Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
GVU unter Win7, nur noch abgesicherter Modus

GVU unter Win7, nur noch abgesicherter Modus


Log-Analyse und Auswertung: GVU unter Win7, nur noch abgesicherter Modus

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 04.09.2013, 23:32   #1
Eyehategod
 
GVU unter Win7, nur noch abgesicherter Modus - Standard

GVU unter Win7, nur noch abgesicherter Modus


Guten Abend zusammen,

beim Surfen im Netz verwendete ich aus Kompatibilitätsgründen den IE und *zack* gab es nach wenigen Momenten den Aha-Effekt der Rechnervollsperrung. Normales WIndows ist wie üblich durch den GVU gesperrt, abgesicherter Modus fährt sich selbständig runter, nur "Windows reparieren" funktioniert. Da habe ich mich gemäß anderer hier im Board verfolgter Diskussionen an die Marschroute mit dem Scan durch das Farbar Recovery Scan Tool gehalten. Es wäre großartig, wenn man mir bei der Diagnose der entsprechend schädlichen Files helfen könnte. Anbei der Inhalt meines Logfiles nach FRST-Scan:


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-09-2013
Ran by SYSTEM on MININT-MV3AF8C on 05-09-2013 00:06:28
Running from G:\
Windows 7 Professional (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-11-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ATICustomerCare] - C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [307200 2009-06-14] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [CTxfiHlp] - C:\Windows\system32\CTXFIHLP.EXE [25600 2009-06-04] (Creative Technology Ltd)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1983816 2009-03-24] (CANON INC.)
HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [38840 2009-12-22] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640440 2009-12-21] (Adobe Systems Inc.)
HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [1655296 2010-09-05] (Dominik Reichl)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKU\Eyehategod\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [ 2009-08-22] ()
HKU\Eyehategod\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [ 2013-03-08] (Microsoft Corporation)
HKU\Eyehategod\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [ 2007-09-02] ()
HKU\Eyehategod\...\Run: [Miranda Fusion] - C:\Program Files\MirandaFusion\fusiontools\mfstart.exe [ 2012-06-12] (Miranda Fusion Team)
HKU\Eyehategod\...\Run: [KeePass Password Safe 2] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [ 2010-09-05] (Dominik Reichl)
HKU\Eyehategod\...\Run: [SugarSync] - C:\Program Files\SugarSync\SugarSyncManager.exe [ 2013-04-04] (SugarSync, Inc.)
HKU\Eyehategod\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [ 2013-06-21] (Skype Technologies S.A.)
HKU\Eyehategod\...\Run: [Spotify Web Helper] - C:\Users\Eyehategod\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [ 2013-07-23] (Spotify Ltd)
HKU\Eyehategod\...\Run: [Google Update] - C:\Users\Eyehategod\AppData\Local\Google\Update\GoogleUpdate.exe [ 2010-09-11] (Google Inc.)
HKU\Eyehategod\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe [ 2013-09-04] (Valve Corporation) <===== ATTENTION
HKU\Eyehategod\...\Command Processor: "C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe" <===== ATTENTION!
Startup: C:\Users\Eyehategod\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> (No File)

