![]() |
|
Log-Analyse und Auswertung: GVU Trojaner auf Win 8 LaptopWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() GVU Trojaner auf Win 8 Laptop Hallo Liebes Team, ich habe mir auch den GVU Trojaner eingefangen und brauche dringend Hilfe. Habe es bisher nicht geschafft in den abgesicherten Modus zu gelangen. Hier das Log-File von Fabar's Recovery-Tool: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-07-2013 Ran by SYSTEM on 24-07-2013 10:25:51 Running from D:\ Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [BtPreLoad] - C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-13] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [mcui_exe] - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey [1532992 2013-03-13] (McAfee, Inc.) HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [68776 2012-08-17] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [35736 2010-11-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - "c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [932288 2010-11-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-08-07] (cyberlink) HKLM-x32\...\Run: [Intel AppUp(SM) center] - "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [152896 2012-06-25] (Intel Corporation) HKLM-x32\...\Run: [mcpltui_exe] - "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui [299648 2012-07-24] (McAfee, Inc.) HKLM-x32\...\Run: [Ferret Gaming Mouse] - "C:\Program Files (x86)\SPEEDLINK Ferret Gaming Mouse\GMouse.exe" /hide [1310720 2010-06-14] () HKU\Ronald\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4272624 2013-02-05] (Microsoft Corporation) HKU\Ronald\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Ronald\AppData\Local\Temp\kyflaxcdyucxcymlg.exe [71680 2013-07-24] (Cisco Systems, Inc.) <===== ATTENTION HKU\Ronald\...\Winlogon: [Shell] cmd.exe [404992 2012-07-26] (Microsoft Corporation) <==== ATTENTION HKU\Ronald\...\Command Processor: "C:\Users\Ronald\AppData\Local\Temp\kyflaxcdyucxcymlg.exe" <===== ATTENTION! ==================== Services (Whitelisted) ================= S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations) S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [243728 2012-06-29] (CyberLink) S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation) S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [332080 2012-01-26] (McAfee, Inc.) S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S2 McOobeSv2; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.) S2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.) S2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [220856 2012-07-24] (McAfee, Inc.) S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.) S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.) S2 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2769552 2013-05-09] (McAfee, Inc.) S2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.) S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation) S2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation) S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1266336 2012-07-24] (Sony Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation) S2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) ==================== Drivers (Whitelisted) ==================== S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-08-20] (Advanced Micro Devices) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-13] (Qualcomm Atheros) S3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-08-13] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.) S1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.) S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.) S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69168 2013-02-19] (McAfee, Inc.) S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.) S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.) S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.) S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated) S3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation) S3 mfeapfk01; No ImagePath S3 mfeavfk01; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-24 10:20 - 2013-07-24 