Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows 8.1: Interpol Trojaner

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 03.02.2015, 15:19   #1
Harvek
 
Windows 8.1: Interpol Trojaner - Standard

Windows 8.1: Interpol Trojaner



Hallo,
ich habe leider auch Probleme mit diesem blöden Interpol Trojaner.
Abgesicherter Modus in allen Formen bringt leider nichts.
Würde mich freuen wenn ihr mir helfen könnt

Habe schonmal eine FRST.txt erstellt:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by SYSTEM on MININT-A8VH92P on 03-02-2015 14:56:49
Running from d:\
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [UMonit64] => C:\Windows\SysWOW64\UMonit64.exe [40960 2013-04-09] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1686480 2015-01-20] (Bitdefender)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\Lenovo Y510p\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-01-20] (Bitdefender)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation)
Startup: C:\Users\Lenovo Y510p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\674A586E5.lnk
ShortcutTarget: 674A586E5.lnk -> C:\ProgramData\5E685A476.cpp (Xfire Inc.)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2015-01-20] (Bitdefender)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2014-11-02] (EasyAntiCheat Ltd)
S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S4 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
S2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-24] (Bitdefender)
S2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1545376 2015-01-20] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S4 Winmgmt; C:\ProgramData\674A586E5.zot [357376 2015-01-27] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-24] (BitDefender)
S3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [263032 2014-11-24] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-05-16] (BitDefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
S1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-11-19] (BitDefender LLC)
S1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2015-01-20] (BitDefender SRL)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
S5 GeneStor; C:\Windows\System32\Drivers\GeneStor.sys [91368 2013-03-22] (GenesysLogic)
S0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [155912 2015-01-20] (BitDefender LLC)
S1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [104912 2007-11-07] (EZB Systems, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-24] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 14:56 - 2015-02-03 14:56 - 00000000 ____D () C:\FRST
2015-01-27 09:14 - 2015-01-27 09:14 - 00003312 ____N () C:\bootsqm.dat
2015-01-27 08:59 - 2015-01-27 08:59 - 00357376 ____T () C:\ProgramData\674A586E5.zot
2015-01-27 08:56 - 2015-01-27 08:56 - 00184320 _____ (Xfire Inc.) C:\ProgramData\5E685A476.cpp
2015-01-26 22:58 - 2015-01-26 22:58 - 00000000 ____D () C:\Windows\SysWOW64\NV
2015-01-26 22:58 - 2015-01-26 22:58 - 00000000 ____D () C:\Windows\System32\NV
2015-01-26 22:57 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 18566296 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 16009120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 14115944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys
2015-01-26 22:57 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 02902456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6434725.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6434725.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00994712 _____ (NVIDIA Corporation) C:\Windows\System32\nvumdshimx.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00877488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00496456 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00390472 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-26 22:57 - 2015-01-10 09:07 - 00031376 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvpciflt.sys
2015-01-26 22:31 - 2015-01-26 22:58 - 00000000 ____D () C:\Windows\LastGood.Tmp
2015-01-26 22:31 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2015-01-26 22:31 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-01-25 19:25 - 2015-01-25 19:25 - 00000000 ____D () C:\Users\Lenovo Y510p\Documents\ImmV II HA
2015-01-25 19:18 - 2015-01-25 19:24 - 00000000 ____D () C:\Users\Lenovo Y510p\Desktop\ImmV II HA
2015-01-20 19:48 - 2015-01-20 19:48 - 00084336 _____ (BitDefender SRL) C:\Windows\System32\bdsandboxuiskin.dll
2015-01-20 19:48 - 2015-01-20 19:48 - 00074000 _____ (BitDefender SRL) C:\Windows\System32\bdsandboxuiskin32.dll
2015-01-15 16:46 - 2015-01-15 16:46 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2015-01-15 14:56 - 2015-01-27 09:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-14 13:20 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2015-01-14 13:20 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2015-01-14 13:20 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys
2015-01-14 13:20 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2015-01-14 13:20 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe
2015-01-14 13:20 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-01-14 13:20 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2015-01-14 13:20 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2015-01-14 13:20 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll
2015-01-14 13:20 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\System32\WerFault.exe
2015-01-14 13:20 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\System32\wermgr.exe
2015-01-14 13:20 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2015-01-14 13:20 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2015-01-14 13:20 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2015-01-14 13:20 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\System32\audiodg.exe
2015-01-14 13:20 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-01-14 13:20 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-01-14 13:20 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-14 13:20 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-14 13:20 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-14 13:20 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\werdiagcontroller.dll
2015-01-14 13:20 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-01-14 13:20 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\nlaapi.dll
2015-01-14 13:20 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2015-01-14 13:20 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-09 12:18 - 2015-01-10 20:11 - 00000000 ____D () C:\Users\Lenovo Y510p\Documents\Rauschgold Karten

