Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: BKA Trojaner - kein Abgesicherter Modus - kein Internet

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 27.03.2013, 14:12   #1
Retrogamer
 
BKA Trojaner - kein Abgesicherter Modus - kein Internet - Standard

BKA Trojaner - kein Abgesicherter Modus - kein Internet



Hallo, mein Bruder brachte mir seinen Rechner mit den Worten, da ist der BKA Trojaner drauf. Nun soll ich das Problem beseitigen.

Normaler Systemstart: Weißer Screen im Vordergrund, man kommt nicht an den Desktop ran.
Abgesicherter Modus: Sofortiger Systemneustart nach Bootvorgang
HitmanPro: Bootet, findet dann kein Internet, obwohl Netzwerkkabel angeschlossen ist.

Eventuell könnt ihr mir ja helfen.

Habe hier mal mit der OTLPENet.exe einen Scan erstellt.

OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 3/27/2013 3:22:05 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files
Drive C: | 100.00 Mb Total Space | 65.85 Mb Free Space | 65.85% Space Free | Partition Type: NTFS
Drive E: | 900.41 Gb Total Space | 652.39 Gb Free Space | 72.45% Space Free | Partition Type: NTFS
Drive F: | 30.00 Gb Total Space | 19.17 Gb Free Space | 63.88% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [On_Demand] --  -- (Winmgmt)
SRV - File not found [Disabled] --  -- (Browser Manager)
SRV - [2013/03/27 08:09:04 | 000,106,280 | ---- | M] (SurfRight B.V.) [Auto] -- E:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler)
SRV - [2013/03/13 01:04:31 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- E:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/11/15 18:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- E:\Program Files\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/10/22 08:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- E:\Program Files\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
SRV - [2012/01/18 08:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand] -- E:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011/06/08 07:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand] -- E:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011/02/18 07:08:18 | 001,517,376 | ---- | M] (TuneUp Software) [Auto] -- E:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011/02/18 07:05:52 | 000,029,504 | ---- | M] (TuneUp Software) [Auto] -- E:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2010/01/08 09:23:58 | 000,303,104 | ---- | M] (Wistron Corporation) [Auto] -- E:\Program Files\RemoteKeySrv\RemoteKeySrv.exe -- (RemoteKeySrv)
SRV - [2009/12/09 13:02:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto] -- E:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2009/11/06 22:46:52 | 000,020,480 | ---- | M] (X10) [Auto] -- E:\Program Files\Common Files\X10\Common\X10nets.exe -- (x10nets)
SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- E:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto] -- E:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/07/01 13:03:12 | 000,582,944 | ---- | M] (Broadcom Corporation.) [Auto] -- E:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2009/02/03 09:53:00 | 001,155,072 | ---- | M] (MAGIX AG) [Disabled] -- E:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2008/08/07 05:10:02 | 003,276,800 | ---- | M] (MAGIX®) [Disabled] -- E:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2007/07/24 06:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto] -- E:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (lgbusenum)
DRV - [2013/03/27 08:38:41 | 000,030,616 | ---- | M] () [Kernel | On_Demand] -- E:\Windows\System32\drivers\hitmanpro37.sys -- (hitmanpro37)
DRV - [2012/11/15 18:33:26 | 000,094,048 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- E:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2012/10/22 08:02:46 | 000,179,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System] -- E:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2012/10/14 22:48:52 | 000,055,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot] -- E:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/10/01 22:30:38 | 000,159,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- E:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/09/20 22:46:06 | 000,164,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- E:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/09/20 22:46:00 | 000,177,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot] -- E:\Windows\System32\drivers\avglogx.sys -- (Avglogx)
