Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: GVU Trojaner auf Win 8 Laptop

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 25.07.2013, 13:52   #1
rk123
 
GVU Trojaner auf Win 8 Laptop - Standard

GVU Trojaner auf Win 8 Laptop



Hallo Liebes Team,

ich habe mir auch den GVU Trojaner eingefangen und brauche dringend Hilfe. Habe es bisher nicht geschafft in den abgesicherten Modus zu gelangen.

Hier das Log-File von Fabar's Recovery-Tool:


Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-07-2013
Ran by SYSTEM on 24-07-2013 10:25:51
Running from D:\
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-13] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcui_exe] - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [68776 2012-08-17] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-08-07] (cyberlink)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [mcpltui_exe] - "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui [299648 2012-07-24] (McAfee, Inc.)
HKLM-x32\...\Run: [Ferret Gaming Mouse] - "C:\Program Files (x86)\SPEEDLINK Ferret Gaming Mouse\GMouse.exe" /hide [1310720 2010-06-14] ()
HKU\Ronald\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4272624 2013-02-05] (Microsoft Corporation)
HKU\Ronald\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Ronald\AppData\Local\Temp\kyflaxcdyucxcymlg.exe [71680 2013-07-24] (Cisco Systems, Inc.) <===== ATTENTION
HKU\Ronald\...\Winlogon: [Shell] cmd.exe [404992 2012-07-26] (Microsoft Corporation) <==== ATTENTION 
HKU\Ronald\...\Command Processor: "C:\Users\Ronald\AppData\Local\Temp\kyflaxcdyucxcymlg.exe" <===== ATTENTION!

==================== Services (Whitelisted) =================

S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [243728 2012-06-29] (CyberLink)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [332080 2012-01-26] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McOobeSv2; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.)
S2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.)
S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
S2 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2769552 2013-05-09] (McAfee, Inc.)
S2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1266336 2012-07-24] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
S2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros)

