Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
GVU Trojaner eingefangen

GVU Trojaner eingefangen


Plagegeister aller Art und deren Bekämpfung: GVU Trojaner eingefangen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 11.06.2013, 09:31   #1
Gilligan
 
GVU Trojaner eingefangen - Standard

GVU Trojaner eingefangen


Hi Team,

nachdem ich die Suchbegriffe "Computer gesperrt Paysafe" eingegeben hatte bin ich quasi direkt bei Euch gelandet. Ich habe ein paar Threads zum Thema gelesen und schonmal erste Schritte unternommen, die immer empfohlen/gefordert wurden.

Also mein Notebook (Win 7 Ultimate 64Bit) macht nix mehr im normalen Modus und nicht im abgesicherten Modus. Im normalen Modus gibts nur den Bildschirm mit der Bezahlaufforderung und im abgesicherten Modus startet das Ding neu.

Ich habe die OLTPE Disk erstellt und und einen Scan mit den Einstellungen "Remote User for Scanning" und "Load all remaining users" bei Minimalem Output gemacht.

Bitte helft mir.
Vielen Dank im Voraus.

Hier das Ergebnis des Scans: (ich konnte die Datei nicht anhängen, da sie 137K groß ist)OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 6/11/2013 11:03:59 AM - Run 
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
64bit-Windows 7 Ultimate Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 88.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files (x86)
Drive C: | 752.00 Mb Total Space | 526.54 Mb Free Space | 70.02% Space Free | Partition Type: NTFS
Drive D: | 697.86 Gb Total Space | 274.09 Gb Free Space | 39.28% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (avmike) -- D:\Program Files\FRITZ!Fernzugang\avmike.exe (AVM Berlin)
SRV:64bit: - (nwtsrv) -- D:\Program Files\FRITZ!Fernzugang\nwtsrv.exe (AVM Berlin)
SRV:64bit: - (certsrv) -- D:\Program Files\FRITZ!Fernzugang\certsrv.exe (AVM Berlin)
SRV:64bit: - (Wave Authentication Manager Service) -- D:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe (Wave Systems Corp.)
SRV:64bit: - (TdmService) -- D:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe (Wave Systems Corp.)
SRV:64bit: - (SecureStorageService) -- D:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Secure Storage Manager\SecureStorageService.exe (Wave Systems Corp.)
SRV:64bit: - (Credential Vault Host Control Service) -- D:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (Broadcom Corporation)
SRV:64bit: - (Credential Vault Host Storage) -- D:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (Broadcom Corporation)
SRV:64bit: - (dcpsysmgrsvc) -- D:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe (Dell Inc.)
SRV:64bit: - (STacSV) -- D:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (EvtEng) Intel(R) -- D:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV:64bit: - (ZcfgSvc7) Intel(R) -- D:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe (Intel(R) Corporation)
SRV:64bit: - (RegSrvc) Intel(R) -- D:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV:64bit: - (wlcrasvc) -- D:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (Intel(R) PROSet Monitoring Service) Intel(R) -- D:\Windows\System32\IPROSetMonitor.exe (Intel Corporation)
SRV:64bit: - (O2FLASH) -- D:\Windows\System32\drivers\o2flash.exe (O2Micro International)
SRV:64bit: - (lmab_device) -- D:\Windows\System32\LMabcoms.exe ( )
SRV:64bit: - (WinDefend) -- D:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) -- D:\Windows\System32\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (AESTFilters) -- D:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (UtilityChest_49Service) -- D:\Program Files (x86)\UtilityChest_49\bar\1.bin\49barsvc.exe (COMPANYVERS_NAME)
SRV - (MozillaMaintenance) -- D:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- D:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (FLEXnet Licensing Service) -- D:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (SkypeUpdate) -- D:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (HTCMonitorService) -- D:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Nero AG)
SRV - (PassThru Service) -- D:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe ()
SRV - (vpnagent) -- D:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Cisco Systems, Inc.)