10:20 - 00000000 ____D C:\FRST 2013-07-24 00:33 - 2013-07-24 00:33 - 01084734 _____ C:\Users\Ronald\AppData\Local\2433f433 2013-07-24 00:33 - 2013-07-24 00:33 - 01084711 _____ C:\Users\Ronald\AppData\Roaming\2433f433 2013-07-24 00:33 - 2013-07-24 00:33 - 01084708 _____ C:\ProgramData\2433f433 2013-07-20 21:52 - 2013-07-20 21:52 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-07-20 14:36 - 2013-07-20 14:36 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Windows Live Writer 2013-07-20 14:36 - 2013-07-20 14:36 - 00000000 ____D C:\Users\Ronald\AppData\Local\Windows Live Writer 2013-07-20 14:35 - 2013-07-23 17:07 - 00000000 ____D C:\Users\Ronald\Tracing 2013-07-20 14:33 - 2013-07-20 14:33 - 00000000 ____D C:\Windows\de 2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Windows\PCHEALTH 2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Program Files\Windows Live 2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-07-20 14:32 - 2013-07-20 14:32 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-07-20 14:31 - 2010-06-02 03:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2013-07-20 14:31 - 2010-06-02 03:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll 2013-07-20 14:31 - 2010-06-02 03:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll 2013-07-20 14:31 - 2010-06-02 03:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2013-07-20 14:31 - 2010-05-26 10:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll 2013-07-20 14:31 - 2010-05-26 10:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2013-07-20 14:31 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll 2013-07-20 14:31 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2013-07-20 14:31 - 2009-09-04 16:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll 2013-07-20 14:31 - 2009-09-04 16:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2013-07-20 14:30 - 2013-07-23 17:07 - 00000000 ____D C:\Users\Ronald\AppData\Local\Windows Live 2013-07-20 14:30 - 2013-07-20 14:30 - 00000000 ___RD C:\Users\Ronald\SkyDrive 2013-07-20 14:30 - 2013-07-20 14:30 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive 2013-07-20 14:30 - 2013-07-20 14:30 - 00000000 ____D C:\Program Files (x86)\Microsoft SkyDrive 2013-07-20 14:30 - 2006-11-29 12:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll 2013-07-20 14:30 - 2006-11-29 12:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2013-07-19 15:24 - 2013-07-19 15:24 - 00281944 _____ C:\Windows\System32\FNTCACHE.DAT 2013-07-17 15:17 - 2013-06-01 12:54 - 00194816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys 2013-07-17 15:17 - 2013-06-01 12:54 - 00125184 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys 2013-07-17 15:17 - 2013-06-01 12:34 - 02391280 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2013-07-17 15:17 - 2013-06-01 12:33 - 02233600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-07-17 15:17 - 2013-06-01 12:29 - 00337152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS 2013-07-17 15:17 - 2013-06-01 12:29 - 00213248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS 2013-07-17 15:17 - 2013-06-01 12:26 - 06987008 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-07-17 15:17 - 2013-06-01 12:26 - 00327936 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\volsnap.sys 2013-07-17 15:17 - 2013-06-01 11:24 - 02106176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2013-07-17 15:17 - 2013-06-01 10:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-07-17 15:17 - 2013-06-01 10:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2013-07-17 15:17 - 2013-06-01 10:24 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2013-07-17 15:17 - 2013-06-01 10:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll 2013-07-17 15:17 - 2013-06-01 10:24 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll 2013-07-17 15:17 - 2013-06-01 10:23 - 01842176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2013-07-17 15:17 - 2013-06-01 10:23 - 00680960 _____ (Microsoft Corporation) C:\Windows\System32\vds.exe 2013-07-17 15:17 - 2013-06-01 10:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-07-17 15:17 - 2013-06-01 10:22 - 00446976 