![]() |
|
Log-Analyse und Auswertung: Bundespolizei 100€ per paysafecard bezahlenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Bundespolizei 100€ per paysafecard bezahlen Hallo,ich hab ein großes Problem,ich habe einen Virus(wer hätte das gedacht). Und so passierte es: Ich habe mir ein Setup runtergeladen,als ich das Setup starten wollte,kam nichts.Ich dachte erst es sei ein Fehler und wollte es am nächsten Tag ausprobieren.danach spielte ich dann ein Spiel.Aber der Bildschirm leuchtete jede halbe Minute weiß auf,aber ich dachte mir nichts dabei.Nach etwa 5 min. kam ein "Bild" wo folgendes daraufstand ( es tut mir leid ich kann mich nicht mehr richtig daran erinnern) das die Bundespolizei herausgefunden hat das ich angeblich Kinderpornographische Dateinen/Videos gedownloaded hab( was ich wircklich nicht gatan habe ![]() ![]() Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-04-2013 (ATTENTION: FRST version is 8 days old) Ran by SYSTEM at 19-04-2013 06:52:19 Running from G:\ Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard The current controlset is ControlSet001 ==================== Registry (Whitelisted) =================== HKLM\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [41208 2012-12-19] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-03] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.) HKU\Chris\...\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent [x] HKU\Chris\...\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [x] HKU\Chris\...\Run: [Google Update] "C:\Users\Chris\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-07-11] (Google Inc.) HKU\Chris\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18672232 2013-02-28] (Skype Technologies S.A.) HKU\Chris\...\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent [1631144 2013-03-29] (Valve Corporation) HKU\Chris\...\Winlogon: [Shell] explorer.exe,C:\Users\Chris\AppData\Roaming\skype.dat [78848 2013-04-17] () AppInit_DLLs: c:\progra~3\pcperf~1\24897~1.175\{61d8b~1\pcpmngr.dll Tcpip\..\Interfaces\{B711C2F3-6708-4574-BC14-129418E3F5FF}: [NameServer]139.7.30.125 139.7.30.126 ==================== Services (Whitelisted) =================== 2 HPSLPSVC; C:\Users\Chris\AppData\Local\Temp\7zS35A5\hpslpsvc32.dll [701288 2012-08-23] (Hewlett-Packard Co.) 4 HssSrv; C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe [418672 2012-10-25] (AnchorFree Inc.) 4 HssWd; C:\Program Files\Hotspot Shield\bin\hsswd.exe [389488 2012-10-25] () 4 npggsvc; C:\Windows\system32\GameMon.des -service [3889424 2011-08-01] (INCA Internet Co., Ltd.) 4 PC Performer Manager; C:\ProgramData\PC Performer Manager\2.4.897.175\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\pcpmngr.exe [2400800 2012-11-02] () 3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [x] ==================== Drivers (Whitelisted) ==================== 3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.) 3 C2XXCOM; C:\Windows\System32\DRIVERS\C2XXCOM73.sys [38912 2010-08-09] (Samsung Electronics) 3 C2xxUSB; C:\Windows\System32\DRIVERS\C2xxUSB73.sys [36352 2010-11-04] (Samsung Electronics) 3 C2xxUsbStorage; C:\Windows\System32\DRIVERS\C2xSTR73.sys [6656 2010-06-10] (Samsung Electronics) 3 cm_ser; C:\Windows\System32\DRIVERS\cm_ser.sys [103680 2012-08-04] (C-motech Co.,Ltd.) 1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [35592 2012-10-25] (AnchorFree Inc.) 3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [110592 2009-04-09] (ZTE Corporation) 3 ZTEusbvoice; C:\Windows\System32\DRIVERS\ZTEusbvoice.sys [105344 2009-04-09] (ZTE Incorporated) 3 dump_wmimmc; \??