07 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 18:57 - 2014-03-13 01:07 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 18:38 - 2014-03-13 01:07 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-02-28 18:32 - 2014-03-13 01:07 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 18:27 - 2014-03-13 01:07 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 18:25 - 2014-03-13 01:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-02-28 18:25 - 2014-03-13 01:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 08:39 - 2012-01-21 06:06 - 01596516 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 05:24 - 2010-11-20 19:47 - 00194780 _____ () C:\Windows\PFRO.log
2014-02-25 04:50 - 2014-02-25 04:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-25 04:50 - 2011-10-27 03:41 - 00000000 ____D () C:\ProgramData\Skype

Files to move or delete:
====================
C:\Users\hwm\JavaSetup7u7.exe


Some content of TEMP:
====================
C:\Users\hwm\AppData\Local\Temp\APNStub.exe
C:\Users\hwm\AppData\Local\Temp\AskSLib.dll
C:\Users\hwm\AppData\Local\Temp\avgnt.exe
C:\Users\hwm\AppData\Local\Temp\DivXInstaller.exe
C:\Users\hwm\AppData\Local\Temp\DivXSetup.exe
C:\Users\hwm\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\hwm\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\hwm\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe
C:\Users\hwm\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\hwm\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\hwm\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\hwm\AppData\Local\Temp\MSETUP4.EXE
C:\Users\hwm\AppData\Local\Temp\Setup.exe
C:\Users\hwm\AppData\Local\Temp\_isF23A.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2014-03-18 01:10:44
Restore point made on: 2014-03-18 10:21:24
Restore point made on: 2014-03-19 09:04:01
Restore point made on: 2014-03-19 09:39:32
Restore point made on: 2014-03-21 05:29:00
Restore point made on: 2014-03-21 05:57:29
Restore point made on: 2014-03-21 07:08:20
Restore point made on: 2014-03-21 07:30:55
Restore point made on: 2014-03-21 07:45:08
Restore point made on: 2014-03-21 13:25:31
Restore point made on: 2014-03-21 23:44:51
Restore point made on: 2014-03-22 05:28:35
Restore point made on: 2014-03-22 08:40:52
Restore point made on: 2014-03-22 08:58:58
Restore point made on: 2014-03-22 09:25:23
Restore point made on: 2014-03-22 10:57:01

==================== Memory info ===========================

Percentage of memory in use: 19%
Total physical RAM: 3764.86 MB
Available physical RAM: 3039.81 MB
Total Pagefile: 3763.06 MB
Available Pagefile: 3036.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:352.57 GB) NTFS
Drive e: (PQSERVICE) (Fixed) (Total:13 GB) (Free:0.81 GB) NTFS
Drive g: () (Removable) (Total:15.94 GB) (Free:15.94 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4368A231)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 16 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.


LastRegBack: 2014-03-22 07:17

==================== End Of Log ============================
--- --- ---

schrauber 24.03.2014 10:13
was nicht geklappt?

hhh666 24.03.2014 17:21
Mein Fehler. Das war nur eine Analyse des Problems richtig? Ich habe im Moment des Schreibens gedacht, es wäre ein Reparaturprogramm.

Sorry

schrauber 25.03.2014 12:05
genau :)

Downloade dir bitte Windows Repair (All In One) von hier.

hhh666 26.03.2014 21:36
:daumenhoc
Das Ding läuft wieder wie ne eins.

Kann ich das Programm auch "einfach so" über nen Rechner laufen lassen, der ein ziemlich langsames XP drauf hat?

schrauber 27.03.2014 12:32
Ja kannste machen. Sonst keine Probleme mehr?


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:57 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129