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll 2013-07-17 15:17 - 2013-06-01 10:22 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\vdsutil.dll 2013-07-17 15:17 - 2013-06-01 10:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\System32\MbaeParserTask.exe 2013-07-17 15:17 - 2013-06-01 10:21 - 00729600 _____ (Microsoft Corporation) C:\Windows\System32\samsrv.dll 2013-07-17 15:17 - 2013-06-01 10:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\System32\samlib.dll 2013-07-17 15:17 - 2013-06-01 10:20 - 02219520 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll 2013-07-17 15:17 - 2013-06-01 10:20 - 01527808 _____ (Microsoft Corporation) C:\Windows\System32\mfcore.dll 2013-07-17 15:17 - 2013-06-01 10:20 - 01048576 _____ (Microsoft Corporation) C:\Windows\System32\mfasfsrcsnk.dll 2013-07-17 15:17 - 2013-06-01 10:20 - 00583168 _____ (Microsoft Corporation) C:\Windows\System32\mscms.dll 2013-07-17 15:17 - 2013-06-01 10:19 - 00785408 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll 2013-07-17 15:17 - 2013-06-01 10:19 - 00207872 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupManager.dll 2013-07-17 15:17 - 2013-06-01 04:08 - 00037632 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\BthAvrcpTg.sys 2013-07-17 15:17 - 2013-05-24 23:09 - 01403296 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi 2013-07-17 15:17 - 2013-05-24 23:09 - 01271584 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe 2013-07-17 15:17 - 2013-05-24 23:09 - 01217352 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi 2013-07-17 15:17 - 2013-05-24 23:09 - 01093904 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe 2013-07-17 15:17 - 2013-05-20 01:08 - 00386642 _____ C:\Windows\System32\ApnDatabase.xml 2013-07-17 15:16 - 2013-06-16 23:41 - 00997632 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys 2013-07-17 15:16 - 2012-11-20 06:24 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2013-07-17 15:16 - 2012-11-20 06:17 - 01184256 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll 2013-07-17 15:16 - 2012-11-20 06:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDKURD.DLL 2013-07-17 15:16 - 2012-11-20 05:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDKURD.DLL 2013-07-17 15:16 - 2012-11-08 05:25 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2013-07-17 15:16 - 2012-11-08 05:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2013-07-17 15:16 - 2012-11-08 05:25 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-07-17 15:16 - 2012-11-08 05:22 - 00641536 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll 2013-07-17 15:16 - 2012-11-08 05:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll 2013-07-17 15:16 - 2012-11-08 05:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-07-17 15:16 - 2012-10-02 08:34 - 00068608 _____ (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll 2013-07-17 15:15 - 2012-11-06 08:52 - 00277736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msiscsi.sys 2013-07-17 15:15 - 2012-11-06 08:33 - 01566432 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll 2013-07-17 15:15 - 2012-11-06 05:48 - 01150160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2013-07-17 15:15 - 2012-11-06 05:20 - 00883712 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe 2013-07-17 15:15 - 2012-11-06 05:20 - 00516608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2013-07-17 15:15 - 2012-11-06 05:20 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2013-07-17 15:15 - 2012-11-06 05:20 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll 2013-07-17 15:15 - 2012-11-06 05:20 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\rdpclip.exe 2013-07-17 15:15 - 2012-11-06 05:20 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2013-07-17 15:15 - 2012-11-06 05:20 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll 2013-07-17 15:15 - 2012-11-06 05:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 08552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\System32\wlansvc.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00710656 _____ (Microsoft Corporation) C:\Windows\System32\winhttp.