\C:\AeriaGames\Wolfteam-DE\GameGuard\dump_wmimmc.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-04-18 19:17 - 2013-04-18 19:17 - 00000000 ____D C:\FRST 2013-04-17 21:34 - 2013-04-18 18:22 - 00000004 ____A C:\Users\Chris\AppData\Roaming\skype.ini 2013-04-17 21:28 - 2013-04-17 21:28 - 00054310 ____A C:\Users\Chris\Downloads\HD_video.zip 2013-04-17 21:28 - 2013-04-17 21:28 - 00054310 ____A C:\Users\Chris\Downloads\HD_video (1).zip 2013-04-17 21:25 - 2013-04-17 21:28 - 00078848 ___RA C:\Users\Chris\AppData\Roaming\skype.dat 2013-04-17 14:15 - 2013-04-17 14:15 - 00000224 ____A C:\Users\Chris\Desktop\Sid Meier's Civilization V (DirectX 11).url 2013-04-13 17:53 - 2013-04-13 17:53 - 00000000 ____D C:\Users\Chris\AppData\Local\My Games 2013-04-13 16:54 - 2013-04-13 17:02 - 00000214 ____A C:\Users\Chris\Desktop\Sid Meier's Civilization V.url 2013-04-13 16:03 - 2013-04-13 16:03 - 00007625 ____A C:\Users\Chris\AppData\Local\Resmon.ResmonCfg 2013-04-13 15:37 - 2013-04-18 18:21 - 00000000 ____D C:\Program Files\Steam 2013-04-13 15:37 - 2013-04-17 18:33 - 00000000 ____D C:\Program Files\Common Files\Steam 2013-04-13 15:37 - 2013-04-13 16:24 - 00000882 ____A C:\Users\Public\Desktop\Steam.lnk 2013-04-13 09:52 - 2013-04-13 09:52 - 00000000 ____D C:\Users\Chris\Desktop\stranded2 2013-04-13 09:50 - 2013-04-13 09:51 - 13629267 ____A C:\Users\Chris\Desktop\stranded2.zip 2013-04-13 09:44 - 2013-04-13 09:44 - 00392536 ____A (Softonic ) C:\Users\Chris\Downloads\SoftonicDownloader_fuer_stranded-ii.exe 2013-04-12 06:05 - 2013-04-12 06:05 - 00003496 ____N C:\bootsqm.dat 2013-04-11 13:19 - 2013-02-22 05:05 - 12324352 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-04-11 13:19 - 2013-02-22 04:47 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-04-11 13:19 - 2013-02-22 04:46 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-04-11 13:19 - 2013-02-22 04:38 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-04-11 13:19 - 2013-02-22 04:38 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-04-11 13:19 - 2013-02-22 04:37 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-04-11 13:19 - 2013-02-22 04:36 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-04-11 13:19 - 2013-02-22 04:35 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-04-11 13:19 - 2013-02-22 04:34 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-04-11 13:19 - 2013-02-22 04:34 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-04-11 13:19 - 2013-02-22 04:34 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-04-11 13:19 - 2013-02-22 04:33 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-04-11 13:19 - 2013-02-22 04:32 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-04-11 13:19 - 2013-02-22 04:31 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-04-11 13:19 - 2013-02-22 04:31 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-04-11 13:19 - 2013-02-22 04:28 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-04-10 17:15 - 2013-04-10 17:23 - 26329088 ____A (LG Electronics) C:\Users\Chris\Downloads\Nicht bestätigt 550420.crdownload 2013-04-10 14:28 - 2013-03-19 06:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe 2013-04-10 14:28 - 2013-03-19 06:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-04-10 14:28 - 2013-03-19 05:48 - 00038912 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll 2013-04-10 14:28 - 2013-03-19 03:49 - 00069632 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe 2013-04-10 14:28 - 2013-03-02 06:07 - 01212264 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys 2013-04-10 14:28 - 2013-03-01 04:09 - 02347008 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-04-10 14:28 - 2013-02-15 05:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll 2013-04-10 14:28 - 2013-02-15 05:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll 2013-04-10 14:28 - 2013-02-15 04:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll 2013-04-10 14:28 - 2013-01-24 05:47 - 00196328 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys 2013-04-08 19:19 - 2013-04-08 19:19 - 00001295 ____A C:\Users\Public\Desktop\Paint.NET.lnk 2013-04-08 19:18 - 2013-04-08 19:18 - 00000000 ____D C:\Program Files\Paint.NET 2013-04-08 19:17 - 2013-04-08 19:20 - 00000000 ____D C:\Users\Chris\AppData\Local\Paint.NET 2013-04-08 19:15 - 2013-04-08 19:16 - 03730109 ____A C:\Users\Chris\Downloads\Paint.NET.3.5.10.Install (1).zip 2013-04-08 19:05 - 2013-04-08 19:05 - 03730109 ____A C:\Users\Chris\Downloads\Paint.NET.3.5.10.Install.zip 2013-04-08 18:48 - 2013-04-08 18:48 - 00000000 ____D C:\Users\Chris\Documents\Aurora3D 2013-04-08 18:41 - 2013-04-08 18:41 - 00000000 ____D C:\Users\Chris\AppData\Local\Configure 2013-04-08 18:40 - 2013-04-08 18:41 - 00000000 ____D C:\Users\Chris\AppData\Local\Maker3D 2013-04-08 18:35 - 2013-04-08 18:35 - 00393080 ____A (Softonic ) C:\Users\Chris\Downloads\SoftonicDownloader_fuer_aurora-3d-text-logo-maker.exe 2013-04-06 21:09 - 2013-04-06 21:09 - 00000000 ___RD C:\Program Files\Skype 2013-04-06 21:09 - 2013-04-06 21:09 - 00000000 ____D C:\Program Files\Common Files\Skype 2013-04-06 21:06 - 2013-04-06 21:08 - 30646376 ____A (Skype Technologies S.A.) C:\Users\Chris\Downloads\SkypeSetupFull (1).exe 2013-03-31 10:45 - 2013-03-31 11:08 - 00000000 ____D C:\Program Files\Postal2STP 2013-03-29 14:18 - 2013-02-12 04:32 - 00015872 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys 2013-03-28 18:16 - 2013-04-13 15:00 - 00000000 ____D C:\Program Files\Kalypso 2013-03-27 20:19 - 2013-03-28 20:11 - 00000000 ____D C:\Users\Chris\Documents\SimCity Societies 2013-03-27 19:39 - 2013-04-13 15:22 - 00000000 ____D C:\Program Files\Electronic Arts 2013-03-23 16:00 - 2013-04-18 18:21 - 00001803 ____A C:\Windows\setupact.log 2013-03-23 16:00 - 2013-03-23 16:00 - 00000000 ____A C:\Windows\setuperr.log 2013-03-21 21:56 - 2013-03-21 21:56 - 00108605 ____A C:\Users\Chris\Downloads\688_End of the Line - Ready to Play.rar 2013-03-21 21:56 - 2013-03-21 21:56 - 00108605 ____A C:\Users\Chris\Downloads\688_End of the Line - Ready to Play (1).rar 2013-03-21 20:33 - 2013-03-21 20:33 - 04196616 ____A (Dll-Files.com ) C:\Users\Chris\Downloads\dffsetup-firewallinstallhelper.exe 2013-03-21 20:18 - 2013-03-24 21:20 - 00000000 ____D C:\Users\Chris\Documents\GTA San Andreas User Files 2013-03-21 18:13 - 2013-03-21 18:13 - 00000000 ___RD C:\Users\Chris\Documents\Notes 2013-03-21 17:31 - 2013-04-13 15:24 - 00000000 ____D C:\Program Files\Rockstar Games ==================== One Month Modified Files and Folders ======== 2013-04-18 19:17 - 2013-04-18 19:17 - 00000000 ____D C:\FRST 2013-04-18 18:22 - 2013-04-17 21:34 - 00000004 ____A C:\Users\Chris\AppData\Roaming\skype.ini 2013-04-18 18:21 - 2013-04-13 15:37 - 00000000 ____D C:\Program Files\Steam 2013-04-18 18:21 - 2013-03-23 16:00 - 00001803 ____A C:\Windows\setupact.log 