SRV - (VMware NAT Service) -- D:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)
SRV - (VMnetDHCP) -- D:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)
SRV - (VMAuthdService) -- D:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.)
SRV - (VMUSBArbService) -- D:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe (VMware, Inc.)
SRV - (nvUpdatusService) -- D:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- D:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (jhi_service) Intel(R) -- D:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Intel Corporation)
SRV - (tcsd_win32.exe) -- D:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe ()
SRV - (UNS) Intel(R) -- D:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel(R) -- D:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (RoxWatch12) -- D:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe (Sonic Solutions)
SRV - (RoxMediaDB12OEM) -- D:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe (Sonic Solutions)
SRV - (IAStorDataMgrSvc) Intel(R) -- D:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- D:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (lmab_device) -- D:\Windows\SysWow64\LMabcoms.exe ( )
SRV - (clr_optimization_v2.0.50727_32) -- D:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (O2SDIOAssist) -- D:\Windows\SysWOW64\srvany.exe ()
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (ssudmdm) SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.) -- D:\Windows\System32\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.) -- D:\Windows\System32\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (dc3d) MS Hardware Device Detection Driver (USB) -- D:\Windows\System32\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (vpnva) -- D:\Windows\System32\drivers\vpnva64.sys (Cisco Systems, Inc.)
DRV:64bit: - (acsock) -- D:\Windows\System32\drivers\acsock64.sys (Cisco Systems, Inc.)
DRV:64bit: - (VMparport) -- D:\Windows\System32\drivers\VMparport.sys (VMware, Inc.)
DRV:64bit: - (vmx86) -- D:\Windows\System32\drivers\vmx86.sys (VMware, Inc.)
DRV:64bit: - (vmkbd) -- D:\Windows\System32\drivers\VMkbd.sys (VMware, Inc.)
DRV:64bit: - (VMnetuserif) -- D:\Windows\System32\drivers\vmnetuserif.sys (VMware, Inc.)
DRV:64bit: - (VMnetBridge) -- D:\Windows\System32\drivers\vmnetbridge.sys (VMware, Inc.)
DRV:64bit: - (VMnetAdapter) -- D:\Windows\System32\drivers\vmnetadapter.sys (VMware, Inc.)
DRV:64bit: - (swmsflt) -- D:\Windows\System32\drivers\swmsflt.sys ()
DRV:64bit: - (hcmon) -- D:\Windows\System32\drivers\hcmon.sys (VMware, Inc.)
DRV:64bit: - (vmusb) -- D:\Windows\System32\drivers\vmusb.sys (VMware, Inc.)
DRV:64bit: - (vmci) -- D:\Windows\System32\drivers\vmci.sys (VMware, Inc.)
DRV:64bit: - (e1cexpress) Intel(R) -- D:\Windows\System32\drivers\e1c62x64.sys (Intel Corporation)
DRV:64bit: - (NWIM) -- D:\Windows\System32\drivers\avmnwim.sys (AVM Berlin)
DRV:64bit: - (igfx) -- D:\Windows\System32\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (nvpciflt) -- D:\Windows\System32\drivers\nvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (cvusbdrv) -- D:\Windows\System32\drivers\cvusbdrv.sys (Broadcom Corporation)
DRV:64bit: - (NVHDA) -- D:\Windows\System32\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (ApfiltrService) -- D:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (O2SDJRDR) -- D:\Windows\System32\drivers\o2sdjw7x64.sys (O2Micro )
DRV:64bit: - (WDC_SAM) -- D:\Windows\System32\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (STHDA) -- D:\Windows\System32\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (O2MDRRDR) -- D:\Windows\System32\drivers\O2MDRw7x64.sys (O2Micro )
DRV:64bit: - (O2MDFRDR) -- D:\Windows\system32\drivers\O2MDFw7x64.sys (O2Micro )
DRV:64bit: - (NETwNs64) ___ Intel(R) -- D:\Windows\System32\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (Acceler) -- D:\Windows\System32\drivers\Accelern.sys (ST Microelectronics)
DRV:64bit: - (RdpVideoMiniport) -- D:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- D:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (netvsc) -- D:\Windows\System32\drivers\netvsc60.sys (Microsoft Corporation)
DRV:64bit: - (tsusbhub) -- D:\Windows\system32\drivers\tsusbhub.sys (Microsoft Corporation)