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00470016 _____ (Microsoft Corporation) C:\Windows\System32\wlanmsm.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00466944 _____ (Microsoft Corporation) C:\Windows\System32\wcncsvc.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00446464 _____ (Microsoft Corporation) C:\Windows\System32\wlansec.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00273408 _____ (Microsoft Corporation) C:\Windows\System32\wlanapi.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00126976 _____ (Microsoft Corporation) C:\Windows\System32\WcnApi.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\wfdprov.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00027136 _____ (Microsoft Corporation) C:\Windows\System32\WcnEapPeerProxy.dll 2013-07-17 15:15 - 2012-11-06 05:19 - 00026624 _____ (Microsoft Corporation) C:\Windows\System32\WcnEapAuthProxy.dll 2013-07-17 15:15 - 2012-11-06 05:18 - 11459584 _____ (Microsoft Corporation) C:\Windows\System32\glcndFilter.dll 2013-07-17 15:15 - 2012-11-06 05:18 - 01037312 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll 2013-07-17 15:15 - 2012-11-06 05:18 - 00976384 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll 2013-07-17 15:15 - 2012-11-06 05:18 - 00189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl 2013-07-17 15:15 - 2012-11-06 05:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\System32\MFCaptureEngine.dll 2013-07-17 15:15 - 2012-11-06 05:18 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\fdWCN.dll 2013-07-17 15:15 - 2012-11-06 05:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll 2013-07-17 15:15 - 2012-11-06 05:17 - 00212992 _____ (Microsoft Corporation) C:\Windows\System32\bthprops.cpl 2013-07-17 15:15 - 2012-11-06 05:17 - 00110080 _____ (Microsoft Corporation) C:\Windows\System32\dafWCN.dll 2013-07-17 15:15 - 2012-11-06 05:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\iscsilog.dll 2013-07-17 15:15 - 2012-11-06 04:58 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\wlanhlp.dll 2013-07-17 15:15 - 2012-11-06 04:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll 2013-07-17 15:15 - 2012-11-06 04:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdk8.sys 2013-07-17 15:15 - 2012-11-06 04:55 - 00089088 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelppm.sys 2013-07-17 15:15 - 2012-11-06 04:55 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdppm.sys 2013-07-17 15:15 - 2012-11-06 04:55 - 00087552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\processr.sys 2013-07-17 15:15 - 2012-11-06 04:55 - 00022528 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fxppm.sys 2013-07-17 15:15 - 2012-11-06 04:53 - 00560640 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys 2013-07-17 15:15 - 2012-11-06 04:51 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-07-17 15:15 - 2012-10-24 05:54 - 00396008 _____ (Microsoft Corporation) C:\Windows\System32\hal.dll 2013-07-17 15:15 - 2012-10-17 05:32 - 01172992 _____ (Microsoft Corporation) C:\Windows\System32\mfnetsrc.dll 2013-07-17 15:15 - 2012-10-17 05:32 - 00677888 _____ (Microsoft Corporation) C:\Windows\System32\mfnetcore.dll 2013-07-17 15:15 - 2012-10-17 05:32 - 00673280 _____ (Microsoft Corporation) C:\Windows\System32\mfmpeg2srcsnk.dll 2013-07-17 15:15 - 2012-10-17 04:57 - 00929792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll 2013-07-17 15:15 - 2012-10-17 04:57 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll 2013-07-17 15:15 - 2012-10-17 04:57 - 00513024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll 2013-07-17 15:15 - 2012-10-12 07:13 - 00109568 _____ (Microsoft Corporation) C:\Windows\System32\dskquota.dll 2013-07-17 15:15 - 2012-10-12 06:39 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dskquota.dll 2013-07-17 15:14 - 2012-10-11 08:47 - 00793200 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll 2013-07-17 15:14 - 2012-10-11 08:25 - 00056552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdstor.sys 2013-07-17 15:14 - 2012-10-11 08:23 - 00441576 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys 2013-07-17 15:14 - 2012-10-11 08:18 - 00172264 