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 14:09 - 2014-09-01 19:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2160930625-3128374917-632597292-1001
2015-02-03 14:09 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-03 14:07 - 2014-09-01 19:28 - 01238608 _____ () C:\Windows\WindowsUpdate.log
2015-02-03 14:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM
2015-02-03 14:02 - 2013-08-22 15:46 - 00036915 _____ () C:\Windows\setupact.log
2015-02-03 13:53 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\BBI
2015-01-27 17:18 - 2014-09-01 19:31 - 00000000 ____D () C:\users\Lenovo Y510p
2015-01-27 17:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sru
2015-01-26 22:59 - 2014-11-25 13:46 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-26 22:59 - 2014-11-25 13:45 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-26 22:59 - 2014-11-25 13:45 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-26 22:58 - 2014-09-01 20:33 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-26 22:58 - 2014-09-01 19:51 - 00000000 ____D () C:\Temp
2015-01-26 22:36 - 2014-09-01 19:32 - 01780340 _____ () C:\Windows\System32\PerfStringBackup.INI
2015-01-26 22:36 - 2013-08-23 00:24 - 00766620 _____ () C:\Windows\System32\perfh007.dat
2015-01-26 22:36 - 2013-08-23 00:24 - 00159902 _____ () C:\Windows\System32\perfc007.dat
2015-01-26 22:30 - 2014-09-01 19:15 - 00018622 _____ () C:\Windows\PFRO.log
2015-01-23 14:42 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-01-21 13:40 - 2014-09-02 13:30 - 00000000 ____D () C:\Windows\System32\MRT
2015-01-21 13:38 - 2014-09-02 13:30 - 113365784 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-01-20 19:47 - 2014-09-02 11:37 - 00082824 _____ (BitDefender SRL) C:\Windows\System32\Drivers\bdsandbox.sys
2015-01-20 19:47 - 2014-09-01 20:31 - 00033360 _____ (BitDefender SRL) C:\Windows\System32\bdsandboxuh.dll
2015-01-20 19:46 - 2014-09-02 11:29 - 00155912 _____ (BitDefender LLC) C:\Windows\System32\Drivers\gzflt.sys
2015-01-19 22:32 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 22:32 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-17 12:40 - 2015-01-03 18:51 - 00000000 ____D () C:\Users\Lenovo Y510p\Desktop\Zur Bachelorarbeit
2015-01-16 07:41 - 2014-09-01 20:33 - 01756424 _____ (NVIDIA Corporation) C:\Windows\System32\nvspbridge64.dll
2015-01-16 07:41 - 2014-09-01 20:33 - 01514528 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll
2015-01-16 07:41 - 2014-09-01 20:33 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-16 07:41 - 2014-09-01 20:33 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-15 22:54 - 2014-09-15 17:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-15 16:46 - 2014-09-01 19:51 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-01-12 14:57 - 2014-12-27 15:31 - 00000000 ____D () C:\Users\Lenovo Y510p\AppData\Roaming\Skype
2015-01-12 14:51 - 2014-12-13 14:34 - 00000000 ____D () C:\Users\Lenovo Y510p\AppData\Roaming\.minecraft
2015-01-10 09:07 - 2014-09-01 20:33 - 03298816 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll
2015-01-10 09:07 - 2014-09-01 20:33 - 00177624 _____ (NVIDIA Corporation) C:\Windows\System32\nvinitx.dll
2015-01-10 09:07 - 2014-09-01 20:33 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-10 09:07 - 2014-09-01 20:33 - 00027441 _____ () C:\Windows\System32\nvinfo.pb
2015-01-10 00:30 - 2014-09-01 20:33 - 06860432 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll
2015-01-10 00:30 - 2014-09-01 20:33 - 03517256 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll
2015-01-10 00:29 - 2014-09-01 20:33 - 02558608 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll
2015-01-10 00:29 - 2014-09-01 20:33 - 01097872 _____ (NVIDIA Corporation) C:\Windows\System32\nv3dappshext.dll
2015-01-10 00:29 - 2014-09-01 20:33 - 00935056 _____ (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
2015-01-10 00:29 - 2014-09-01 20:33 - 00629064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll
2015-01-10 00:29 - 2014-09-01 20:33 - 00385352 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll
2015-01-10 00:29 - 2014-09-01 20:33 - 00075080 _____ (NVIDIA Corporation) C:\Windows\System32\nv3dappshextr.dll
2015-01-10 00:29 - 2014-09-01 20:33 - 00062608 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll
2015-01-09 20:47 - 2014-09-01 20:33 - 04173527 _____ () C:\Windows\System32\nvcoproc.bin
2015-01-04 18:37 - 2014-11-03 11:59 - 00213504 ___SH () C:\Users\Lenovo Y510p\Desktop\Thumbs.db

Some content of TEMP:
====================
C:\Users\Lenovo Y510p\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Lenovo Y510p\AppData\Local\Temp\ose00000.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2014-09-15 12:27] - [2014-08-23 08:48] - 2374784 ____A (Microsoft Corporation) ACDBE1ED38167C8B01B8F63161BB2CEA