========================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-02] (Avira Operations GmbH & Co. KG)
S2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
S2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
S2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-08-19] (Avira Operations GmbH & Co. KG)
S0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 ctdvda2k; C:\Windows\System32\drivers\ctdvda2k.sys [347080 2009-06-04] (Creative Technology Ltd)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14216 2009-08-26] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [8456 2009-09-16] ()
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-28] (Initio Corporation)
S1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [14848 2009-11-18] (Samsung Electronics, Inc. )
S3 mod7700; C:\Windows\System32\Drivers\mod7700.sys [819072 2008-06-26] (DiBcom SA)
S3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [13824 2007-10-19] (DiBcom S.A.)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-01-23] (Duplex Secure Ltd.)
S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-19] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-11-12] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25216 2008-07-31] (The OpenVPN Project)
S3 BTCFilterService; system32\DRIVERS\motfilt.sys [x]
S3 motandroidusb; System32\Drivers\motoandroid.sys [x]
S3 motccgp; system32\DRIVERS\motccgp.sys [x]
S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [x]
S3 MotDev; system32\DRIVERS\motodrv.sys [x]
S3 motmodem; system32\DRIVERS\motmodem.sys [x]
S3 MotoSwitchService; system32\DRIVERS\motswch.sys [x]
S3 Motousbnet; system32\DRIVERS\Motousbnet.sys [x]
S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-04 22:27 - 2013-09-04 22:27 - 00163080 _____ C:\Users\Eyehategod\AppData\Local\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163079 _____ C:\ProgramData\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163068 _____ C:\Users\Eyehategod\AppData\Roaming\2433f433
2013-08-27 12:07 - 2013-08-28 17:36 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-08-25 16:50 - 2013-07-26 04:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-08-25 16:50 - 2013-07-26 04:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-08-25 16:50 - 2013-07-26 03:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-08-25 16:49 - 2013-07-26 04:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-08-25 16:49 - 2013-07-26 04:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-08-25 16:49 - 2013-07-26 04:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-08-25 16:49 - 2013-07-26 04:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-08-25 16:49 - 2013-07-26 04:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-08-25 16:49 - 2013-07-26 04:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-08-25 16:49 - 2013-07-26 04:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-08-25 16:49 - 2013-07-26 04:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-08-25 16:49 - 2013-07-26 04:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-08-25 16:49 - 2013-07-26 04:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-08-25 16:49 - 2013-07-26 04:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-08-25 16:49 - 2013-07-26 04:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-08-25 16:49 - 2013-07-26 02:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-08-25 16:48 - 2013-08-25 17:10 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-25 16:48 - 2013-07-09 06:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-08-25 16:48 - 2013-07-09 06:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-08-25 16:48 - 2013-07-09 05:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-08-25 16:48 - 2013-07-06 06:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-08-25 16:47 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-08-25 16:47 - 2013-07-19 02:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-08-25 16:47 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-08-25 16:47 - 2013-07-09 05:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-08-25 16:47 - 2013-07-09 05:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-08-25 16:47 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-08-25 16:47 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-08-25 16:46 - 2013-06-15 04:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tssecsrv.sys
2013-08-25 16:39 - 2013-08-25 16:39 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\Avira
2013-08-25 16:36 - 2013-09-02 13:51 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-08-25 16:35 - 2013-08-25 16:35 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-25 16:35 - 2013-08-25 16:35 - 00000000 ____D C:\ProgramData\APN
2013-08-25 16:35 - 2013-08-25 16:35 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-08-25 16:34 - 2013-08-25 16:34 - 00001940 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-25 16:33 - 2013-09-02 13:51 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-08-25 16:33 - 2013-09-02 13:51 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-08-25 16:33 - 2013-08-19 01:31 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-08-25 16:33 - 2013-08-19 01:31 - 00028520 _____ (Avira GmbH) C:\Windows\System32\Drivers\ssmdrv.sys
2013-08-25 16:32 - 2013-08-25 16:33 - 00000000 ____D C:\ProgramData\Avira
2013-08-25 16:32 - 2013-08-25 16:32 - 00000000 ____D C:\Program Files\Avira

==================== One Month Modified Files and Folders =======

2013-09-05 00:00 - 2013-09-05 00:00 - 00000000 ____D C:\FRST
2013-09-04 22:40 - 2012-09-17 17:00 - 00115176 _____ C:\Windows\setupact.log
2013-09-04 22:40 - 2010-01-25 16:42 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-09-04 22:40 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2013-09-04 22:39 - 2010-01-05 11:19 - 00274804 _____ C:\Windows\PFRO.log
2013-09-04 22:27 - 2013-09-04 22:27 - 00163080 _____ C:\Users\Eyehategod\AppData\Local\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163079 _____ C:\ProgramData\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163068 _____ C:\Users\Eyehategod\AppData\Roaming\2433f433
2013-09-04 22:20 - 2010-01-05 04:58 - 00000000 ____D C:\Users\Eyehategod\.rainlendar2
2013-09-04 22:02 - 2010-01-05 01:38 - 01377768 _____ C:\Windows\WindowsUpdate.log
2013-09-04 21:14 - 2010-01-08 17:50 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\Dropbox
2013-09-03 20:04 - 2010-08-19 15:37 - 00000000 ____D C:\Program Files\Minilyrics
2013-09-03 18:38 - 2010-01-05 02:58 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\Skype
2013-09-03 17:09 - 2012-01-23 13:01 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\MediaMonkey
2013-09-03 15:49 - 2012-09-13 14:39 - 00000000 ____D C:\Lyrics
2013-09-03 11:22 - 2009-07-14 05:34 - 00016048 _____ C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-03 11:22 - 2009-07-14 05:34 - 00016048 _____ C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-03 10:18 - 2010-01-26 17:59 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\vlc
2013-09-02 17:27 - 2010-07-25 23:07 - 00054156 ____H C:\Windows\QTFont.qfn
2013-09-02 13:51 - 2013-08-25 16:36 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-09-02 13:51 - 2013-08-25 16:33 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-09-02 13:51 - 2013-08-25 16:33 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-09-02 13:45 - 2012-04-25 17:25 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-28 17:36 - 2013-08-27 12:07 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-08-28 07:36 - 2010-11-13 11:50 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\KeePass
2013-08-27 12:51 - 2010-01-05 01:39 - 01498742 _____ C:\Windows\System32\PerfStringBackup.INI
2013-08-27 10:47 - 2010-01-20 13:43 - 00000000 ____D C:\Program Files\JDownloader
2013-08-25 18:22 - 2012-11-20 23:35 - 00000000 ____D C:\Windows\rescache
2013-08-25 17:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-25 17:10 - 2013-08-25 16:48 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-25 17:04 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-08-25 17:03 - 2013-07-16 11:33 - 00000000 ____D C:\Windows\System32\MRT
2013-08-25 16:58 - 2010-01-13 20:39 - 75778376 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-08-25 16:39 - 2013-08-25 16:39 - 00000000 ____D C:\Users\Eyehategod\AppData\Roaming\Avira
2013-08-25 16:35 - 2013-08-25 16:35 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-08-25 16:35 - 2013-08-25 16:35 - 00000000 ____D C:\ProgramData\APN
2013-08-25 16:35 - 2013-08-25 16:35 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-08-25 16:35 - 2012-04-16 01:50 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-08-25 16:35 - 2011-05-17 05:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-08-25 16:34 - 2013-08-25 16:34 - 00001940 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-25 16:33 - 2013-08-25 16:32 - 00000000 ____D C:\ProgramData\Avira
2013-08-25 16:32 - 2013-08-25 16:32 - 00000000 ____D C:\Program Files\Avira
2013-08-19 01:31 - 2013-08-25 16:33 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-08-19 01:31 - 2013-08-25 16:33 - 00028520 _____ (Avira GmbH) C:\Windows\System32\Drivers\ssmdrv.sys
2013-08-19 01:28 - 2010-01-05 02:58 - 00000000 ___RD C:\Program Files\Skype
2013-08-19 01:28 - 2010-01-05 02:58 - 00000000 ____D C:\ProgramData\Skype