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2013-07-17 15:14 - 2012-10-11 08:13 - 00058088 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys 2013-07-17 15:14 - 2012-10-11 08:13 - 00033512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\battc.sys 2013-07-17 15:14 - 2012-10-11 08:08 - 00562392 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2013-07-17 15:14 - 2012-10-11 06:46 - 01395712 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Immersive.dll 2013-07-17 15:14 - 2012-10-11 06:46 - 00517120 _____ (Microsoft Corporation) C:\Windows\System32\winlogon.exe 2013-07-17 15:14 - 2012-10-11 06:46 - 00154112 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Storage.Compression.dll 2013-07-17 15:14 - 2012-10-11 06:45 - 01045504 _____ (Microsoft Corporation) C:\Windows\System32\usercpl.dll 2013-07-17 15:14 - 2012-10-11 06:45 - 00590848 _____ (Microsoft Corporation) C:\Windows\System32\SHCore.dll 2013-07-17 15:14 - 2012-10-11 06:45 - 00579584 _____ (Microsoft Corporation) C:\Windows\System32\StructuredQuery.dll 2013-07-17 15:14 - 2012-10-11 06:45 - 00505344 _____ (Microsoft Corporation) C:\Windows\System32\SpaceControl.dll 2013-07-17 15:14 - 2012-10-11 06:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\System32\SysFxUI.dll 2013-07-17 15:14 - 2012-10-11 06:44 - 01265152 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll 2013-07-17 15:14 - 2012-10-11 06:44 - 00904192 _____ (Microsoft Corporation) C:\Windows\System32\MPSSVC.dll 2013-07-17 15:14 - 2012-10-11 06:44 - 00355328 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll 2013-07-17 15:14 - 2012-10-11 06:44 - 00264704 _____ (Microsoft Corporation) C:\Windows\System32\ListSvc.dll 2013-07-17 15:14 - 2012-10-11 06:44 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\input.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 01280000 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 00757760 _____ (Microsoft Corporation) C:\Windows\System32\FirewallAPI.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 00331776 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcore.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 00244224 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\bdesvc.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 00118784 _____ (Microsoft Corporation) C:\Windows\System32\AppxSip.dll 2013-07-17 15:14 - 2012-10-11 06:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll 2013-07-17 15:14 - 2012-10-11 06:42 - 00612416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2013-07-17 15:14 - 2012-10-11 06:23 - 00034816 _____ (Microsoft Corporation) C:\Windows\System32\microsoft-windows-pdc.dll 2013-07-17 15:14 - 2012-10-11 06:16 - 00286208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\portcls.sys 2013-07-17 15:14 - 2012-10-11 06:07 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2013-07-17 15:14 - 2012-10-11 06:07 - 00962560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2013-07-17 15:14 - 2012-10-11 06:07 - 00460800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2013-07-17 15:14 - 2012-10-11 06:07 - 00414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2013-07-17 15:14 - 2012-10-11 06:07 - 00116224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Compression.dll 2013-07-17 15:14 - 2012-10-11 06:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll 2013-07-17 15:14 - 2012-10-11 06:06 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2013-07-17 15:14 - 2012-10-11 06:06 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-07-17 15:14 - 2012-10-11 06:06 - 00270336 _____ (Microsoft Co-15 19:53 - 2013-07-15 19:53 - 00000117 _____ C:\Windows\System32\netcfg-271078671.txt 2013-07-15 18:20 - 2013-07-15 18:20 - 00000117 _____ C:\Windows\System32\netcfg-265491890.txt 2013-07-14 21:47 - 2013-07-14 21:47 - 00000117 _____ C:\Windows\System32\netcfg-191537140.txt 2013-07-14 21:47 - 2013-07-14 21:47 - 00000117 _____ C:\Windows\System32\netcfg-191531359.txt 2013-07-14 21:47 - 2013-07-14 21:47 - 00000117 _____ C:\Windows\System32\netcfg-191528578.txt 2013-07-14 15:13 - 2013-07-14 15:13 - 00000117 _____ C:\Windows\System32\netcfg-167891562.txt 2013-07-14 15:12 