GVU-Trojaner nach Windowsunlocker noch vorhanden

BSB_12 · 25.10.2013, 17:05

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-10-2013
Ran by SYSTEM on MININT-1LP6HOS on 25-10-2013 17:59:20
Running from F:\
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8114720 2009-09-16] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1814312 2009-08-14] (Synaptics Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2839840 2010-04-07] (ESET)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1135912 2010-03-12] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Notebook\...\Run: [AlcoholAutomount] - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [33120 2009-11-15] (Alcohol Soft Development Team)
Startup: C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\o727tzj9.lnk
ShortcutTarget: o727tzj9.lnk -> C:\PROGRA~3\9jzt727o.plz ()

==================== Services (Whitelisted) =================

S3 COMSysApp; C:\Windows\SysWow64\dllhost.exe [7168 2009-07-14] (Microsoft Corporation)
S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-23] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-23] (DealPly Technologies Ltd)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42336 2010-04-07] (ESET)
S2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [810120 2010-04-07] (ESET)
S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2010-06-25] ()
S3 msiserver; C:\Windows\SysWow64\msiexec.exe [73216 2010-11-20] (Microsoft Corporation)
S2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2012-12-19] (Nitro PDF Software)
S3 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607040 2010-11-04] (TuneUp Software)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1403200 2010-09-30] (TuneUp Software)
S2 Winmgmt; C:\PROGRA~3\o727tzj9.pzz [60512 2013-10-10] (Microsoft Corporation)
S4 WSearch; C:\Windows\SysWow64\SearchIndexer.exe [428032 2009-07-14] (Microsoft Corporation)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [x]

==================== Drivers (Whitelisted) ====================

S2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [163888 2010-04-07] (ESET)
S1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [139704 2010-04-07] (ESET)
S2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [124760 2010-04-07] (ESET)
S3 hcw17bda; C:\Windows\System32\drivers\hcw17bda.sys [67456 2010-01-27] (Hauppauge Computer Works, Inc.)
S3 RSUSBSTOR; C:\Windows\SysWow64\Drivers\RtsUStor.sys [225280 2010-01-23] (Realtek Semiconductor Corp.)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-04-29] (Duplex Secure Ltd.)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2010-02-25] (TuneUp Software)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-25 17:59 - 2013-10-25 17:59 - 00000000 ____D C:\FRST
2013-10-18 22:06 - 2013-10-18 22:06 - 00000071 _____ C:\Windows\SysWOW64\.directory
2013-10-17 21:26 - 2013-10-19 08:04 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0
2013-10-14 22:20 - 2013-10-14 22:20 - 01593856 ____N C:\ProgramData\o727tzj9.fki
2013-10-10 16:28 - 2013-10-23 17:16 - 95025368 ____T C:\ProgramData\o727tzj9.pff
2013-10-10 16:28 - 2013-10-23 17:16 - 00000000 _____ C:\ProgramData\o727tzj9.ctrl
2013-10-10 16:28 - 2013-10-10 16:28 - 00115200 _____ C:\ProgramData\9jzt727o.plz
2013-10-10 16:28 - 2013-10-10 16:28 - 00060512 ____T (Microsoft Corporation) C:\ProgramData\o727tzj9.pzz
2013-10-09 16:23 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 16:23 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 16:23 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 16:23 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-09 16:23 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-09 16:23 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-09 16:23 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-09 16:23 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-09 16:23 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-09 16:23 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 16:23 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-10-09 16:23 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 16:22 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 16:22 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-09 16:22 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-09 13:53 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-10-09 13:53 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-10-09 13:53 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-10-09 13:53 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-10-09 13:53 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-10-09 13:53 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2013-10-09 13:53 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-10-09 13:53 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-09 13:53 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-10-09 13:53 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:53 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:53 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-10-09 13:53 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-09 13:53 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-09 13:53 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 13:53 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-09 13:53 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-09 13:53 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-10-09 13:53 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-10-09 13:53 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-10-09 13:53 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-10-09 13:53 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-10-09 13:53 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 13:53 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 13:53 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 13:53 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-09 13:53 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 13:53 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 13:53 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys
2013-10-09 13:53 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\Wdfres.dll
2013-10-09 13:53 - 2012-11-28 23:56 - 00000003 _____ C:\Windows\System32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-10-04 20:09 - 2013-10-04 20:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-10-25 17:59 - 2013-10-25 17:59 - 00000000 ____D C:\FRST
2013-10-23 17:16 - 2013-10-10 16:28 - 95025368 ____T C:\ProgramData\o727tzj9.pff
2013-10-23 17:16 - 2013-10-10 16:28 - 00000000 _____ C:\ProgramData\o727tzj9.ctrl
2013-10-23 17:16 - 2013-08-23 19:55 - 00000906 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-10-23 17:16 - 2010-11-24 15:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-23 17:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-23 17:16 - 2009-07-14 05:51 - 00176068 _____ C:\Windows\setupact.log
2013-10-23 17:03 - 2009-07-14 05:45 - 00014016 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-23 17:03 - 2009-07-14 05:45 - 00014016 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-23 17:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\sysprep
2013-10-19 08:04 - 2013-10-17 21:26 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0
2013-10-18 22:06 - 2013-10-18 22:06 - 00000071 _____ C:\Windows\SysWOW64\.directory
2013-10-18 14:40 - 2013-08-20 18:29 - 00001917 ___SH C:\ProgramData\e529bfc3-c17a-4d79-b236-8b5a5d266fad
2013-10-17 19:00 - 2013-08-23 19:55 - 00000910 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-10-15 16:54 - 2013-08-23 19:54 - 00000302 _____ C:\Windows\Tasks\Dealply.job
2013-10-14 22:20 - 2013-10-14 22:20 - 01593856 ____N C:\ProgramData\o727tzj9.fki
2013-10-10 17:23 - 2010-04-28 18:17 - 01837689 _____ C:\Windows\WindowsUpdate.log
2013-10-10 16:43 - 2010-11-24 15:04 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 16:28 - 2013-10-10 16:28 - 00115200 _____ C:\ProgramData\9jzt727o.plz
2013-10-10 16:28 - 2013-10-10 16:28 - 00060512 ____T (Microsoft Corporation) C:\ProgramData\o727tzj9.pzz
2013-10-10 16:26 - 2012-04-20 14:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-09 18:11 - 2012-12-24 12:49 - 00000000 ____D C:\Users\Notebook\AppData\Roaming\Nitro PDF
2013-10-09 17:26 - 2012-04-20 14:26 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 16:31 - 2009-07-14 05:45 - 04968920 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-09 16:25 - 2010-06-25 12:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 16:21 - 2013-03-13 17:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 16:21 - 2013-03-13 17:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 16:17 - 2013-08-14 14:59 - 00000000 ____D C:\Windows\System32\MRT
2013-10-09 16:17 - 2009-10-14 06:12 - 80541720 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-10-06 18:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-06 18:12 - 2013-08-20 18:12 - 00000000 ____D C:\ProgramData\6772d2f8-6c8a-4151-a5d7-0b3336329b43
2013-10-06 17:37 - 2010-07-29 12:50 - 00000000 ____D C:\Users\Notebook\Desktop\Hannes
2013-10-06 15:46 - 2009-07-14 18:58 - 00645740 _____ C:\Windows\System32\perfh007.dat
2013-10-06 15:46 - 2009-07-14 18:58 - 00127028 _____ C:\Windows\System32\perfc007.dat
2013-10-06 15:46 - 2009-07-14 06:13 - 01472002 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-06 15:40 - 2013-01-09 22:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-04 21:15 - 2010-04-30 09:35 - 00000000 ____D C:\Users\Notebook\AppData\Local\Mozilla
2013-10-04 20:10 - 2013-10-04 20:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-04 19:09 - 2013-02-25 18:57 - 00000000 ____D C:\Program Files (x86)\Origin

