![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows 8.1: Interpol TrojanerWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Windows 8.1: Interpol Trojaner Hallo, ich habe leider auch Probleme mit diesem blöden Interpol Trojaner. Abgesicherter Modus in allen Formen bringt leider nichts. Würde mich freuen wenn ihr mir helfen könnt ![]() Habe schonmal eine FRST.txt erstellt: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015 Ran by SYSTEM on MININT-A8VH92P on 03-02-2015 14:56:49 Running from d:\ Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log. Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [UMonit64] => C:\Windows\SysWOW64\UMonit64.exe [40960 2013-04-09] () HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1686480 2015-01-20] (Bitdefender) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\Lenovo Y510p\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-01-20] (Bitdefender) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation) Startup: C:\Users\Lenovo Y510p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\674A586E5.lnk ShortcutTarget: 674A586E5.lnk -> C:\ProgramData\5E685A476.cpp (Xfire Inc.) ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2015-01-20] (Bitdefender) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2014-11-02] (EasyAntiCheat Ltd) S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation) S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) S4 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation) S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation) S2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-24] (Bitdefender) S2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1545376 2015-01-20] (Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) S4 Winmgmt; C:\ProgramData\674A586E5.zot [357376 2015-01-27] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-24] (BitDefender) S3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [263032 2014-11-24] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-05-16] (BitDefender) S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender) S1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-11-19] (BitDefender LLC) S1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC) S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2015-01-20] (BitDefender SRL) S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.) S5 GeneStor; C:\Windows\System32\Drivers\GeneStor.sys [91368 2013-03-22] (GenesysLogic) S0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [155912 2015-01-20] (BitDefender LLC) S1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [104912 2007-11-07] (EZB Systems, Inc.) S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation) S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) S0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-24] (BitDefender S.R.L.) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-03 14:56 - 2015-02-03 14:56 - 00000000 ____D () C:\FRST 2015-01-27 09:14 - 2015-01-27 09:14 - 00003312 ____N () C:\bootsqm.dat 2015-01-27 08:59 - 2015-01-27 08:59 - 00357376 ____T () C:\ProgramData\674A586E5.zot 2015-01-27 08:56 - 2015-01-27 08:56 - 00184320 _____ (Xfire Inc.) C:\ProgramData\5E685A476.cpp 2015-01-26 22:58 - 2015-01-26 22:58 - 00000000 ____D () C:\Windows\SysWOW64\NV 2015-01-26 22:58 - 2015-01-26 22:58 - 00000000 ____D () C:\Windows\System32\NV 2015-01-26 22:57 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 18566296 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 16009120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 14115944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys 2015-01-26 22:57 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 02902456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6434725.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6434725.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00994712 _____ (NVIDIA Corporation) C:\Windows\System32\nvumdshimx.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00877488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00496456 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00390472 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-01-26 22:57 - 2015-01-10 09:07 - 00031376 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvpciflt.sys 2015-01-26 22:31 - 2015-01-26 22:58 - 00000000 ____D () C:\Windows\LastGood.Tmp 2015-01-26 22:31 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys 2015-01-26 22:31 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2015-01-25 19:25 - 2015-01-25 19:25 - 00000000 ____D () C:\Users\Lenovo Y510p\Documents\ImmV II HA 2015-01-25 19:18 - 2015-01-25 19:24 - 00000000 ____D () C:\Users\Lenovo Y510p\Desktop\ImmV II HA 2015-01-20 19:48 - 2015-01-20 19:48 - 00084336 _____ (BitDefender SRL) C:\Windows\System32\bdsandboxuiskin.dll 2015-01-20 19:48 - 2015-01-20 19:48 - 00074000 _____ (BitDefender SRL) C:\Windows\System32\bdsandboxuiskin32.dll 2015-01-15 16:46 - 2015-01-15 16:46 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_Kernel_btmaux_01009.Wdf 2015-01-15 14:56 - 2015-01-27 09:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-14 13:20 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys 2015-01-14 13:20 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe 2015-01-14 13:20 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys 2015-01-14 13:20 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll 2015-01-14 13:20 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe 2015-01-14 13:20 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2015-01-14 13:20 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll 2015-01-14 13:20 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll 2015-01-14 13:20 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll 2015-01-14 13:20 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\System32\WerFault.exe 2015-01-14 13:20 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\System32\wermgr.exe 2015-01-14 13:20 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll 2015-01-14 13:20 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll 2015-01-14 13:20 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll 2015-01-14 13:20 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\System32\audiodg.exe 2015-01-14 13:20 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2015-01-14 13:20 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2015-01-14 13:20 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2015-01-14 13:20 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2015-01-14 13:20 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2015-01-14 13:20 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\werdiagcontroller.dll 2015-01-14 13:20 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2015-01-14 13:20 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\nlaapi.dll 2015-01-14 13:20 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll 2015-01-14 13:20 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-01-09 12:18 - 2015-01-10 20:11 - 00000000 ____D () C:\Users\Lenovo Y510p\Documents\Rauschgold Karten ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-03 14:09 - 2014-09-01 19:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2160930625-3128374917-632597292-1001 2015-02-03 14:09 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-03 14:07 - 2014-09-01 19:28 - 01238608 _____ () C:\Windows\WindowsUpdate.log 2015-02-03 14:03 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM 2015-02-03 14:02 - 2013-08-22 15:46 - 00036915 _____ () C:\Windows\setupact.log 2015-02-03 13:53 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\System32\config\BBI 2015-01-27 17:18 - 2014-09-01 19:31 - 00000000 ____D () C:\users\Lenovo Y510p 2015-01-27 17:12 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\System32\sru 2015-01-26 22:59 - 2014-11-25 13:46 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-01-26 22:59 - 2014-11-25 13:45 - 00000000 ____D () C:\ProgramData\Oracle 2015-01-26 22:59 - 2014-11-25 13:45 - 00000000 ____D () C:\Program Files (x86)\Java 2015-01-26 22:58 - 2014-09-01 20:33 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-26 22:58 - 2014-09-01 19:51 - 00000000 ____D () C:\Temp 2015-01-26 22:36 - 2014-09-01 19:32 - 01780340 _____ () C:\Windows\System32\PerfStringBackup.INI 2015-01-26 22:36 - 2013-08-23 00:24 - 00766620 _____ () C:\Windows\System32\perfh007.dat 2015-01-26 22:36 - 2013-08-23 00:24 - 00159902 _____ () C:\Windows\System32\perfc007.dat 2015-01-26 22:30 - 2014-09-01 19:15 - 00018622 _____ () C:\Windows\PFRO.log 2015-01-23 14:42 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-01-21 13:40 - 2014-09-02 13:30 - 00000000 ____D () C:\Windows\System32\MRT 2015-01-21 13:38 - 2014-09-02 13:30 - 113365784 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe 2015-01-20 19:47 - 2014-09-02 11:37 - 00082824 _____ (BitDefender SRL) C:\Windows\System32\Drivers\bdsandbox.sys 2015-01-20 19:47 - 2014-09-01 20:31 - 00033360 _____ (BitDefender SRL) C:\Windows\System32\bdsandboxuh.dll 2015-01-20 19:46 - 2014-09-02 11:29 - 00155912 _____ (BitDefender LLC) C:\Windows\System32\Drivers\gzflt.sys 2015-01-19 22:32 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-19 22:32 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-17 12:40 - 2015-01-03 18:51 - 00000000 ____D () C:\Users\Lenovo Y510p\Desktop\Zur Bachelorarbeit 2015-01-16 07:41 - 2014-09-01 20:33 - 01756424 _____ (NVIDIA Corporation) C:\Windows\System32\nvspbridge64.dll 2015-01-16 07:41 - 2014-09-01 20:33 - 01514528 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll 2015-01-16 07:41 - 2014-09-01 20:33 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-01-16 07:41 - 2014-09-01 20:33 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-01-15 22:54 - 2014-09-15 17:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-15 16:46 - 2014-09-01 19:51 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-01-12 14:57 - 2014-12-27 15:31 - 00000000 ____D () C:\Users\Lenovo Y510p\AppData\Roaming\Skype 2015-01-12 14:51 - 2014-12-13 14:34 - 00000000 ____D () C:\Users\Lenovo Y510p\AppData\Roaming\.minecraft 2015-01-10 09:07 - 2014-09-01 20:33 - 03298816 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll 2015-01-10 09:07 - 2014-09-01 20:33 - 00177624 _____ (NVIDIA Corporation) C:\Windows\System32\nvinitx.dll 2015-01-10 09:07 - 2014-09-01 20:33 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-01-10 09:07 - 2014-09-01 20:33 - 00027441 _____ () C:\Windows\System32\nvinfo.pb 2015-01-10 00:30 - 2014-09-01 20:33 - 06860432 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll 2015-01-10 00:30 - 2014-09-01 20:33 - 03517256 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll 2015-01-10 00:29 - 2014-09-01 20:33 - 02558608 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll 2015-01-10 00:29 - 2014-09-01 20:33 - 01097872 _____ (NVIDIA Corporation) C:\Windows\System32\nv3dappshext.dll 2015-01-10 00:29 - 2014-09-01 20:33 - 00935056 _____ (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe 2015-01-10 00:29 - 2014-09-01 20:33 - 00629064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll 2015-01-10 00:29 - 2014-09-01 20:33 - 00385352 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll 2015-01-10 00:29 - 2014-09-01 20:33 - 00075080 _____ (NVIDIA Corporation) C:\Windows\System32\nv3dappshextr.dll 2015-01-10 00:29 - 2014-09-01 20:33 - 00062608 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll 2015-01-09 20:47 - 2014-09-01 20:33 - 04173527 _____ () C:\Windows\System32\nvcoproc.bin 2015-01-04 18:37 - 2014-11-03 11:59 - 00213504 ___SH () C:\Users\Lenovo Y510p\Desktop\Thumbs.db Some content of TEMP: ==================== C:\Users\Lenovo Y510p\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\Lenovo Y510p\AppData\Local\Temp\ose00000.exe ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2014-09-15 12:27] - [2014-08-23 08:48] - 2374784 ____A (Microsoft Corporation) ACDBE1ED38167C8B01B8F63161BB2CEA C:\Windows\SysWOW64\explorer.exe [2014-09-15 12:27] - [2014-08-23 08:13] - 2084520 ____A (Microsoft Corporation) 195822ACCDAA2B4815DD01BAFC335595 C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll [2014-11-11 20:27] - [2014-09-22 05:38] - 1519488 ____A (Microsoft Corporation) F0A117D19873FCDF801F082F33BFBB6C C:\Windows\SysWOW64\User32.dll [2014-11-11 20:27] - [2014-09-19 01:16] - 1346048 ____A (Microsoft Corporation) 5F333FDBF392850373C89BDA31EBEC1B C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys [2014-09-15 12:26] - [2014-06-19 03:13] - 0310080 ___AC (Microsoft Corporation) 64CA2B4A49A8EAF495E435623ECCE7DB ==================== Restore Points ========================= Restore point made on: 2015-01-04 17:41:20 Restore point made on: 2015-01-13 14:48:16 Restore point made on: 2015-01-17 12:26:37 Restore point made on: 2015-01-20 19:06:22 ==================== Memory info =========================== Percentage of memory in use: 18% Total physical RAM: 4012.36 MB Available physical RAM: 3266.09 MB Total Pagefile: 4012.36 MB Available Pagefile: 3329.06 MB Total Virtual: 131072 MB Available Virtual: 131071.87 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.45 GB) (Free:60.55 GB) NTFS Drive d: () (Removable) (Total:0.12 GB) (Free:0.12 GB) FAT Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS Drive y: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.08 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 6E52F0BF) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.4 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 126.1 MB) (Disk ID: 00000000) Partition: GPT Partition Type. LastRegBack: 2015-01-27 09:03 ==================== End Of Log ============================ |
Themen zu Windows 8.1: Interpol Trojaner |
.dll, adobe, bitdefender, bitdefender 2015, defender, dll, explorer, file, firewall, geforce, karte, microsoft, mozilla, nvbackend, nvidia, realtek, registry, rundll, scan, services.exe, svchost.exe, system, system32, trojaner, windows, winlogon.exe, wireless |