==================== Drivers (Whitelisted) ====================

S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-08-20] (Advanced Micro Devices)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-13] (Qualcomm Atheros)
S3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-08-13] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69168 2013-02-19] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.)
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated)
S3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 mfeapfk01; No ImagePath
S3 mfeavfk01; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-24 10:20 - 2013-07-24 10:20 - 00000000 ____D C:\FRST
2013-07-24 00:33 - 2013-07-24 00:33 - 01084734 _____ C:\Users\Ronald\AppData\Local\2433f433
2013-07-24 00:33 - 2013-07-24 00:33 - 01084711 _____ C:\Users\Ronald\AppData\Roaming\2433f433
2013-07-24 00:33 - 2013-07-24 00:33 - 01084708 _____ C:\ProgramData\2433f433
2013-07-20 21:52 - 2013-07-20 21:52 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-07-20 14:36 - 2013-07-20 14:36 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Windows Live Writer
2013-07-20 14:36 - 2013-07-20 14:36 - 00000000 ____D C:\Users\Ronald\AppData\Local\Windows Live Writer
2013-07-20 14:35 - 2013-07-23 17:07 - 00000000 ____D C:\Users\Ronald\Tracing
2013-07-20 14:33 - 2013-07-20 14:33 - 00000000 ____D C:\Windows\de
2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Program Files\Windows Live
2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-20 14:31 - 2010-06-02 03:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-07-20 14:31 - 2010-06-02 03:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll
2013-07-20 14:31 - 2010-06-02 03:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll
2013-07-20 14:31 - 2010-06-02 03:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-07-20 14:31 - 2010-05-26 10:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll
2013-07-20 14:31 - 2010-05-26 10:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-07-20 14:31 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll
2013-07-20 14:31 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-07-20 14:31 - 2009-09-04 16:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll
2013-07-20 14:31 - 2009-09-04 16:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-07-20 14:30 - 2013-07-23 17:07 - 00000000 ____D C:\Users\Ronald\AppData\Local\Windows Live
2013-07-20 14:30 - 2013-07-20 14:30 - 00000000 ___RD C:\Users\Ronald\SkyDrive
2013-07-20 14:30 - 2013-07-20 14:30 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-07-20 14:30 - 2013-07-20 14:30 - 00000000 ____D C:\Program Files (x86)\Microsoft SkyDrive
2013-07-20 14:30 - 2006-11-29 12:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll
2013-07-20 14:30 - 2006-11-29 12:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-07-19 15:24 - 2013-07-19 15:24 - 00281944 _____ C:\Windows\System32\FNTCACHE.DAT
2013-07-17 15:17 - 2013-06-01 12:54 - 00194816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2013-07-17 15:17 - 2013-06-01 12:54 - 00125184 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2013-07-17 15:17 - 2013-06-01 12:34 - 02391280 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-07-17 15:17 - 2013-06-01 12:33 - 02233600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-07-17 15:17 - 2013-06-01 12:29 - 00337152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS
2013-07-17 15:17 - 2013-06-01 12:29 - 00213248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS
2013-07-17 15:17 - 2013-06-01 12:26 - 06987008 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-07-17 15:17 - 2013-06-01 12:26 - 00327936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\volsnap.sys
2013-07-17 15:17 - 2013-06-01 11:24 - 02106176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-07-17 15:17 - 2013-06-01 10:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-07-17 15:17 - 2013-06-01 10:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2013-07-17 15:17 - 2013-06-01 10:24 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2013-07-17 15:17 - 2013-06-01 10:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2013-07-17 15:17 - 2013-06-01 10:24 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2013-07-17 15:17 - 2013-06-01 10:23 - 01842176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2013-07-17 15:17 - 2013-06-01 10:23 - 00680960 _____ (Microsoft Corporation) C:\Windows\System32\vds.exe
2013-07-17 15:17 - 2013-06-01 10:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-07-17 15:17 - 2013-06-01 10:22 - 00446976 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-07-17 15:17 - 2013-06-01 10:22 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\vdsutil.dll