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System32\NDF 2013-07-13 23:28 - 2013-07-13 23:28 - 00000117 _____ C:\Windows\System32\netcfg-111179046.txt 2013-07-13 23:28 - 2013-07-13 23:28 - 00000117 _____ C:\Windows\System32\netcfg-111152406.txt 2013-07-13 23:28 - 2013-07-13 23:28 - 00000117 _____ C:\Windows\System32\netcfg-111151656.txt 2013-07-13 21:39 - 2013-07-13 21:39 - 00000117 _____ C:\Windows\System32\netcfg-104641031.txt 2013-07-13 14:24 - 2013-07-13 14:24 - 00000117 _____ C:\Windows\System32\netcfg-78565781.txt 2013-07-13 13:09 - 2013-07-13 13:09 - 00000117 _____ C:\Windows\System32\netcfg-74065625.txt 2013-07-13 13:09 - 2013-07-13 13:09 - 00000117 _____ C:\Windows\System32\netcfg-74064640.txt 2013-07-13 13:09 - 2013-07-13 13:09 - 00000117 _____ C:\Windows\System32\netcfg-74058171.txt 2013-07-13 12:55 - 2013-07-13 12:55 - 00000117 _____ C:\Windows\System32\netcfg-73187906.txt 2013-07-13 12:20 - 2013-07-13 12:19 - 00000000 ____D C:\Program Files (x86)\SPEEDLINK Ferret Gaming Mouse 2013-07-13 12:16 - 2013-07-13 12:16 - 00000117 _____ C:\Windows\System32\netcfg-70840062.txt 2013-07-13 12:16 - 2013-07-13 12:16 - 00000117 _____ C:\Windows\System32\netcfg-70837015.txt 2013-07-12 20:41 - 2013-07-12 20:41 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-07-12 20:41 - 2013-07-12 20:41 - 00000000 ____D C:\Program Files (x86)\VideoLAN 2013-07-12 18:39 - 2013-07-12 18:39 - 00000117 _____ C:\Windows\System32\netcfg-7440531.txt 2013-07-12 18:39 - 2013-07-12 18:39 - 00000117 _____ C:\Windows\System32\netcfg-7439281.txt 2013-07-12 17:46 - 2013-07-12 17:46 - 00001857 _____ C:\Users\Ronald\Desktop\UseNeXT by Tangysoft.lnk 2013-07-12 17:46 - 2013-07-12 17:46 - 00000000 ____D C:\Program Files (x86)\UseNeXT 2013-07-12 16:51 - 2013-07-12 16:51 - 00000355 _____ C:\Users\Ronald\Desktop\Computer - Verknüpfung.lnk 2013-07-12 16:51 - 2013-07-12 16:51 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Macromedia 2013-07-12 16:49 - 2013-07-12 16:49 - 00001103 _____ C:\Users\Ronald\Desktop\Dokumente - Verknüpfung.lnk 2013-07-12 16:49 - 2013-07-12 16:49 - 00001092 _____ C:\Users\Ronald\Desktop\Bilder - Verknüpfung.lnk 2013-07-12 16:49 - 2013-07-12 16:49 - 00001082 _____ C:\Users\Ronald\Desktop\Videos - Verknüpfung.lnk 2013-07-12 16:49 - 2013-07-12 16:49 - 00001075 _____ C:\Users\Ronald\Desktop\Musik - Verknüpfung.lnk 2013-07-12 16:49 - 2013-07-12 16:49 - 00000000 ____D C:\Users\Ronald\AppData\Local\Sony Corporation 2013-07-12 16:48 - 2013-07-12 16:45 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Sony Corporation 2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\Documents\Bluetooth Folder 2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\ATI 2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Atheros 2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Local\BMExplorer 2013-07-12 16:47 - 2013-07-12 16:47 - 00000000 ____D C:\Users\Ronald\AppData\Local\ATI 2013-07-12 16:47 - 2012-10-20 07:36 - 00000000 ____D C:\ProgramData\Atheros 2013-07-12 16:45 - 2013-07-12 16:45 - 00000000 ____D C:\Users\Ronald\AppData\Roaming\Adobe 2013-07-12 16:45 - 2013-07-12 16:45 - 00000000 ____D C:\Users\Ronald\AppData\Local\Power2Go8 2013-07-12 16:45 - 2013-07-10 10:00 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-07-12 16:44 - 2013-07-12 16:44 - 00000020 ___SH C:\Users\Ronald\ntuser.ini 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Vorlagen 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Startmenü 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Netzwerkumgebung 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Lokale Einstellungen 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Eigene Dateien 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Druckumgebung 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Documents\Eigene Musik 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Documents\Eigene Bilder 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\AppData\Local\Verlauf 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\AppData\Local\Anwendungsdaten 2013-07-12 16:44 - 2013-07-12 16:44 - 00000000 _SHDL C:\Users\Ronald\Anwendungsdaten 2013-07-12 16:43 - 2013-07-12 