DRV - [2012/09/20 22:45:54 | 000,019,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System] -- E:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2012/09/13 22:05:20 | 000,035,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- E:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/05/18 04:12:38 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand] -- E:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011/05/18 04:12:36 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand] -- E:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011/05/18 04:12:32 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand] -- E:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2011/05/18 04:12:28 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand] -- E:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010/12/23 12:35:02 | 000,025,088 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\lgandmodem.sys -- (ANDModem)
DRV - [2010/12/23 12:35:00 | 000,020,736 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\lganddiag.sys -- (AndDiag)
DRV - [2010/12/23 12:35:00 | 000,020,096 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\lgandgps.sys -- (AndGps)
DRV - [2010/12/23 12:35:00 | 000,014,336 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\lgandbus.sys -- (Andbus)
DRV - [2010/11/29 13:27:40 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand] -- E:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2010/11/20 06:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 05:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/01/07 04:05:26 | 000,182,304 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- E:\Windows\System32\Drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009/12/22 08:43:16 | 001,558,368 | ---- | M] (NXP Semiconductors Germany GmbH) [Kernel | On_Demand] -- E:\Windows\System32\drivers\NxpCap.sys -- (NxpCap)
DRV - [2009/12/16 05:14:14 | 000,991,776 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- E:\Windows\System32\drivers\rtl8192se.sys -- (rtl8192se)
DRV - [2009/12/03 06:26:22 | 009,941,512 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/10/29 06:20:40 | 000,010,360 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand] -- E:\Windows\system32\DRIVERS\hidkmdf.sys -- (hidkmdf)
DRV - [2009/10/29 06:20:38 | 000,022,392 | ---- | M] () [Kernel | On_Demand] -- E:\Windows\system32\DRIVERS\NW1950.sys -- (NW1950)
DRV - [2009/10/13 08:03:28 | 000,067,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2009/10/05 05:08:42 | 000,065,584 | ---- | M] (Citrix Systems, Inc.) [Kernel | System] -- E:\Windows\System32\drivers\ctxusbm.sys -- (ctxusbm)
DRV - [2009/07/01 07:46:20 | 000,043,944 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\btusbflt.sys -- (btusbflt)
DRV - [2009/05/13 07:47:30 | 000,027,160 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\Drivers\x10ufx2.sys -- (XUIF)
DRV - [2009/05/13 07:26:26 | 000,013,720 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\Drivers\x10hid.sys -- (X10Hid)
DRV - [2008/08/26 04:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- E:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007/02/15 20:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2005/12/08 09:33:40 | 000,004,096 | ---- | M] (Wistron) [Kernel | On_Demand] -- E:\Program Files\RemoteKeySrv\GENPORT.sys -- (genport)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010000&st=18&barid={0CFFAE64-DC8A-11E0-999D-1C4BD60BB893}
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - E:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - E:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: E:\Windows\System32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: E:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: E:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: E:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: E:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: E:\Program Files\Virtual Earth 3D\ [2010/01/08 06:06:16 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: E:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: E:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: E:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: E:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2011/09/11 12:04:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011/09/11 12:04:17 | 000,000,000 | ---D | M]
 
