Trojaner-Board - verdächtigte ZIP datei

Code:

Startzeit        Art        Titel        Status

2017-04-26 12:05:09        Virenprüfung                Fertig (Virenfund)
 

Virenprüfung mit G DATA INTERNET SECURITY

Version 25.3.0.3 (20.10.2016)

Virensignaturen vom 26.04.2017

Startzeit: 26.04.2017 12:05:09

Engine(s): Engine A (AVA 25.12075), Engine B (GD 25.9396)

Heuristik: Ein

Archive: Ein

Systembereiche: Ein

RootKits prüfen: Ein
 

Prüfung der Systembereiche...

Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart...

Prüfung auf RootKits...

Prüfung aller lokalen Festplatten...

Analyse vollständig durchgeführt: 26.04.2017 12:10:45

    215682 Dateien überprüft

    1 infizierte Dateien gefunden

    0 verdächtige Dateien gefunden
 
 

Archiv: Doreen Hauczinger.zip

        Pfad: C:\Users\Doreen\AppData\Local\Temp

        Status: Virus, Datei gelöscht

        Virus: Gen:Variant.Razy.166498 (Engine A)

Objekt: Doreen Hauczinger.zip=>Doreen Hauczinger.com

        In Archiv: C:\Users\Doreen\AppData\Local\Temp\Doreen Hauczinger.zip

        Status: Virus gefunden

        Virus: Gen:Variant.Razy.166498
 

Der Zugriff auf die folgenden Dateien wurde verweigert:

C:\WINDOWS\appcompat\Programs\Amcache.hve

C:\WINDOWS\appcompat\Programs\Amcache.hve.LOG1

C:\WINDOWS\appcompat\Programs\Amcache.hve.LOG2

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96.mss

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_01.mss

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_09.mss

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_05.mss

C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.jfm

C:\WINDOWS\System32\config\BBI

C:\WINDOWS\System32\config\BBI.LOG1

C:\WINDOWS\System32\config\BBI.LOG2

C:\WINDOWS\System32\config\DRIVERS.LOG1

C:\WINDOWS\System32\config\DRIVERS

C:\WINDOWS\System32\config\DRIVERS.LOG2

C:\WINDOWS\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTSteam Event Tracing.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTSteam Event Tracing.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat.LOG1

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat.LOG2

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat{2883fd65-1438-11e5-830a-448a5b9ca7a3}.TM.blf

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat{2883fd65-1438-11e5-830a-448a5b9ca7a3}.TMContainer00000000000000000001.regtrans-ms

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat{2883fd65-1438-11e5-830a-448a5b9ca7a3}.TMContainer00000000000000000002.regtrans-ms