2013-04-18 18:21 - 2009-07-14 05:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-04-18 18:03 - 2012-11-18 18:10 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-04-18 18:03 - 2012-09-18 18:52 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Skype 2013-04-18 18:03 - 2012-07-11 14:15 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3153247948-3028354880-3382878320-1000UA.job 2013-04-18 04:47 - 2012-11-17 19:19 - 00000376 ____A C:\Windows\Tasks\update-sys.job 2013-04-18 04:47 - 2012-11-17 19:19 - 00000376 ____A C:\Windows\Tasks\update-S-1-5-21-3153247948-3028354880-3382878320-1000.job 2013-04-17 23:39 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Microsoft Games 2013-04-17 21:59 - 2012-07-10 18:41 - 01286138 ____A C:\Windows\WindowsUpdate.log 2013-04-17 21:52 - 2010-11-20 22:01 - 01641884 ____A C:\Windows\System32\PerfStringBackup.INI 2013-04-17 21:43 - 2009-07-14 05:34 - 00027920 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-04-17 21:43 - 2009-07-14 05:34 - 00027920 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-04-17 21:28 - 2013-04-17 21:28 - 00054310 ____A C:\Users\Chris\Downloads\HD_video.zip 2013-04-17 21:28 - 2013-04-17 21:28 - 00054310 ____A C:\Users\Chris\Downloads\HD_video (1).zip 2013-04-17 21:28 - 2013-04-17 21:25 - 00078848 ___RA C:\Users\Chris\AppData\Roaming\skype.dat 2013-04-17 18:33 - 2013-04-13 15:37 - 00000000 ____D C:\Program Files\Common Files\Steam 2013-04-17 18:33 - 2012-07-10 18:51 - 00000000 ____D C:\users\Chris 2013-04-17 14:15 - 2013-04-17 14:15 - 00000224 ____A C:\Users\Chris\Desktop\Sid Meier's Civilization V (DirectX 11).url 2013-04-14 12:10 - 2012-07-11 14:15 - 00001068 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3153247948-3028354880-3382878320-1000Core.job 2013-04-13 17:53 - 2013-04-13 17:53 - 00000000 ____D C:\Users\Chris\AppData\Local\My Games 2013-04-13 17:53 - 2012-12-05 17:27 - 00000000 ____D C:\Users\Chris\Documents\My Games 2013-04-13 17:02 - 2013-04-13 16:54 - 00000214 ____A C:\Users\Chris\Desktop\Sid Meier's Civilization V.url 2013-04-13 16:24 - 2013-04-13 15:37 - 00000882 ____A C:\Users\Public\Desktop\Steam.lnk 2013-04-13 16:03 - 2013-04-13 16:03 - 00007625 ____A C:\Users\Chris\AppData\Local\Resmon.ResmonCfg 2013-04-13 15:24 - 2013-03-21 17:31 - 00000000 ____D C:\Program Files\Rockstar Games 2013-04-13 15:24 - 2012-07-12 17:15 - 00000000 ____D C:\Program Files\Common Files\InstallShield 2013-04-13 15:24 - 2012-07-12 17:09 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-04-13 15:22 - 2013-03-27 19:39 - 00000000 ____D C:\Program Files\Electronic Arts 2013-04-13 15:01 - 2013-02-19 15:08 - 00000000 ____D C:\Users\Chris\AppData\Local\Rockstar Games 2013-04-13 15:00 - 2013-03-28 18:16 - 00000000 ____D C:\Program Files\Kalypso 2013-04-13 09:52 - 2013-04-13 09:52 - 00000000 ____D C:\Users\Chris\Desktop\stranded2 2013-04-13 09:51 - 2013-04-13 09:50 - 13629267 ____A C:\Users\Chris\Desktop\stranded2.zip 2013-04-13 09:49 - 2009-07-14 03:37 - 00000000 ___RD C:\users\Public 2013-04-13 09:44 - 2013-04-13 09:44 - 00392536 ____A (Softonic ) C:\Users\Chris\Downloads\SoftonicDownloader_fuer_stranded-ii.exe 2013-04-12 06:06 - 2009-07-14 05:33 - 00327688 ____A C:\Windows\System32\FNTCACHE.DAT 2013-04-12 06:05 - 2013-04-12 06:05 - 00003496 ____N C:\bootsqm.dat 2013-04-11 13:16 - 2012-09-23 07:06 - 70490256 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-04-10 17:23 - 2013-04-10 17:15 - 26329088 ____A (LG