[2012/11/03 15:00:49 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files\Mozilla Firefox\extensions
[2010/09/28 12:14:06 | 000,002,040 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicde.xml
 
O1 HOSTS File: ([2009/06/10 17:39:37 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts
O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - E:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
O2 - BHO: (Claro LTD Helper Object) - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - E:\Program Files\Claro LTD\claro\1.8.3.10\bh\claro.dll (Montera Technologeis LTD)
O2 - BHO: (Savings Sidekick) - {11111111-1111-1111-1111-110011501160} - E:\Program Files\Savings Sidekick\Savings Sidekick.dll (215 Apps)
O2 - BHO: (HistoryTriggerBHO Class) - {21A88CB9-84D2-4020-A2D1-B25A21034884} - E:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - E:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - E:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - E:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - E:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - E:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - E:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - E:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Claro LTD Toolbar) - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - E:\Program Files\Claro LTD\claro\1.8.3.10\claroTlbr.dll (Montera Technologeis LTD)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - E:\Program Files\IEPro\IEProRecorder.dll ()
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - E:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AgentMonitor] E:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe ()
O4 - HKLM..\Run: [AVG_UI] E:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CloneCDTray] E:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [ConnectionCenter] E:\Program Files\Citrix\ICA Client\concentr.exe (Citrix Systems, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] E:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVBg] E:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Sweetpacks Communicator] E:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [WinampAgent] E:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKLM..\Run: [WireLessKeyboard]  File not found
O4 - HKLM..\Run: [WireLessMouse]  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - E:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - E:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - E:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - E:\Program Files\IEPro\IEPro.dll (IE7Pro.com)
O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} -  File not found
O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} -  File not found
O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - Reg Error: Key error. File not found
O18 - Protocol\Filter\application/x-ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - E:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - E:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\24897~1.175\{61d8b~1\browse~1.dll) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\youpaint.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/03/27 08:09:03 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
[2013/03/27 08:09:03 | 000,000,000 | ---D | C] -- E:\Program Files\HitmanPro
[2013/03/27 08:06:31 | 000,000,000 | ---D | C] -- E:\ProgramData\HitmanPro
[2013/03/25 05:03:32 | 000,000,000 | ---D | C] -- E:\Program Files\Klett
[2013/03/20 15:46:11 | 000,015,872 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\drivers\usb8023.sys
[2013/03/14 17:37:31 | 002,382,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\mshtml.tlb
[2013/03/14 17:37:31 | 000,420,864 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\vbscript.dll
[2013/03/14 17:37:30 | 000,607,744 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msfeeds.dll
[2013/03/14 17:37:30 | 000,176,640 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieui.dll
[2013/03/14 17:37:30 | 000,142,848 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\ieUnatt.exe
[2013/03/14 17:37:30 | 000,065,024 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jsproxy.dll
[2013/03/14 17:37:29 | 001,800,704 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript9.dll
[2013/03/14 17:37:29 | 000,717,824 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\jscript.dll