C:\WINDOWS\Temp\JET2049.tmp

C:\swapfile.sys

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\01eb0a8d069cdbac8e3eb14ebaa62566_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\01ba905e34e7f082b976f0ec44365835_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0413ec81386b2eb133d461e8b83ea4a0_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\07b59399a0c15324f385ec53d8ed7bbc_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08c7d66bea49605b16e07eb410113409_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0a7c9194ed28078f8f3486a9e8aa7397_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d04776cf8d403bce969e95ff97f9e87_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\14081082b207cce2db95e5b1f217f2cd_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\18bf60b87523cd3410f45892699c8df0_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1e8ebb4393ef7d3bc58d189d0a55405d_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1e997efb8e4c4cf9d41543d0a2007aef_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\21632de7888492be28bc6c97e07d7dc5_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2acb34cb4f433a85a9bdcbeb591d6445_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2bb4a221ad2b9608245a8c2c1a3b8919_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2df79b3c44a86a66c9640c762c8c43bd_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2fa1bf0539dbf9fb996aac4089bac731_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3069db334bef442871a5ad983f15d80e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\309379d416463545f35a9580238b5913_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\30a829804d6c2f1dcc23c80e66f732f7_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3503377167f9d8a920629ca7e2874ac2_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\334551d8ac1b12a2877711d308014add_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3aaf6ca529009c5490fafdea822a1145_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3b606bd0780a9fbf194db37ce74200ba_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3cefec3e25bb4cb6c4b220c50a80216e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f05cc5fe851cf98d69b27eb8845a9de_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e7d10074283e00bcdfced593d1f6d75_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\41188210e7e1cd93da9a25367328b676_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\439ea1c034220ab5ebcbc3a706c3b5c6_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4468a93bbd3d034806c3d44fffbadd47_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\468891e36228659e40a5eebcefd002e2_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\499060a11e8d6052cea626f5d0298398_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a20774be384f9d44f81ef748d9efa4f_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4b3f1eb27f52847ebea3923a327e4a28_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4ea5c919b0ed7407b29bce03521f789d_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\54222fc1b983ef69765c397dd7d6ef32_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5998f5d1d50313cacfcb32edf79a464e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5faa6a9818dde229d2c7e16610dc3e4b_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6657102e56905e766d3084c864e44886_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\67aeef6046b76f09170c14973330df08_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\682d5c45bb8c0115d2fef9f9a9ae6096_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\687b2eaae9125e59c2ab7491c7a26ad6_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\68f023ecccc58dc9da58b2becb536991_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6a2d1baebc4c8434abd8a40e0872d2fe_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6c872930d77b04aae789921fa1c4430b_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7465828c7373cce45fc451bd98004207_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\778042fc84bae3e2953dcd491904e888_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7870924e0351951e107716f909d4e78b_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7b3fd7485e6ed5b2f964135b6e3ab003_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7e9fae7fc20cb8af0e1ca3aa94e5ed9d_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8070329e0ac7672045aa3992cb68d414_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\85bf141aa7e4a45c77c5c3e311d3b939_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\91bbf474f54915c9167b6a505d52cc8e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\93c2fc36ca7c1394099d202212445a79_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9b5ecb8fbeba7e84f9bbe912d1ff56c6_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b15dd21ab42f7078a4c54a92831f379b_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b1c1a2ce7183803d1f589b89fc089686_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b212da7f09838e3a1647dae812e39a00_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b7bbc7f1e55f08719e6e7d3e49181904_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ba13ded2bc5f36b36e40aa2611948908_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bae9159ca8d1cc99e5acfc10b639a3f1_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bbfbf1dbbe4285eee699c50419e3b53e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bdd35636ce4cd2f3a148125b05ffc385_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c1c82b1901390886dac892d0f480cbd1_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c42159020c11e6377b317b3ed4e54feb_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cc5bb50908aa6bae3ee0100c841a1b30_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ecdba8b139eb88bf441110847ba987c_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d39ecbb14c8be5b3c93114358ec99ff5_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6158f722e0e8462867775eeacfc8466_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6219467a54ee83d8d910977c38f3922_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d947db9e286c8702e9627da99a170ee5_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\da6fc17dfa1c07a88fe81d4d81b42758_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e0b95785165f8c30f72c692a55ff4912_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e4294f421316f9c586c8b608a3acce4d_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e7c1bac9fb637d8969e44ae71a713217_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eda10add1899bfb9d1125d089fb9ff54_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ef56f850746fb05a3ecd65be110d5fa1_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f1a3e5992295a32533f0bcccba47c6a3_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f1f6b7da4852ab4b8c68e993e6976d53_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f450639a916960e03c0e48a4fa815fd6_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fb39781a2cdbfd3dc0f41737161d0f9a_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Diagnosis\Events_CostDeferred.rbs

C:\ProgramData\Microsoft\Diagnosis\Events_NormalCritical.rbs

C:\ProgramData\Microsoft\Diagnosis\Events_Realtime.rbs

C:\ProgramData\Microsoft\Diagnosis\Events_Normal.rbs

C:\ProgramData\Microsoft\Diagnosis\parse.dat

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\TELEMETRY.ASM-WINDOWSSQ.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.bk

C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\D07608B3-85CE-11E4-824B-806E6F6E6963-0.bin