Files to move or delete:
====================
C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe
C:\Users\Eyehategod\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.dll
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.exe
C:\Users\Eyehategod\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP3.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP2.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP1.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP0.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\SSM29\SugarSyncSetup.exe
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\35d4f82197adb89f17893e4e7cb87cd7.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\6662035d8b02ae52e1f00f8c43a3b81d.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\a3eca939201eeb6f9fc46d8e40b0f391.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\aebdacad1a8bc66cf8a99dd7640123cb.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorer.exe
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorerLib.dll
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaSrCom.dll
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\Launcher.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.2.3442.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3685.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3717.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.3868.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.4003.exe
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CbsProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CompatProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCore.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCorePS.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismHost.exe
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismProv.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DmiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\FolderProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\IntlProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\LogProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\MsiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\OSProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\SmiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\TransmogProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\UnattendProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\wdscore.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\WimProvider.dll
C:\Windows\Tasks\At1.job

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 12%
Total physical RAM: 4094.49 MB
Available physical RAM: 3573.48 MB
Total Pagefile: 4092.77 MB
Available Pagefile: 3575.53 MB
Total Virtual: 2047.88 MB
Available Virtual: 1939.52 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:49.2 GB) (Free:2.85 GB) NTFS
Drive d: () (Fixed) (Total:546.87 GB) (Free:128.21 GB) NTFS
Drive g: (INTENSO) (Removable) (Total:3.65 GB) (Free:2.48 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 90537FC3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=547 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 53BA89CC)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)


LastRegBack: 2013-09-02 18:02

==================== End Of Log ============================

Alt 05.09.2013, 04:04   #2
schrauber
/// the machine
/// TB-Ausbilder
 
GVU unter Win7, nur noch abgesicherter Modus - Standard

GVU unter Win7, nur noch abgesicherter Modus


hi,

Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKU\Eyehategod\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe [ 2013-09-04] (Valve Corporation) <===== ATTENTION
HKU\Eyehategod\...\Command Processor: "C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe" <===== ATTENTION!
2013-09-04 22:27 - 2013-09-04 22:27 - 00163080 _____ C:\Users\Eyehategod\AppData\Local\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163079 _____ C:\ProgramData\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163068 _____ C:\Users\Eyehategod\AppData\Roaming\2433f433
C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe
C:\Users\Eyehategod\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.dll
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.exe
C:\Users\Eyehategod\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP3.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP2.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP1.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP0.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\SSM29\SugarSyncSetup.exe
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\35d4f82197adb89f17893e4e7cb87cd7.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\6662035d8b02ae52e1f00f8c43a3b81d.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\a3eca939201eeb6f9fc46d8e40b0f391.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\aebdacad1a8bc66cf8a99dd7640123cb.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorer.exe
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorerLib.dll
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaSrCom.dll
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\Launcher.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.2.3442.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3685.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3717.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.3868.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.4003.exe
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CbsProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CompatProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCore.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCorePS.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismHost.exe
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismProv.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DmiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\FolderProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\IntlProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\LogProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\MsiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\OSProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\SmiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\TransmogProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\UnattendProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\wdscore.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\WimProvider.dll
C:\Windows\Tasks\At1.job
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