[2013/03/14 17:37:29 | 000,231,936 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\url.dll
[2013/03/14 17:37:28 | 001,427,968 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\inetcpl.cpl
[2013/03/08 03:49:00 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2013/02/27 02:03:33 | 000,187,392 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\UIAnimation.dll
[2013/02/27 02:03:31 | 000,417,792 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\WMPhoto.dll
[2013/02/27 02:03:30 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/02/27 02:03:30 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/02/27 02:03:30 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/02/27 02:03:29 | 002,284,544 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\msmpeg2vdec.dll
[2013/02/27 02:03:29 | 001,988,096 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d10warp.dll
[2013/02/27 02:03:29 | 000,364,544 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XpsGdiConverter.dll
[2013/02/27 02:03:29 | 000,293,376 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\dxgi.dll
[2013/02/27 02:03:29 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/02/27 02:03:29 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/02/27 02:03:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/02/27 02:03:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/02/27 02:03:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/02/27 02:03:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- E:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/02/27 02:03:28 | 001,504,768 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d11.dll
[2013/02/27 02:03:28 | 001,247,744 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\DWrite.dll
[2013/02/27 02:03:28 | 001,158,144 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\XpsPrint.dll
[2013/02/27 02:03:28 | 001,080,832 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d10.dll
[2013/02/27 02:03:28 | 000,604,160 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d10level9.dll
[2013/02/27 02:03:28 | 000,249,856 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d10_1core.dll
[2013/02/27 02:03:28 | 000,220,160 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d10core.dll
[2013/02/27 02:03:28 | 000,207,872 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\WindowsCodecsExt.dll
[2013/02/27 02:03:28 | 000,161,792 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d3d10_1.dll
[2013/02/27 02:03:27 | 003,419,136 | ---- | C] (Microsoft Corporation) -- E:\Windows\System32\d2d1.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013/03/27 08:48:37 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat
[2013/03/27 08:44:41 | 000,001,112 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/03/27 08:40:38 | 000,009,696 | ---- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/03/27 08:40:38 | 000,009,696 | ---- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/03/27 08:38:41 | 000,030,616 | ---- | M] () -- E:\Windows\System32\drivers\hitmanpro37.sys
[2013/03/27 08:33:28 | 2414,432,256 | -HS- | M] () -- E:\hiberfil.sys
[2013/03/27 08:28:11 | 354,688,689 | ---- | M] () -- E:\Windows\MEMORY.DMP
[2013/03/27 08:16:42 | 000,001,913 | ---- | M] () -- E:\Users\Public\Desktop\HitmanPro.lnk
[2013/03/27 08:09:04 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
[2013/03/27 08:04:16 | 000,000,884 | ---- | M] () -- E:\Windows\tasks\Adobe Flash Player Updater.job
[2013/03/27 08:04:11 | 000,001,160 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3929648755-4095274106-2058949298-1000UA.job
[2013/03/27 05:14:00 | 000,001,116 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/03/25 05:04:45 | 000,001,053 | ---- | M] () -- E:\Users\Public\Desktop\Kunterbunt 1.lnk
[2013/03/23 02:04:00 | 000,001,108 | ---- | M] () -- E:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3929648755-4095274106-2058949298-1000Core.job
[2013/03/22 08:49:35 | 000,000,900 | -HS- | M] () -- E:\ProgramData\KGyGaAvL.sys
[2013/03/14 17:38:39 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/03/13 01:04:16 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerApp.exe
[2013/03/13 01:04:15 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/03/08 03:49:00 | 000,000,955 | ---- | M] () -- E:\Users\Public\Desktop\AVG 2013.lnk
[2013/03/08 03:49:00 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
 