16:43 - 00000117 _____ C:\Windows\System32\netcfg-483843.txt 2013-07-12 16:43 - 2013-07-12 16:43 - 00000117 _____ C:\Windows\System32\netcfg-480812.txt 2013-07-12 16:42 - 2013-07-12 16:42 - 00000117 _____ C:\Windows\System32\netcfg-400015.txt 2013-07-10 10:51 - 2013-07-10 10:51 - 00000117 _____ C:\Windows\System32\netcfg-742390.txt 2013-07-10 10:51 - 2012-07-26 09:13 - 00003604 _____ C:\Windows\DtcInstall.log 2013-07-10 10:40 - 2013-07-10 10:40 - 00000117 _____ C:\Windows\System32\netcfg-53156.txt 2013-07-10 10:40 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\System32\Sysprep 2013-07-10 10:32 - 2013-07-10 10:32 - 00000117 _____ C:\Windows\System32\netcfg-492921.txt 2013-07-10 10:31 - 2013-07-10 09:58 - 00000000 ____D C:\users\test 2013-07-10 10:29 - 2012-07-26 09:13 - 00262144 _____ C:\Windows\System32\config\BCD-Template 2013-07-10 10:25 - 2013-07-10 10:24 - 00000117 _____ C:\Windows\System32\netcfg-55171.txt 2013-07-10 10:20 - 2013-07-10 10:20 - 00000117 _____ C:\Windows\System32\netcfg-2527656.txt 2013-07-10 10:18 - 2013-07-10 10:05 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-420498432-2417053039-3911193342-1001 2013-07-10 10:00 - 2012-10-20 06:29 - 00000000 ____D C:\Windows\System32\Tasks\SONY 2013-07-10 10:00 - 2012-10-20 06:15 - 00000000 ____D C:\Windows\System32\Tasks\Sony Corporation 2013-07-10 09:59 - 2013-07-10 09:59 - 00000000 ____D C:\Windows\SysWOW64\VAIO Startup Setting Tool 2013-07-10 09:59 - 2013-07-10 09:59 - 00000000 ____D C:\Windows\pss 2013-07-10 09:59 - 2012-10-20 06:50 - 00000000 ____D C:\Program Files\Sony 2013-07-10 09:57 - 2013-07-10 09:57 - 00000117 _____ C:\Windows\System32\netcfg-1177890.txt 2013-07-10 09:57 - 2013-07-10 09:57 - 00000117 _____ C:\Windows\System32\netcfg-1171781.txt 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Programme 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-07-10 09:38 - 2013-07-10 09:38 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-07-10 09:38 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows NT 2013-07-10 09:38 - 2012-07-26 06:37 - 00000000 __RHD C:\users\Default 2013-06-27 23:04 - 2012-07-26 09:14 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-27 23:04 - 2012-07-26 09:14 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2013-07-17 15:17] - [2013-06-01 12:34] - 2391280 ____A (Microsoft Corporation) 0E8E6463F81C80AFBED533E0F1F8895D C:\Windows\SysWOW64\explorer.exe [2013-07-17 15:17] - [2013-06-01 11:24] - 2106176 ____A (Microsoft Corporation) EAFE46B0292D2BD2467835E2ACF717CC C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys [2013-07-17 15:17] - [2013-06-01 12:26] - 0327936 ____A (Microsoft Corporation) 78A5BBA3819FFFC62FFEC3E2220D102D ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= ==================== Memory info =========================== Percentage of memory in use: 10% Total physical RAM: 8139.27 MB Available physical RAM: 7289.38 MB Total Pagefile: 8139.27 MB Available Pagefile: 7308.29 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:901.66 GB) (Free:856.94 GB) NTFS Drive d: () (Removable) (Total:0.48 GB) (Free:0.47 GB) FAT32 (Disk=1 Partition=1) Drive f: () (Removable) (Total:0.94 GB) (Free:0.93 GB) FAT32 (Disk=2 Partition=1) Drive x: (Boot) (Fixed) (Total:0.25 GB) (Free:0.25 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 258605E9) Partition: GPT Partition Type ======================================================== Disk: 1 (Size: 490 MB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=490 MB) - (Type=0B) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 960 MB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=960 MB) - (Type=0B) LastRegBack: 2013-07-22 20:33 ==================== End Of Log ============================ Erbitte dann weitere Anweisungen. Danke |
Themen zu GVU Trojaner auf Win 8 Laptop |
adobe, association, computer, defender, desktop, dringend, explorer, farbar, farbar recovery scan tool, frst.txt, gvu trojaner, home, ics, log-file, messenger, micro, microsoft, musik, realtek, registry, server, service.exe, services.exe, sony vaio, svchost.exe, system, temp, trojaner, usenext, windows 8, windows xp, winlogon, wlan |