C:\Windows\SysWOW64\explorer.exe
[2014-09-15 12:27] - [2014-08-23 08:13] - 2084520 ____A (Microsoft Corporation) 195822ACCDAA2B4815DD01BAFC335595

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2014-11-11 20:27] - [2014-09-22 05:38] - 1519488 ____A (Microsoft Corporation) F0A117D19873FCDF801F082F33BFBB6C

C:\Windows\SysWOW64\User32.dll
[2014-11-11 20:27] - [2014-09-19 01:16] - 1346048 ____A (Microsoft Corporation) 5F333FDBF392850373C89BDA31EBEC1B

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-09-15 12:26] - [2014-06-19 03:13] - 0310080 ___AC (Microsoft Corporation) 64CA2B4A49A8EAF495E435623ECCE7DB


==================== Restore Points  =========================

Restore point made on: 2015-01-04 17:41:20
Restore point made on: 2015-01-13 14:48:16
Restore point made on: 2015-01-17 12:26:37
Restore point made on: 2015-01-20 19:06:22

==================== Memory info =========================== 

Percentage of memory in use: 18%
Total physical RAM: 4012.36 MB
Available physical RAM: 3266.09 MB
Total Pagefile: 4012.36 MB
Available Pagefile: 3329.06 MB
Total Virtual: 131072 MB
Available Virtual: 131071.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.45 GB) (Free:60.55 GB) NTFS
Drive d: () (Removable) (Total:0.12 GB) (Free:0.12 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.08 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 6E52F0BF)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 126.1 MB) (Disk ID: 00000000)

Partition: GPT Partition Type.


LastRegBack: 2015-01-27 09:03

==================== End Of Log ============================
         

 

Themen zu Windows 8.1: Interpol Trojaner
.dll, adobe, bitdefender, bitdefender 2015, defender, dll, explorer, file, firewall, geforce, karte, microsoft, mozilla, nvbackend, nvidia, realtek, registry, rundll, scan, services.exe, svchost.exe, system, system32, trojaner, windows, winlogon.exe, wireless




Ähnliche Themen: Windows 8.1: Interpol Trojaner


  1. Interpol Trojaner Windows 7
    Plagegeister aller Art und deren Bekämpfung - 12.11.2014 (28)
  2. Windows 7 x64: Sperrung durch Interpol-Trojaner / scramware
    Log-Analyse und Auswertung - 03.09.2014 (9)
  3. Windows 7 vermutlich mit Trojaner/ Virus BKA, Interpol
    Plagegeister aller Art und deren Bekämpfung - 03.07.2014 (3)
  4. Interpol Trojaner Windows 7 64 Bit , Schweiz
    Log-Analyse und Auswertung - 05.02.2014 (8)
  5. Interpol Trojaner Windows 7
    Log-Analyse und Auswertung - 10.01.2014 (31)
  6. Windows 7: Interpol Trojaner
    Plagegeister aller Art und deren Bekämpfung - 07.01.2014 (23)
  7. Windows Vista: Interpol Trojaner
    Log-Analyse und Auswertung - 04.01.2014 (11)
  8. GVU/Interpol Trojaner Windows 7
    Log-Analyse und Auswertung - 24.11.2013 (3)
  9. Windows 7: Bka-Interpol-Trojaner mit Sperrschirm
    Plagegeister aller Art und deren Bekämpfung - 09.11.2013 (5)
  10. Windows 7 Interpol Trojaner OTLPE Auswertung
    Log-Analyse und Auswertung - 04.11.2013 (15)
  11. Windows Vista - Interpol Trojaner mit Sperrschirm
    Log-Analyse und Auswertung - 24.10.2013 (11)
  12. Windows 7 Interpol Trojaner
    Log-Analyse und Auswertung - 18.10.2013 (13)
  13. Problem Interpol Trojaner Windows XP Pro
    Log-Analyse und Auswertung - 13.10.2013 (9)
  14. Interpol Trojaner, Windows 7
    Log-Analyse und Auswertung - 13.10.2013 (3)
  15. Windows XP Interpol Trojaner
    Log-Analyse und Auswertung - 06.10.2013 (1)
  16. Windows 7: Interpol Trojaner mit Bildschirmsperre
    Log-Analyse und Auswertung - 04.10.2013 (3)
  17. GVU/Interpol Trojaner auf Windows 7 64Bit
    Plagegeister aller Art und deren Bekämpfung - 22.09.2013 (13)

Zum Thema Windows 8.1: Interpol Trojaner - Hallo, ich habe leider auch Probleme mit diesem blöden Interpol Trojaner. Abgesicherter Modus in allen Formen bringt leider nichts. Würde mich freuen wenn ihr mir helfen könnt Habe schonmal eine - Windows 8.1: Interpol Trojaner...
Archiv
Du betrachtest: Windows 8.1: Interpol Trojaner auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.