========== Files Created - No Company Name ==========
 
[2013/03/27 08:38:41 | 000,030,616 | ---- | C] () -- E:\Windows\System32\drivers\hitmanpro37.sys
[2013/03/27 08:09:04 | 000,001,913 | ---- | C] () -- E:\Users\Public\Desktop\HitmanPro.lnk
[2013/03/27 08:08:17 | 354,688,689 | ---- | C] () -- E:\Windows\MEMORY.DMP
[2013/03/25 05:04:45 | 000,001,053 | ---- | C] () -- E:\Users\Public\Desktop\Kunterbunt 1.lnk
[2012/12/22 19:29:53 | 095,023,320 | ---- | C] () -- E:\ProgramData\dsgsdgdsgdsgw.pad
[2012/12/08 10:34:27 | 000,000,041 | -HS- | C] () -- E:\ProgramData\.zreglib
[2012/08/16 18:34:59 | 004,503,728 | ---- | C] () -- E:\ProgramData\23lldnur.pad
[2012/08/16 18:18:41 | 004,503,728 | ---- | C] () -- E:\ProgramData\ism_0_llatsni.pad
[2011/07/03 04:13:49 | 000,252,928 | ---- | C] () -- E:\Windows\System32\DShowRdpFilter.dll
[2010/11/28 11:14:11 | 000,000,900 | -HS- | C] () -- E:\ProgramData\KGyGaAvL.sys
[2010/11/28 11:05:13 | 000,087,040 | ---- | C] () -- E:\Windows\System32\TrayIcon12.dll
[2010/11/28 11:05:13 | 000,061,952 | ---- | C] () -- E:\Windows\System32\ajnetmask.dll
[2010/10/04 19:59:32 | 000,005,632 | ---- | C] () -- E:\Windows\System32\StarOpen.sys
[2010/01/09 11:00:58 | 000,120,200 | ---- | C] () -- E:\Windows\System32\DLLDEV32i.dll
[2010/01/08 04:39:19 | 000,451,072 | ---- | C] () -- E:\Windows\System32\ISSRemoveSP.exe
[2010/01/08 04:05:02 | 000,149,504 | ---- | C] () -- E:\Windows\unwise32_setup.exe
[2010/01/08 04:05:02 | 000,127,184 | ---- | C] () -- E:\Windows\Unwise.exe
[2010/01/08 04:04:11 | 000,073,728 | ---- | C] () -- E:\Windows\System32\RtNicProp32.dll
[2010/01/08 03:57:53 | 000,013,224 | ---- | C] () -- E:\Windows\System32\drivers\RtPCEE3.DAT
[2010/01/07 04:22:31 | 000,007,648 | ---- | C] () -- E:\Windows\System32\716xCoInstaller.dll
[2010/01/07 04:22:31 | 000,000,480 | ---- | C] () -- E:\Windows\11317231_001416BE_ca.bin
[2010/01/07 04:22:31 | 000,000,480 | ---- | C] () -- E:\Windows\11317231_001316BE_ca.bin
[2010/01/07 04:22:31 | 000,000,480 | ---- | C] () -- E:\Windows\11317231_001216BE_ca.bin
[2009/12/02 18:50:04 | 000,041,808 | ---- | C] () -- E:\Windows\System32\nvcoproc.bin
[2009/12/02 18:50:00 | 000,330,344 | ---- | C] () -- E:\Windows\System32\easyUpdatusAPIU.dll
[2009/10/29 06:20:42 | 008,824,824 | ---- | C] () -- E:\Windows\System32\drivers\NWTransLib.sys
[2009/10/29 06:20:38 | 000,022,392 | ---- | C] () -- E:\Windows\System32\drivers\NW1950.sys
[2009/08/03 10:07:42 | 000,403,816 | ---- | C] () -- E:\Windows\System32\OGACheckControl.dll
[2009/08/03 10:07:42 | 000,230,768 | ---- | C] () -- E:\Windows\System32\OGAEXEC.exe
[2009/07/14 04:47:43 | 000,654,150 | ---- | C] () -- E:\Windows\System32\perfh007.dat
[2009/07/14 04:47:43 | 000,295,922 | ---- | C] () -- E:\Windows\System32\perfi007.dat
[2009/07/14 04:47:43 | 000,130,022 | ---- | C] () -- E:\Windows\System32\perfc007.dat
[2009/07/14 04:47:43 | 000,038,104 | ---- | C] () -- E:\Windows\System32\perfd007.dat
[2009/07/14 00:57:37 | 000,067,584 | --S- | C] () -- E:\Windows\bootstat.dat
[2009/07/14 00:33:53 | 000,384,936 | ---- | C] () -- E:\Windows\System32\FNTCACHE.DAT
[2009/07/13 22:05:48 | 000,616,032 | ---- | C] () -- E:\Windows\System32\perfh009.dat
[2009/07/13 22:05:48 | 000,291,294 | ---- | C] () -- E:\Windows\System32\perfi009.dat
[2009/07/13 22:05:48 | 000,106,412 | ---- | C] () -- E:\Windows\System32\perfc009.dat
[2009/07/13 22:05:48 | 000,031,548 | ---- | C] () -- E:\Windows\System32\perfd009.dat
[2009/07/13 22:05:05 | 000,000,741 | ---- | C] () -- E:\Windows\System32\NOISE.DAT
[2009/07/13 22:04:11 | 000,215,943 | ---- | C] () -- E:\Windows\System32\dssec.dat
[2009/07/13 19:55:01 | 000,043,131 | ---- | C] () -- E:\Windows\mib.bin
[2009/07/13 19:51:43 | 000,073,728 | ---- | C] () -- E:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- E:\Windows\System32\BWContextHandler.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- E:\Windows\System32\mlang.dat
 