2013-07-17 15:17 - 2013-06-01 10:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\MbaeParserTask.exe
2013-07-17 15:17 - 2013-06-01 10:21 - 00729600 _____ (Microsoft Corporation) C:\Windows\System32\samsrv.dll
2013-07-17 15:17 - 2013-06-01 10:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\System32\samlib.dll
2013-07-17 15:17 - 2013-06-01 10:20 - 02219520 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll
2013-07-17 15:17 - 2013-06-01 10:20 - 01527808 _____ (Microsoft Corporation) C:\Windows\System32\mfcore.dll
2013-07-17 15:17 - 2013-06-01 10:20 - 01048576 _____ (Microsoft Corporation) C:\Windows\System32\mfasfsrcsnk.dll
2013-07-17 15:17 - 2013-06-01 10:20 - 00583168 _____ (Microsoft Corporation) C:\Windows\System32\mscms.dll
2013-07-17 15:17 - 2013-06-01 10:19 - 00785408 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2013-07-17 15:17 - 2013-06-01 10:19 - 00207872 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupManager.dll
2013-07-17 15:17 - 2013-06-01 04:08 - 00037632 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\BthAvrcpTg.sys
2013-07-17 15:17 - 2013-05-24 23:09 - 01403296 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-07-17 15:17 - 2013-05-24 23:09 - 01271584 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-07-17 15:17 - 2013-05-24 23:09 - 01217352 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-07-17 15:17 - 2013-05-24 23:09 - 01093904 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-07-17 15:17 - 2013-05-20 01:08 - 00386642 _____ C:\Windows\System32\ApnDatabase.xml
2013-07-17 15:16 - 2013-06-16 23:41 - 00997632 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2013-07-17 15:16 - 2012-11-20 06:24 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2013-07-17 15:16 - 2012-11-20 06:17 - 01184256 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll
2013-07-17 15:16 - 2012-11-20 06:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDKURD.DLL
2013-07-17 15:16 - 2012-11-20 05:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDKURD.DLL
2013-07-17 15:16 - 2012-11-08 05:25 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-07-17 15:16 - 2012-11-08 05:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-07-17 15:16 - 2012-11-08 05:25 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 15:16 - 2012-11-08 05:22 - 00641536 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2013-07-17 15:16 - 2012-11-08 05:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll
2013-07-17 15:16 - 2012-11-08 05:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 15:16 - 2012-10-02 08:34 - 00068608 _____ (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-07-17 15:15 - 2012-11-06 08:52 - 00277736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msiscsi.sys
2013-07-17 15:15 - 2012-11-06 08:33 - 01566432 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll
2013-07-17 15:15 - 2012-11-06 05:48 - 01150160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2013-07-17 15:15 - 2012-11-06 05:20 - 00883712 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2013-07-17 15:15 - 2012-11-06 05:20 - 00516608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-07-17 15:15 - 2012-11-06 05:20 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2013-07-17 15:15 - 2012-11-06 05:20 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2013-07-17 15:15 - 2012-11-06 05:20 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\rdpclip.exe
2013-07-17 15:15 - 2012-11-06 05:20 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2013-07-17 15:15 - 2012-11-06 05:20 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2013-07-17 15:15 - 2012-11-06 05:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 08552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\System32\wlansvc.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00710656 _____ (Microsoft Corporation) C:\Windows\System32\winhttp.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00470016 _____ (Microsoft Corporation) C:\Windows\System32\wlanmsm.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00466944 _____ (Microsoft Corporation) C:\Windows\System32\wcncsvc.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00446464 _____ (Microsoft Corporation) C:\Windows\System32\wlansec.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00273408 _____ (Microsoft Corporation) C:\Windows\System32\wlanapi.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00126976 _____ (Microsoft Corporation) C:\Windows\System32\WcnApi.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\wfdprov.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00027136 _____ (Microsoft Corporation) C:\Windows\System32\WcnEapPeerProxy.dll