Rechner normal starten
__________________

__________________
Alt 05.09.2013, 10:02   #3
Eyehategod
 
GVU unter Win7, nur noch abgesicherter Modus - Standard

GVU unter Win7, nur noch abgesicherter Modus


Tausend dank. Der Rechner läuft wieder astrein. Wollte zwar eh die Tage eine SSD einbauen, aber wenn man so plötzlich den Zugang zum System verliert, ist das ja doch schon unerwünscht.

Hier das Fixlog:


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 04-09-2013
Ran by SYSTEM at 2013-09-05 10:23:33 Run:1
Running from G:\
Boot Mode: Recovery

==============================================

Content of fixlist:
*****************
HKU\Eyehategod\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe [ 2013-09-04] (Valve Corporation) <===== ATTENTION
HKU\Eyehategod\...\Command Processor: "C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe" <===== ATTENTION!
2013-09-04 22:27 - 2013-09-04 22:27 - 00163080 _____ C:\Users\Eyehategod\AppData\Local\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163079 _____ C:\ProgramData\2433f433
2013-09-04 22:27 - 2013-09-04 22:27 - 00163068 _____ C:\Users\Eyehategod\AppData\Roaming\2433f433
C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe
C:\Users\Eyehategod\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.dll
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.exe
C:\Users\Eyehategod\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP3.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP2.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP1.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP0.DIR\apiutil.dll
C:\Users\Eyehategod\AppData\Local\Temp\SSM29\SugarSyncSetup.exe
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\35d4f82197adb89f17893e4e7cb87cd7.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\6662035d8b02ae52e1f00f8c43a3b81d.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\a3eca939201eeb6f9fc46d8e40b0f391.dll
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\aebdacad1a8bc66cf8a99dd7640123cb.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\AdvSplash.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\FindProcDLL.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\GetVersion.dll
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\System.dll
C:\Users\Eyehategod\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorer.exe
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorerLib.dll
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaSrCom.dll
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\Launcher.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.2.3442.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3685.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3717.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.3868.exe
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.4003.exe
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CbsProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CompatProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCore.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCorePS.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismHost.exe
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismProv.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DmiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\FolderProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\IntlProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\LogProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\MsiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\OSProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\SmiProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\TransmogProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\UnattendProvider.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\wdscore.dll
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\WimProvider.dll
C:\Windows\Tasks\At1.job
*****************

HKU\Eyehategod\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully.
HKU\Eyehategod\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
C:\Users\Eyehategod\AppData\Local\2433f433 => Moved successfully.
C:\ProgramData\2433f433 => Moved successfully.
C:\Users\Eyehategod\AppData\Roaming\2433f433 => Moved successfully.
C:\Users\EYEHAT~1\AppData\Local\Temp\oxaakdtoisrfcewkm.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.dll => Moved successfully.
"C:\Users\Eyehategod\AppData\Local\Temp\oxaakdtoisrfcewkm.exe" => File/Directory not found.
C:\Users\Eyehategod\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP3.DIR\apiutil.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP2.DIR\apiutil.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP1.DIR\apiutil.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\_ISTMP0.DIR\apiutil.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\SSM29\SugarSyncSetup.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\35d4f82197adb89f17893e4e7cb87cd7.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\6662035d8b02ae52e1f00f8c43a3b81d.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\a3eca939201eeb6f9fc46d8e40b0f391.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\pdk-Eyehategod\aebdacad1a8bc66cf8a99dd7640123cb.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsvD1B0.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsv7FDA.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nss99D9.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsq3901.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp70CC.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsp6E5C.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk74F1.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk6AE3.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk2DE3.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsk15B3.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsgBFB3.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsfEFEA.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf9962.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6C4A.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\AdvSplash.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\FindProcDLL.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\GetVersion.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\nsf6B12.tmp\System.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\MozUpdater\updater.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorer.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaExplorerLib.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\EpaSrCom.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\lmuninst\Launcher.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.4.2.3442.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3685.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.0.3717.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.3868.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\CDBurnerXP-updates\cdbxp_setup_4.5.1.4003.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CbsProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\CompatProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCore.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismCorePS.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismHost.exe => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DismProv.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\DmiProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\FolderProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\IntlProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\LogProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\MsiProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\OSProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\SmiProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\TransmogProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\UnattendProvider.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\wdscore.dll => Moved successfully.
C:\Users\Eyehategod\AppData\Local\Temp\BE860928-17D0-45B9-9647-AF226B98F0BB\WimProvider.dll => Moved successfully.
C:\Windows\Tasks\At1.job => Moved successfully.