Electronics) C:\Users\Chris\Downloads\Nicht bestätigt 550420.crdownload 2013-04-09 15:41 - 2013-01-08 15:11 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Tropico 3 2013-04-08 19:20 - 2013-04-08 19:17 - 00000000 ____D C:\Users\Chris\AppData\Local\Paint.NET 2013-04-08 19:19 - 2013-04-08 19:19 - 00001295 ____A C:\Users\Public\Desktop\Paint.NET.lnk 2013-04-08 19:18 - 2013-04-08 19:18 - 00000000 ____D C:\Program Files\Paint.NET 2013-04-08 19:16 - 2013-04-08 19:15 - 03730109 ____A C:\Users\Chris\Downloads\Paint.NET.3.5.10.Install (1).zip 2013-04-08 19:16 - 2012-07-10 19:09 - 00085080 ____A C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT 2013-04-08 19:05 - 2013-04-08 19:05 - 03730109 ____A C:\Users\Chris\Downloads\Paint.NET.3.5.10.Install.zip 2013-04-08 18:48 - 2013-04-08 18:48 - 00000000 ____D C:\Users\Chris\Documents\Aurora3D 2013-04-08 18:41 - 2013-04-08 18:41 - 00000000 ____D C:\Users\Chris\AppData\Local\Configure 2013-04-08 18:41 - 2013-04-08 18:40 - 00000000 ____D C:\Users\Chris\AppData\Local\Maker3D 2013-04-08 18:35 - 2013-04-08 18:35 - 00393080 ____A (Softonic ) C:\Users\Chris\Downloads\SoftonicDownloader_fuer_aurora-3d-text-logo-maker.exe 2013-04-06 21:09 - 2013-04-06 21:09 - 00000000 ___RD C:\Program Files\Skype 2013-04-06 21:09 - 2013-04-06 21:09 - 00000000 ____D C:\Program Files\Common Files\Skype 2013-04-06 21:09 - 2012-09-18 18:52 - 00000000 ____D C:\ProgramData\Skype 2013-04-06 21:08 - 2013-04-06 21:06 - 30646376 ____A (Skype Technologies S.A.) C:\Users\Chris\Downloads\SkypeSetupFull (1).exe 2013-03-31 11:08 - 2013-03-31 10:45 - 00000000 ____D C:\Program Files\Postal2STP 2013-03-31 08:07 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\DriverStore 2013-03-29 09:48 - 2013-02-16 16:37 - 00000000 ____D C:\Windows\rescache 2013-03-28 20:11 - 2013-03-27 20:19 - 00000000 ____D C:\Users\Chris\Documents\SimCity Societies 2013-03-27 20:02 - 2012-10-20 18:38 - 00322568 ____A C:\Windows\DirectX.log 2013-03-27 19:37 - 2013-03-12 15:15 - 00000000 ____D C:\Users\Chris\Documents\Battlefield 2142 2013-03-24 21:20 - 2013-03-21 20:18 - 00000000 ____D C:\Users\Chris\Documents\GTA San Andreas User Files 2013-03-23 16:00 - 2013-03-23 16:00 - 00000000 ____A C:\Windows\setuperr.log 2013-03-23 15:55 - 2013-03-12 16:01 - 00001620 ____A C:\Windows\DXError.log 2013-03-21 21:56 - 2013-03-21 21:56 - 00108605 ____A C:\Users\Chris\Downloads\688_End of the Line - Ready to Play.rar 2013-03-21 21:56 - 2013-03-21 21:56 - 00108605 ____A C:\Users\Chris\Downloads\688_End of the Line - Ready to Play (1).rar 2013-03-21 20:50 - 2012-11-05 16:32 - 00000000 ____D C:\Windows\Minidump 2013-03-21 20:33 - 2013-03-21 20:33 - 04196616 ____A (Dll-Files.com ) C:\Users\Chris\Downloads\dffsetup-firewallinstallhelper.exe 2013-03-21 19:03 - 2010-11-20 22:48 - 00051708 ____A C:\Windows\PFRO.log 2013-03-21 18:13 - 2013-03-21 18:13 - 00000000 ___RD C:\Users\Chris\Documents\Notes 2013-03-21 17:34 - 2013-03-15 18:32 - 00000000 ____D C:\Program Files\Firefly Studios 2013-03-21 17:04 - 2009-07-14 05:53 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT ==================== Known DLLs (Whitelisted) ================= ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= ==================== Memory info =========================== Percentage of memory in use: 13% Total physical RAM: 3000.87 MB Available physical RAM: 2593.8 MB Total Pagefile: 2999.16 MB Available Pagefile: 2596.91 MB Total Virtual: 2047.88 MB Available Virtual: 1951.54 MB ==================== Partitions ============================= 1 Drive c: (Windows) (Fixed) (Total:58.97 GB) (Free:7.31 GB) NTFS ==>[Drive with boot components (obtained from BCD)] 2 Drive d: (Dateien) (Fixed) (Total:73.24 GB) (Free:70.87 GB) NTFS 3 Drive e: (BACKUP) (Fixed) (Total:16.83 GB) (Free:16.83 GB) FAT32 4 Drive f: (Civ5) (CDROM) (Total:3.02 GB) (Free:0 GB) UDF 5 Drive g: () (Removable) (Total:3.71 GB) (Free:3.71 GB) FAT32 6 Drive h: (o_tel_o) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS 8 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Datentr„ger ### Status Gr”áe Frei Dyn GPT --------------- ------------- ------- ------- --- --- Datentr„ger 0 Online 149 GB 0 B Datentr„ger 1 Online 3810 MB 0 B Datentr„ger 2 Kein Medium 0 B 0 B Partitions of Disk 0: =============== Datentr„ger-ID: FD5DFD5D Partition ### Typ Gr”áe Offset ------------- ---------------- ------- ------- Partition 1 Prim„r 58 GB 31 KB Partition 0 Erweitert 90 GB 58 GB Partition 2 Logisch 73 GB 58 GB Partition 3 Logisch 16 GB 132 GB ========================================================= Disk: 0 Partition 1 Typ : 07 Versteckt: Nein Aktiv : Ja Volume ### Bst Bezeichnung DS Typ Gr”áe Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 2 C Windows NTFS Partition 58 GB Fehlerfre ========================================================= Disk: 0 Partition 2 Typ : 07 Versteckt: Nein Aktiv : Nein Volume ### Bst Bezeichnung DS Typ Gr”áe Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 3 D Dateien NTFS Partition 73 GB Fehlerfre ========================================================= Disk: 0 Partition 3 Typ : 0B Versteckt: Nein Aktiv : Nein Volume ### Bst Bezeichnung DS Typ Gr”áe Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 4 E BACKUP FAT32 Partition 16 GB Fehlerfre ========================================================= Partitions of Disk 1: =============== Datentr„ger-ID: 00000000 Partition ### Typ Gr”áe Offset ------------- ---------------- ------- ------- Partition 1 Prim„r 3809 MB 564 KB ========================================================= Disk: 1 Partition 1 Typ : 0B Versteckt: Nein Aktiv : Nein Volume ### Bst Bezeichnung DS Typ Gr”áe Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 5 G FAT32 Wechselmed 3809 MB Fehlerfre ========================================================= ============================== MBR Partition Table ================== ============================== Partitions of Disk 0: =============== Disk ID: FD5DFD5D Partition 1: ========= Hex: 8001010007FEFFFF3F00000053075F07 Active: YES Type: 07 (NTFS) Size: 59 GB Partition 2: ========= Hex: 0000C1FF0FFEFFFF92075F072F83420B Active: NO Type: OF (Extended) Size: 90 GB ============================== Partitions of Disk 1: =============== Disk ID: 00000000 Partition 1: ========= Hex: 00113A000B4FCFC768040000980B7700 Active: NO Type: 0B Size: 4 GB Last Boot: 2013-03-29 09:43 ==================== End Of Log ============================ Bitte Helft mir ![]() Geändert von chris98 (19.04.2013 um 15:58 Uhr) |
Themen zu Bundespolizei 100€ per paysafecard bezahlen |
100€ bezahle, 32 bit, adobe, adobe flash player, association, attention, bildschirm, bundespolizei trojaner entfernen, dateien, desktop, farbar, farbar recovery scan tool, fehler, flash player, google, home, hotspot, installation, internet, microsoft, neu, paysafe, performer, problem, registry, scan, services.exe, starten, stick, svchost.exe, system, temp, trojaner, virus, winlogon, winlogon.exe |