2013-07-17 15:15 - 2012-11-06 05:19 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\WcnEapAuthProxy.dll
2013-07-17 15:15 - 2012-11-06 05:18 - 11459584 _____ (Microsoft Corporation) C:\Windows\System32\glcndFilter.dll
2013-07-17 15:15 - 2012-11-06 05:18 - 01037312 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-07-17 15:15 - 2012-11-06 05:18 - 00976384 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-07-17 15:15 - 2012-11-06 05:18 - 00189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2013-07-17 15:15 - 2012-11-06 05:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\System32\MFCaptureEngine.dll
2013-07-17 15:15 - 2012-11-06 05:18 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\fdWCN.dll
2013-07-17 15:15 - 2012-11-06 05:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2013-07-17 15:15 - 2012-11-06 05:17 - 00212992 _____ (Microsoft Corporation) C:\Windows\System32\bthprops.cpl
2013-07-17 15:15 - 2012-11-06 05:17 - 00110080 _____ (Microsoft Corporation) C:\Windows\System32\dafWCN.dll
2013-07-17 15:15 - 2012-11-06 05:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\iscsilog.dll
2013-07-17 15:15 - 2012-11-06 04:58 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\wlanhlp.dll
2013-07-17 15:15 - 2012-11-06 04:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2013-07-17 15:15 - 2012-11-06 04:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdk8.sys
2013-07-17 15:15 - 2012-11-06 04:55 - 00089088 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelppm.sys
2013-07-17 15:15 - 2012-11-06 04:55 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdppm.sys
2013-07-17 15:15 - 2012-11-06 04:55 - 00087552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\processr.sys
2013-07-17 15:15 - 2012-11-06 04:55 - 00022528 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fxppm.sys
2013-07-17 15:15 - 2012-11-06 04:53 - 00560640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-07-17 15:15 - 2012-11-06 04:51 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-07-17 15:15 - 2012-10-24 05:54 - 00396008 _____ (Microsoft Corporation) C:\Windows\System32\hal.dll
2013-07-17 15:15 - 2012-10-17 05:32 - 01172992 _____ (Microsoft Corporation) C:\Windows\System32\mfnetsrc.dll
2013-07-17 15:15 - 2012-10-17 05:32 - 00677888 _____ (Microsoft Corporation) C:\Windows\System32\mfnetcore.dll
2013-07-17 15:15 - 2012-10-17 05:32 - 00673280 _____ (Microsoft Corporation) C:\Windows\System32\mfmpeg2srcsnk.dll
2013-07-17 15:15 - 2012-10-17 04:57 - 00929792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2013-07-17 15:15 - 2012-10-17 04:57 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2013-07-17 15:15 - 2012-10-17 04:57 - 00513024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2013-07-17 15:15 - 2012-10-12 07:13 - 00109568 _____ (Microsoft Corporation) C:\Windows\System32\dskquota.dll
2013-07-17 15:15 - 2012-10-12 06:39 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquota.dll
2013-07-17 15:14 - 2012-10-11 08:47 - 00793200 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll
2013-07-17 15:14 - 2012-10-11 08:25 - 00056552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdstor.sys
2013-07-17 15:14 - 2012-10-11 08:23 - 00441576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2013-07-17 15:14 - 2012-10-11 08:18 - 00172264 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-07-17 15:14 - 2012-10-11 08:13 - 00058088 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys
2013-07-17 15:14 - 2012-10-11 08:13 - 00033512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\battc.sys
2013-07-17 15:14 - 2012-10-11 08:08 - 00562392 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-07-17 15:14 - 2012-10-11 06:46 - 01395712 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Immersive.dll
2013-07-17 15:14 - 2012-10-11 06:46 - 00517120 _____ (Microsoft Corporation) C:\Windows\System32\winlogon.exe
2013-07-17 15:14 - 2012-10-11 06:46 - 00154112 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Storage.Compression.dll
2013-07-17 15:14 - 2012-10-11 06:45 - 01045504 _____ (Microsoft Corporation) C:\Windows\System32\usercpl.dll
2013-07-17 15:14 - 2012-10-11 06:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\System32\SHCore.dll
2013-07-17 15:14 - 2012-10-11 06:45 - 00579584 _____ (Microsoft Corporation) C:\Windows\System32\StructuredQuery.dll
2013-07-17 15:14 - 2012-10-11 06:45 - 00505344 _____ (Microsoft Corporation) C:\Windows\System32\SpaceControl.dll
2013-07-17 15:14 - 2012-10-11 06:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\System32\SysFxUI.dll