========== LOP Check ==========
 
[2010/01/09 11:01:15 | 000,000,000 | ---D | M] -- E:\ProgramData\ALDI Foto Service
[2010/01/09 11:02:04 | 000,000,000 | ---D | M] -- E:\ProgramData\ALDI Nord Foto Service
[2010/01/09 11:03:21 | 000,000,000 | ---D | M] -- E:\ProgramData\Aldi Nord Fotoservice
[2010/11/28 09:08:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Anwendungsdaten
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- E:\ProgramData\Application Data
[2010/01/08 06:06:25 | 000,000,000 | ---D | M] -- E:\ProgramData\Applications
[2011/10/25 04:40:46 | 000,000,000 | ---D | M] -- E:\ProgramData\Ask
[2013/01/19 12:19:40 | 000,000,000 | ---D | M] -- E:\ProgramData\AVG2013
[2012/11/03 15:00:37 | 000,000,000 | ---D | M] -- E:\ProgramData\Babylon
[2010/11/28 10:03:44 | 000,000,000 | -H-D | M] -- E:\ProgramData\CanonBJ
[2010/12/07 05:41:47 | 000,000,000 | -H-D | M] -- E:\ProgramData\CanonIJScan
[2011/02/17 08:55:25 | 000,000,000 | ---D | M] -- E:\ProgramData\Citrix
[2012/05/04 11:56:25 | 000,000,000 | -H-D | M] -- E:\ProgramData\Common Files
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- E:\ProgramData\Desktop
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- E:\ProgramData\Documents
[2010/11/28 09:08:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Dokumente
[2011/09/11 10:34:25 | 000,000,000 | ---D | M] -- E:\ProgramData\DriverBoost
[2010/11/28 09:08:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Favoriten
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- E:\ProgramData\Favorites
[2013/03/27 08:38:41 | 000,000,000 | ---D | M] -- E:\ProgramData\HitmanPro
[2012/11/03 15:00:36 | 000,000,000 | ---D | M] -- E:\ProgramData\IBUpdaterService
[2011/08/28 06:15:33 | 000,000,000 | ---D | M] -- E:\ProgramData\IM
[2011/08/28 06:14:36 | 000,000,000 | ---D | M] -- E:\ProgramData\IncrediMail
[2011/09/11 08:59:06 | 000,000,000 | ---D | M] -- E:\ProgramData\Installations
[2010/09/28 03:44:35 | 000,000,000 | ---D | M] -- E:\ProgramData\MAGIX
[2013/03/27 05:02:39 | 000,000,000 | ---D | M] -- E:\ProgramData\MFAData
[2011/09/11 12:02:37 | 000,000,000 | ---D | M] -- E:\ProgramData\NokiaInstallerCache
[2011/09/11 09:12:52 | 000,000,000 | ---D | M] -- E:\ProgramData\PC Suite
[2012/09/06 10:45:27 | 000,000,000 | ---D | M] -- E:\ProgramData\RavensburgerTipToi
[2012/12/25 09:21:01 | 000,000,000 | ---D | M] -- E:\ProgramData\Sony
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- E:\ProgramData\Start Menu
[2010/11/28 09:08:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Startmenü
[2012/06/10 04:20:38 | 000,000,000 | ---D | M] -- E:\ProgramData\SweetIM
[2012/10/31 10:06:45 | 000,000,000 | ---D | M] -- E:\ProgramData\Temp
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- E:\ProgramData\Templates
[2012/04/06 05:37:54 | 000,000,000 | ---D | M] -- E:\ProgramData\TuneUp Software
[2010/11/28 09:08:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Vorlagen
[2012/07/14 10:12:28 | 000,000,000 | ---D | M] -- E:\ProgramData\VTech
[2010/12/18 05:55:22 | 000,000,000 | ---D | M] -- E:\ProgramData\WinZip
[2011/11/16 13:09:57 | 000,000,000 | ---D | M] -- E:\ProgramData\X10 Settings
[2012/04/06 05:32:03 | 000,000,000 | -HSD | M] -- E:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2012/03/16 15:32:58 | 000,000,000 | -HSD | M] -- E:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2010/01/08 06:40:20 | 000,000,000 | ---D | M] -- E:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[2012/03/16 15:19:19 | 000,000,000 | ---D | M] -- E:\ProgramData\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2013/01/19 07:42:46 | 000,000,000 | -HSD | M] -- E:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
[2012/11/06 00:57:52 | 000,000,000 | ---D | M] -- E:\ProgramData\~Browser Manager
[2013/03/02 02:41:31 | 000,032,632 | ---- | M] () -- E:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 24 bytes -> E:\Windows:71471DA5CCD27382
@Alternate Data Stream - 133 bytes -> E:\ProgramData\Temp:0B4227B4
< End of report >
         