==== End of Fixlog ====
__________________
Alt 05.09.2013, 11:02   #4
schrauber
/// the machine
/// TB-Ausbilder
 
GVU unter Win7, nur noch abgesicherter Modus - Standard

GVU unter Win7, nur noch abgesicherter Modus


Sollen wir weiter bereinigen? das mit SSD tönt als ob Du formatieren willst
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu GVU unter Win7, nur noch abgesicherter Modus
.dll, adobe, antivir, association, avg, avira, cdburnerxp, crypt, desktop, explorer, farbar, farbar recovery scan tool, gesperrt, google, helper, logfiles, microsoft, mozilla, opera, registry, scan, secure, services.exe, spotify web helper, surfen, svchost.exe, system, temp, windows, windows reparieren, winlogon.exe


« Problem SoftwareUpdater.UI.exe in Vista | GVU-Trojaner (Windows 7 ) »


Ähnliche Themen: GVU unter Win7, nur noch abgesicherter Modus


  1. Win7: Abgesicherter Modus führt zum Neustart ab Benutzerauswahl
    Plagegeister aller Art und deren Bekämpfung - 13.11.2015 (20)
  2. abgesicherter Modus funktioniert nicht in win7 - 64Bit
    Alles rund um Windows - 20.11.2014 (6)
  3. Win7: GVU Trojaner versperrt Desktop, abgesicherter Modus möglich
    Log-Analyse und Auswertung - 05.11.2014 (9)
  4. GVU Trojaner - Win7 - kein abgesicherter Modus
    Log-Analyse und Auswertung - 22.09.2013 (9)
  5. Win7 mit Trojaner inkl. Webcam, kein abgesicherter Modus möglich
    Log-Analyse und Auswertung - 16.09.2013 (3)
  6. Win7 /64bit, Abgesicherter Modus lässt sich nicht starten
    Log-Analyse und Auswertung - 10.09.2013 (8)
  7. Nur noch abgesicherter Modus möglich
    Log-Analyse und Auswertung - 12.08.2013 (9)
  8. Win7: Bundespolizei-Trojaner, abgesicherter Modus funktioniert nicht.
    Plagegeister aller Art und deren Bekämpfung - 12.08.2013 (9)
  9. GVU / BKA Trojaner Win7, abgesicherter Modus m E-Aufforderung möglich
    Plagegeister aller Art und deren Bekämpfung - 09.07.2013 (17)
  10. OTL Logdaten für GVU Trojaner, weißer Bildschirm, kein abgesicherter Modus unter Windows 7
    Log-Analyse und Auswertung - 09.07.2013 (25)
  11. GVU Trojaner, Win7, kein abgesicherter Modus möglich
    Log-Analyse und Auswertung - 29.06.2013 (9)
  12. GVU-Trojaner Win7 32Bit (Abgesicherter Modus geht nicht)
    Plagegeister aller Art und deren Bekämpfung - 17.06.2013 (49)
  13. WIN7 64Bit GVU Trojaner, abgesicherter Modus funktioniert nicht
    Log-Analyse und Auswertung - 25.04.2013 (5)
  14. WIN7 64Bit GVU Trojaner, abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 27.02.2013 (8)
  15. GVU Trojaner nur noch abgesicherter Modus
    Log-Analyse und Auswertung - 08.02.2013 (3)
  16. Verschlüsselungs-Trojaner (Trojan.Matsnu.1) unter Windows XP - Abgesicherter Modus nicht moeglich
    Plagegeister aller Art und deren Bekämpfung - 06.05.2012 (5)
  17. Bundespolizei Virus auf Win7, Abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 29.03.2012 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU unter Win7, nur noch abgesicherter Modus - Guten Abend zusammen, beim Surfen im Netz verwendete ich aus Kompatibilitätsgründen den IE und *zack* gab es nach wenigen Momenten den Aha-Effekt der Rechnervollsperrung. Normales WIndows ist wie üblich durch - GVU unter Win7, nur noch abgesicherter Modus...
Archiv
Du betrachtest: GVU unter Win7, nur noch abgesicherter Modus auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130