2013-07-17 15:14 - 2012-10-11 06:44 - 01265152 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-07-17 15:14 - 2012-10-11 06:44 - 00904192 _____ (Microsoft Corporation) C:\Windows\System32\MPSSVC.dll
2013-07-17 15:14 - 2012-10-11 06:44 - 00355328 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll
2013-07-17 15:14 - 2012-10-11 06:44 - 00264704 _____ (Microsoft Corporation) C:\Windows\System32\ListSvc.dll
2013-07-17 15:14 - 2012-10-11 06:44 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\input.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 01280000 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 00757760 _____ (Microsoft Corporation) C:\Windows\System32\FirewallAPI.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 00331776 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcore.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 00244224 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\bdesvc.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 00118784 _____ (Microsoft Corporation) C:\Windows\System32\AppxSip.dll
2013-07-17 15:14 - 2012-10-11 06:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll
2013-07-17 15:14 - 2012-10-11 06:42 - 00612416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2013-07-17 15:14 - 2012-10-11 06:23 - 00034816 _____ (Microsoft Corporation) C:\Windows\System32\microsoft-windows-pdc.dll
2013-07-17 15:14 - 2012-10-11 06:16 - 00286208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\portcls.sys
2013-07-17 15:14 - 2012-10-11 06:07 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2013-07-17 15:14 - 2012-10-11 06:07 - 00962560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2013-07-17 15:14 - 2012-10-11 06:07 - 00460800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2013-07-17 15:14 - 2012-10-11 06:07 - 00414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2013-07-17 15:14 - 2012-10-11 06:07 - 00116224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Compression.dll
2013-07-17 15:14 - 2012-10-11 06:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
2013-07-17 15:14 - 2012-10-11 06:06 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2013-07-17 15:14 - 2012-10-11 06:06 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-07-17 15:14 - 2012-10-11 06:06 - 00270336 _____ (Microsoft Co-15 19:53 - 2013-07-15 19:53 - 00000117 _____ C:\Windows\System32\netcfg-271078671.txt
2013-07-15 18:20 - 2013-07-15 18:20 - 00000117 _____ C:\Windows\System32\netcfg-265491890.txt
2013-07-14 21:47 - 2013-07-14 21:47 - 00000117 _____ C:\Windows\System32\netcfg-191537140.txt
2013-07-14 21:47 - 2013-07-14 21:47 - 00000117 _____ C:\Windows\System32\netcfg-191531359.txt
2013-07-14 21:47 - 2013-07-14 21:47 - 00000117 _____ C:\Windows\System32\netcfg-191528578.txt
2013-07-14 15:13 - 2013-07-14 15:13 - 00000117 _____ C:\Windows\System32\netcfg-167891562.txt
2013-07-14 15:12 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System32\NDF
2013-07-13 23:28 - 2013-07-13 23:28 - 00000117 _____ C:\Windows\System32\netcfg-111179046.txt
2013-07-13 23:28 - 2013-07-13 23:28 - 00000117 _____ C:\Windows\System32\netcfg-111152406.txt
2013-07-13 23:28 - 2013-07-13 23:28 - 00000117 _____ C:\Windows\System32\netcfg-111151656.txt
2013-07-13 21:39 - 2013-07-13 21:39 - 00000117 _____ C:\Windows\System32\netcfg-104641031.txt
2013-07-13 14:24 - 2013-07-13 14:24 - 00000117 _____ C:\Windows\System32\netcfg-78565781.txt
2013-07-13 13:09 - 2013-07-13 13:09 - 00000117 _____ C:\Windows\System32\netcfg-74065625.txt
2013-07-13 13:09 - 2013-07-13 13:09 - 00000117 _____ C:\Windows\System32\netcfg-74064640.txt
2013-07-13 13:09 - 2013-07-13 13:09 - 00000117 _____ C:\Windows\System32\netcfg-74058171.txt
2013-07-13 12:55 - 2013-07-13 12:55 - 00000117 _____ C:\Windows\System32\netcfg-73187906.txt
2013-07-13 12:20 - 2013-07-13 12:19 - 00000000 ____D C:\Program Files (x86)\SPEEDLINK Ferret Gaming Mouse
2013-07-13 12:16 - 2013-07-13 12:16 - 00000117 _____ C:\Windows\System32\netcfg-70840062.txt
2013-07-13 12:16 - 2013-07-13 12:16 - 00000117 _____ C:\Windows\System32\netcfg-70837015.txt
2013-07-12 20:41 - 2013-07-12 20:41 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-12 20:41 - 2013-07-12 20:41 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-07-12 18:39 - 2013-07-12 18:39 - 00000117 _____ C:\Windows\System32\netcfg-7440531.txt
2013-07-12 18:39 - 2013-07-12 18:39 - 00000117 _____ C:\Windows\System32\netcfg-7439281.txt
2013-07-12 17:46 - 2013-07-12 17:46 - 00001857 _____ C:\Users\Ronald\Desktop\UseNeXT by Tangysoft.lnk
2013-07-12 17:46 - 2013-07-12 17:46 - 00000000 ____D C:\Program Files (x86)\UseNeXT