--- --- ---

Geändert von Retrogamer (27.03.2013 um 14:24 Uhr)

 

Themen zu BKA Trojaner - kein Abgesicherter Modus - kein Internet
autorun, avg, bho, browser, browser manager, defender, desktop, downloader, ebay, error, firefox, flash player, format, helper, home, internet, kein internet, logfile, monitor, monitor.exe, object, plug-in, preferences, problem, realtek, registry, scan, software, sweetpacks, trojaner




Ähnliche Themen: BKA Trojaner - kein Abgesicherter Modus - kein Internet


  1. Windows 7 32 Bit: Kein abgesicherter Modus, Kein Avast möglich, WIN-Update streikt USW.
    Plagegeister aller Art und deren Bekämpfung - 30.06.2015 (16)
  2. GVU Trojaner kein abgesicherter Modus möglich
    Plagegeister aller Art und deren Bekämpfung - 08.11.2014 (3)
  3. GVU Trojaner - Win7 - kein abgesicherter Modus
    Log-Analyse und Auswertung - 22.09.2013 (9)
  4. GVU Trojaner Windows 7, kein Abgesicherter Modus
    Log-Analyse und Auswertung - 03.09.2013 (19)
  5. Weißer Bildschirm nach Anmeldung, kein abgesicherter Modus, kein Taskmanager
    Log-Analyse und Auswertung - 09.07.2013 (13)
  6. GVU Trojaner kein Zugriff via Abgesicherter Modus
    Plagegeister aller Art und deren Bekämpfung - 17.05.2013 (15)
  7. Bundespolizei, Trojaner, Windows XP, Kein Taskmanager, kein abgesicherter Modus
    Log-Analyse und Auswertung - 14.04.2013 (20)
  8. GVU-Trojaner-win-xp-100-euro-kein-abgesicherter-modus
    Log-Analyse und Auswertung - 27.03.2013 (5)
  9. GemaTrojaner auf Mini Compaq mit XP, kein CD Rom Laufwerk, kein abgesicherter Modus
    Log-Analyse und Auswertung - 17.03.2013 (33)
  10. GVU Trojaner Windows 7 64 Bit kein Abgesicherter Modus
    Plagegeister aller Art und deren Bekämpfung - 24.02.2013 (4)
  11. Shell wird immer zurückgesetzt, kein Login, kein Abgesicherter Modus | Virus OTL Log
    Log-Analyse und Auswertung - 29.12.2012 (0)
  12. BKA Trojaner - Kein abgesicherter Modus
    Plagegeister aller Art und deren Bekämpfung - 19.12.2012 (11)
  13. BKA-Virus: Kein Internet, kein abgesicherter Modus, keine Systemwiederherstellung möglich
    Plagegeister aller Art und deren Bekämpfung - 14.11.2012 (40)
  14. Bundespolizei Trojaner Hilfe gesucht, kein abgesicherter Modus, kein CD Laufwerk...
    Plagegeister aller Art und deren Bekämpfung - 14.12.2011 (1)
  15. kein admin und kein abgesicherter modus mehr
    Plagegeister aller Art und deren Bekämpfung - 28.04.2010 (2)
  16. Kein Antiviren-Programm und auch kein abgesicherter Modus mehr möglich
    Log-Analyse und Auswertung - 12.02.2007 (1)
  17. HILFE! Kein abgesicherter Modus/kein Internet???!!!
    Plagegeister aller Art und deren Bekämpfung - 07.10.2004 (8)

Zum Thema BKA Trojaner - kein Abgesicherter Modus - kein Internet - Hallo, mein Bruder brachte mir seinen Rechner mit den Worten, da ist der BKA Trojaner drauf. Nun soll ich das Problem beseitigen. Normaler Systemstart: Weißer Screen im Vordergrund, man kommt - BKA Trojaner - kein Abgesicherter Modus - kein Internet...
Archiv
Du betrachtest: BKA Trojaner - kein Abgesicherter Modus - kein Internet auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.