Files to move or delete:
====================
C:\ProgramData\9jzt727o.plz
C:\ProgramData\o727tzj9.ctrl
C:\ProgramData\o727tzj9.pff


Some content of TEMP:
====================
C:\Users\Notebook\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih.exe
C:\Users\Notebook\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Notebook\AppData\Local\Temp\~tmf5624884265661520678.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

7
Restore point made on: 2013-09-12 15:58:07
Restore point made on: 2013-09-17 16:20:48
Restore point made on: 2013-09-24 16:21:29
Restore point made on: 2013-09-27 19:07:57
Restore point made on: 2013-10-01 18:35:56
Restore point made on: 2013-10-08 07:40:03
Restore point made on: 2013-10-09 14:05:26

==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 3838.36 MB
Available physical RAM: 3250.75 MB
Total Pagefile: 3836.5 MB
Available Pagefile: 3263.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:282.19 GB) (Free:11.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:15.89 GB) (Free:3.55 GB) FAT32
Drive f: (USB-69) (Removable) (Total:0.94 GB) (Free:0.92 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: E14C13AA)
Partition 1: (Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=16 GB) - (Type=0C)

========================================================
Disk: 1 (Size: 964 MB) (Disk ID: 91F72D24)
Partition 1: (Not Active) - (Size=964 MB) - (Type=06)


LastRegBack: 2013-10-06 18:43

==================== End Of Log ============================

--- --- ---

GVU-Trojaner nach Windowsunlocker noch vorhanden

Plagegeister aller Art und deren Bekämpfung: GVU-Trojaner nach Windowsunlocker noch vorhanden

GVU-Trojaner nach Windowsunlocker noch vorhanden

Ähnliche Themen: GVU-Trojaner nach Windowsunlocker noch vorhanden