2013-07-12 16:51 - 2013-07-12 16:51 - 00000355 _____ C:\Users\Ronald\Desktop\Computer - Verknüpfung.lnk
2013-07-12 16:51 - 2013-07-12 16:51 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Macromedia
2013-07-12 16:49 - 2013-07-12 16:49 - 00001103 _____ C:\Users\Ronald\Desktop\Dokumente - Verknüpfung.lnk
2013-07-12 16:49 - 2013-07-12 16:49 - 00001092 _____ C:\Users\Ronald\Desktop\Bilder - Verknüpfung.lnk
2013-07-12 16:49 - 2013-07-12 16:49 - 00001082 _____ C:\Users\Ronald\Desktop\Videos - Verknüpfung.lnk
2013-07-12 16:49 - 2013-07-12 16:49 - 00001075 _____ C:\Users\Ronald\Desktop\Musik - Verknüpfung.lnk
2013-07-12 16:49 - 2013-07-12 16:49 - 00000000 ____D C:\Users\Ronald\AppData\Local\Sony Corporation
2013-07-12 16:48 - 2013-07-12 16:45 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Sony Corporation
2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\Documents\Bluetooth Folder
2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\ATI
2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Atheros
2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Local\BMExplorer
2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Local\ATI
2013-07-12 16:47 - 2012-10-20 07:36 - 00000000 ____D C:\ProgramData\Atheros
2013-07-12 16:45 - 2013-07-12 16:45 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Adobe
2013-07-12 16:45 - 2013-07-12 16:45 - 00000000 ____D C:\Users\Ronald\AppData\Local\Power2Go8
2013-07-12 16:45 - 2013-07-10 10:00 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-07-12 16:44 - 2013-07-12 16:44 - 00000020 ___SH C:\Users\Ronald\ntuser.ini
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Vorlagen
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Startmenü
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Netzwerkumgebung
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Lokale Einstellungen
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Eigene Dateien
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Druckumgebung
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Documents\Eigene Musik
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Documents\Eigene Bilder
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\AppData\Local\Verlauf
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\AppData\Local\Anwendungsdaten
2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Anwendungsdaten
2013-07-12 16:43 - 2013-07-12 16:43 - 00000117 _____ C:\Windows\System32\netcfg-483843.txt
2013-07-12 16:43 - 2013-07-12 16:43 - 00000117 _____ C:\Windows\System32\netcfg-480812.txt
2013-07-12 16:42 - 2013-07-12 16:42 - 00000117 _____ C:\Windows\System32\netcfg-400015.txt
2013-07-10 10:51 - 2013-07-10 10:51 - 00000117 _____ C:\Windows\System32\netcfg-742390.txt
2013-07-10 10:51 - 2012-07-26 09:13 - 00003604 _____ C:\Windows\DtcInstall.log
2013-07-10 10:40 - 2013-07-10 10:40 - 00000117 _____ C:\Windows\System32\netcfg-53156.txt
2013-07-10 10:40 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\System32\Sysprep
2013-07-10 10:32 - 2013-07-10 10:32 - 00000117 _____ C:\Windows\System32\netcfg-492921.txt
2013-07-10 10:31 - 2013-07-10 09:58 - 00000000 ____D C:\users\test
2013-07-10 10:29 - 2012-07-26 09:13 - 00262144 _____ C:\Windows\System32\config\BCD-Template
2013-07-10 10:25 - 2013-07-10 10:24 - 00000117 _____ C:\Windows\System32\netcfg-55171.txt
2013-07-10 10:20 - 2013-07-10 10:20 - 00000117 _____ C:\Windows\System32\netcfg-2527656.txt
2013-07-10 10:18 - 2013-07-10 10:05 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-420498432-2417053039-3911193342-1001
2013-07-10 10:00 - 2012-10-20 06:29 - 00000000 ____D C:\Windows\System32\Tasks\SONY
2013-07-10 10:00 - 2012-10-20 06:15 - 00000000 ____D C:\Windows\System32\Tasks\Sony Corporation
2013-07-10 09:59 - 2013-07-10 09:59 - 00000000 ____D C:\Windows\SysWOW64\VAIO Startup Setting Tool
2013-07-10 09:59 - 2013-07-10 09:59 - 00000000 ____D C:\Windows\pss
2013-07-10 09:59 - 2012-10-20 06:50 - 00000000 ____D C:\Program Files\Sony
2013-07-10 09:57 - 2013-07-10 09:57 - 00000117 _____ C:\Windows\System32\netcfg-1177890.txt
2013-07-10 09:57 - 2013-07-10 09:57 - 00000117 _____ C:\Windows\System32\netcfg-1171781.txt
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Programme
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-07-10 09:38 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows NT
2013-07-10 09:38 - 2012-07-26 06:37 - 00000000 __RHD C:\users\Default
2013-06-27 23:04 - 2012-07-26 09:14 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-27 23:04 - 2012-07-26 09:14 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-07-17 15:17] - [2013-06-01 12:34] - 2391280 ____A (Microsoft Corporation) 0E8E6463F81C80AFBED533E0F1F8895D