C:\ProgramData\TuneUp Software\TuneUp Utilities 2014\TTUSvc.tt

C:\System Volume Information\IndexerVolumeGuid

C:\System Volume Information\MountPointManagerRemoteDatabase

C:\System Volume Information\WPSettings.dat

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\store.jfm

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\store.vol

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\tmp.edb

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\USS.jtx

C:\Users\Doreen\AppData\Local\Microsoft\OneDrive\logs\Common\telemetryCache.otc

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCacheLock.dat

C:\Users\Doreen\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCache\V01.log

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_0

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_2

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_1

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_3

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\index

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\DataRv\offline-storage-ecs.data

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\DataRv\offline-storage.data

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\bistats.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\dcons.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\eascache.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\main.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\msn.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\statistics.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.LOG1

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.LOG2

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG1

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG2

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_0_0.bin

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_0_0.toc

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_1_0.bin

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_1_0.toc

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_1_1.bin

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_1_1.toc

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\EDB.log

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\EDBtmp.log

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\vedatamodel.jfm

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\vedatamodel.edb

C:\Users\Doreen\AppData\Roaming\Mozilla\Firefox\Profiles\jbg1rzuz.default\parent.lock
 

Die folgenden Dateien sind Passwortgeschützt:

C:\ProgramData\Soda PDF 7\Installation\statistic.xml

Code:

Startzeit        Art        Titel        Status

2017-04-26 18:09:37        Virenprüfung                Fertig
 

Virenprüfung mit G DATA INTERNET SECURITY

Version 25.3.0.3 (20.10.2016)

Virensignaturen vom 26.04.2017

Startzeit: 26.04.2017 18:09:37

Engine(s): Engine A (AVA 25.12079), Engine B (GD 25.9396)

Heuristik: Ein

Archive: Ein

Systembereiche: Ein

RootKits prüfen: Ein
 

Prüfung der Systembereiche...

Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart...

Prüfung auf RootKits...

Prüfung aller lokalen Festplatten...

Analyse vollständig durchgeführt: 26.04.2017 18:10:57

    235226 Dateien überprüft

    0 infizierte Dateien gefunden

    0 verdächtige Dateien gefunden
 
 

Der Zugriff auf die folgenden Dateien wurde verweigert:

C:\WINDOWS\appcompat\Programs\Amcache.hve.LOG2

C:\WINDOWS\appcompat\Programs\Amcache.hve.LOG1

C:\WINDOWS\appcompat\Programs\Amcache.hve

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_05.mss

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_01.mss

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_09.mss

C:\WINDOWS\Resources\Themes\aero\VSCache\Aero.msstyles_1031_96_03.mss

C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.jfm

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edbtmp.log

C:\WINDOWS\System32\config\DRIVERS

C:\WINDOWS\System32\config\BBI.LOG2

C:\WINDOWS\System32\config\BBI

C:\WINDOWS\System32\config\BBI.LOG1

C:\WINDOWS\System32\config\DRIVERS.LOG1

C:\WINDOWS\System32\config\DRIVERS.LOG2

C:\WINDOWS\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTSteam Event Tracing.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat.LOG2

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat{2883fd65-1438-11e5-830a-448a5b9ca7a3}.TM.blf

C:\WINDOWS\System32\Microsoft\Protect\Recovery\Recovery.dat{2883fd65-1438-11e5-830a-448a5b9ca7a3}.TMContainer00000000000000000001.regtrans-ms

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTSteam Event Tracing.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl

C:\WINDOWS\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl

C:\WINDOWS\Temp\JET19C1.tmp

C:\swapfile.sys

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\01ba905e34e7f082b976f0ec44365835_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0413ec81386b2eb133d461e8b83ea4a0_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\07b59399a0c15324f385ec53d8ed7bbc_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08c7d66bea49605b16e07eb410113409_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\18bf60b87523cd3410f45892699c8df0_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d04776cf8d403bce969e95ff97f9e87_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1e8ebb4393ef7d3bc58d189d0a55405d_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1e997efb8e4c4cf9d41543d0a2007aef_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2bb4a221ad2b9608245a8c2c1a3b8919_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2df79b3c44a86a66c9640c762c8c43bd_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3069db334bef442871a5ad983f15d80e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\309379d416463545f35a9580238b5913_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\30a829804d6c2f1dcc23c80e66f732f7_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3503377167f9d8a920629ca7e2874ac2_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3b606bd0780a9fbf194db37ce74200ba_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e7d10074283e00bcdfced593d1f6d75_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f05cc5fe851cf98d69b27eb8845a9de_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\439ea1c034220ab5ebcbc3a706c3b5c6_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\468891e36228659e40a5eebcefd002e2_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a20774be384f9d44f81ef748d9efa4f_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\54222fc1b983ef69765c397dd7d6ef32_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5998f5d1d50313cacfcb32edf79a464e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6657102e56905e766d3084c864e44886_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\682d5c45bb8c0115d2fef9f9a9ae6096_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6c872930d77b04aae789921fa1c4430b_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\68f023ecccc58dc9da58b2becb536991_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\778042fc84bae3e2953dcd491904e888_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7b3fd7485e6ed5b2f964135b6e3ab003_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7e9fae7fc20cb8af0e1ca3aa94e5ed9d_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9b5ecb8fbeba7e84f9bbe912d1ff56c6_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\93c2fc36ca7c1394099d202212445a79_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b212da7f09838e3a1647dae812e39a00_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b1c1a2ce7183803d1f589b89fc089686_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ba13ded2bc5f36b36e40aa2611948908_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bbfbf1dbbe4285eee699c50419e3b53e_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c42159020c11e6377b317b3ed4e54feb_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6219467a54ee83d8d910977c38f3922_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6158f722e0e8462867775eeacfc8466_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d947db9e286c8702e9627da99a170ee5_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\da6fc17dfa1c07a88fe81d4d81b42758_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e7c1bac9fb637d8969e44ae71a713217_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ef56f850746fb05a3ecd65be110d5fa1_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f1a3e5992295a32533f0bcccba47c6a3_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fb39781a2cdbfd3dc0f41737161d0f9a_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Diagnosis\Events_NormalCritical.rbs

C:\ProgramData\Microsoft\Diagnosis\Events_CostDeferred.rbs

C:\ProgramData\Microsoft\Diagnosis\Events_Realtime.rbs

C:\ProgramData\Microsoft\Diagnosis\parse.dat

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\TELEMETRY.ASM-WINDOWSSQ.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json

C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json.bk

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.jtx

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.jfm

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edbtmp.jtx

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ecdba8b139eb88bf441110847ba987c_c596a4f9-6865-4460-ba55-c9d495111f35

C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\D07608B3-85CE-11E4-824B-806E6F6E6963-0.bin

C:\ProgramData\TuneUp Software\TuneUp Utilities 2014\TTUSvc.tt

C:\System Volume Information\MountPointManagerRemoteDatabase

C:\System Volume Information\WPSettings.dat

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\tmp.edb

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\store.vol

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\store.jfm

C:\Users\Doreen\AppData\Local\Comms\UnistoreDB\USS.jtx

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCacheLock.dat

C:\Users\Doreen\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat

C:\Users\Doreen\AppData\Local\Microsoft\Windows\WebCache\V01.log

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_3

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_0

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_2

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\data_1

C:\Users\Doreen\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\Cache\index

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\DataRv\offline-storage-ecs.data

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\DataRv\offline-storage.data

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\bistats.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\dcons.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\eascache.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\main.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\statistics.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\LocalState\live#3adoreen.hauczinger_1\msn.lock

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.LOG1

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat

C:\Users\Doreen\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.LOG2

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG1

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG2

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2

C:\Users\Doreen\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat

C:\Users\Doreen\AppData\Local\Temp\JET13DD.tmp

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_0_0.toc

C:\Users\Doreen\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\44862b2a6c7f36fcc9cfa221f47d3e70_fce8395c8fd8a98b_15f74c7777689be5_0_0.bin

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\EDB.log

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\vedatamodel.edb

C:\Users\Doreen\AppData\Local\TileDataLayer\Database\vedatamodel.jfm

C:\Users\Doreen\AppData\Roaming\Mozilla\Firefox\Profiles\ag913f3j.default-1493221800482\parent.lock
 

Die folgenden Dateien sind Passwortgeschützt:

C:\ProgramData\Soda PDF 7\Installation\statistic.xml