C:\Windows\SysWOW64\explorer.exe
[2013-07-17 15:17] - [2013-06-01 11:24] - 2106176 ____A (Microsoft Corporation) EAFE46B0292D2BD2467835E2ACF717CC

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2013-07-17 15:17] - [2013-06-01 12:26] - 0327936 ____A (Microsoft Corporation) 78A5BBA3819FFFC62FFEC3E2220D102D


==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 10%
Total physical RAM: 8139.27 MB
Available physical RAM: 7289.38 MB
Total Pagefile: 8139.27 MB
Available Pagefile: 7308.29 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:901.66 GB) (Free:856.94 GB) NTFS
Drive d: () (Removable) (Total:0.48 GB) (Free:0.47 GB) FAT32 (Disk=1 Partition=1)
Drive f: () (Removable) (Total:0.94 GB) (Free:0.93 GB) FAT32 (Disk=2 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.25 GB) (Free:0.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 258605E9)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 490 MB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=490 MB) - (Type=0B)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 960 MB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=960 MB) - (Type=0B)


LastRegBack: 2013-07-22 20:33

==================== End Of Log ============================
         

Erbitte dann weitere Anweisungen.

Danke

 

Themen zu GVU Trojaner auf Win 8 Laptop
adobe, association, computer, defender, desktop, dringend, explorer, farbar, farbar recovery scan tool, frst.txt, gvu trojaner, home, ics, log-file, messenger, micro, microsoft, musik, realtek, registry, server, service.exe, services.exe, sony vaio, svchost.exe, system, temp, trojaner, usenext, windows 8, windows xp, winlogon, wlan




Ähnliche Themen: GVU Trojaner auf Win 8 Laptop


  1. Laptop läuft langsam Win 7, Rechtsklick mit Maus funktioniert nicht, Laptop zickt rum.
    Plagegeister aller Art und deren Bekämpfung - 18.01.2015 (11)
  2. Lollipop Virus auf Laptop , Laptop wird immer Langsamer! Deinstellieren fehlerhaft
    Log-Analyse und Auswertung - 03.02.2014 (3)
  3. GVU-Trojaner auf dem Laptop
    Plagegeister aller Art und deren Bekämpfung - 24.07.2013 (9)
  4. GVU Trojaner auf XP Laptop
    Plagegeister aller Art und deren Bekämpfung - 05.03.2013 (1)
  5. GVU-Trojaner - Win XP - Laptop
    Plagegeister aller Art und deren Bekämpfung - 01.03.2013 (7)
  6. GVU Trojaner auf Laptop mit WIN XP
    Plagegeister aller Art und deren Bekämpfung - 28.02.2013 (15)
  7. GVU Trojaner auf Laptop, Wix XP SP3
    Plagegeister aller Art und deren Bekämpfung - 26.02.2013 (27)
  8. GVU Virus auf Laptop, Laie braucht dringend Hilfe, wie OTL auf verseuchten Laptop bringen?
    Plagegeister aller Art und deren Bekämpfung - 19.02.2013 (21)
  9. GUV Trojaner am Laptop
    Plagegeister aller Art und deren Bekämpfung - 16.01.2013 (7)
  10. SUISA-Trojaner (Verschlüsselungs-Trojaner) befall auf HP-Pro-Laptop Win7 64Bit
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (19)
  11. Trojaner auf dem Laptop
    Plagegeister aller Art und deren Bekämpfung - 05.09.2012 (26)
  12. BKA Trojaner 1.07 auf Laptop! was nun?
    Log-Analyse und Auswertung - 29.06.2012 (2)
  13. BKA Trojaner Laptop
    Plagegeister aller Art und deren Bekämpfung - 11.08.2011 (2)
  14. TAN-Trojaner auf Laptop
    Log-Analyse und Auswertung - 04.05.2011 (7)
  15. TAN-Trojaner auf altem Laptop - Datenübertragung auf neuen Laptop?
    Plagegeister aller Art und deren Bekämpfung - 12.09.2010 (5)
  16. Trojaner auf dem Laptop
    Plagegeister aller Art und deren Bekämpfung - 21.04.2009 (5)
  17. Trojaner auf dem Laptop :-(
    Log-Analyse und Auswertung - 07.06.2005 (1)

Zum Thema GVU Trojaner auf Win 8 Laptop - Hallo Liebes Team, ich habe mir auch den GVU Trojaner eingefangen und brauche dringend Hilfe. Habe es bisher nicht geschafft in den abgesicherten Modus zu gelangen. Hier das Log-File von - GVU Trojaner auf Win 8 Laptop...
Archiv
Du betrachtest: GVU Trojaner auf Win 8 Laptop auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.