DRV:64bit: - (Synth3dVsc) -- D:\Windows\system32\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- D:\Windows\system32\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) -- D:\Windows\system32\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (SynthVid) -- D:\Windows\System32\drivers\VMBusVideoM.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- D:\Windows\system32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (vpcvmm) -- D:\Windows\System32\drivers\vpcvmm.sys (Microsoft Corporation)
DRV:64bit: - (vpcbus) -- D:\Windows\System32\drivers\vpchbus.sys (Microsoft Corporation)
DRV:64bit: - (vpcusb) -- D:\Windows\System32\drivers\vpcusb.sys (Microsoft Corporation)
DRV:64bit: - (vpcnfltr) -- D:\Windows\System32\drivers\vpcnfltr.sys (Microsoft Corporation)
DRV:64bit: - (nusb3xhc) -- D:\Windows\System32\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) -- D:\Windows\System32\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (MEIx64) Intel(R) -- D:\Windows\System32\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (NAL) -- D:\Windows\System32\drivers\iqvw64e.sys (Intel Corporation )
DRV:64bit: - (stdcfltn) -- D:\Windows\System32\drivers\stdcfltn.sys (ST Microelectronics)
DRV:64bit: - (PBADRV) -- D:\Windows\System32\drivers\PBADRV.SYS (Dell Inc)
DRV:64bit: - (PxHlpa64) -- D:\Windows\System32\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (Impcd) -- D:\Windows\system32\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (HTCAND64) -- D:\Windows\System32\drivers\ANDROIDUSB.sys (HTC, Corporation)
DRV:64bit: - (CtClsFlt) -- D:\Windows\System32\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (usb_rndisx) -- D:\Windows\System32\drivers\usb8023x.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- D:\Windows\System32\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- D:\Windows\system32\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- D:\Windows\system32\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- D:\Windows\System32\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (mcdbus) -- D:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:64bit: - (SWUMX80) Sierra Wireless USB MUX Driver (UMTS80) -- D:\Windows\System32\drivers\swumx80.sys (Sierra Wireless Inc.)
DRV:64bit: - (SWNC8U80) Sierra Wireless MUX NDIS Driver (UMTS80) -- D:\Windows\System32\drivers\swnc8u80.sys (Sierra Wireless Inc.)
DRV - (FsUsbExDisk) -- D:\Windows\SysWOW64\FsUsbExDisk.Sys ()
DRV - (mcdbus) -- D:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\Gilligan_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USREL/8
IE - HKU\Gilligan_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/
IE - HKU\Gilligan_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\Windows\System32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: D:\Windows\System32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: D:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_39: D:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE: D:\Windows\SysWOW64\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: D:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: D:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision: D:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming: D:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@UtilityChest_49.com/Plugin: D:\Program Files (x86)\UtilityChest_49\bar\1.bin\NP49Stub.dll (MindSpark)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: D:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\extensions\\49ffxtbr@UtilityChest_49.com: C:\Program Files (x86)\UtilityChest_49\bar\1.bin [2013/05/30 09:05:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2013/05/22 14:01:47 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files (x86)\Mozilla Firefox\extensions
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (Skype Click to Call) -- D:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
[2013/05/22 14:01:47 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/05/22 14:01:47 | 000,000,000 | ---D | M] (Default) -- D:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files (x86)\Mozilla Firefox\distribution\extensions
[2013/05/22 14:01:42 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- D:\Program Files (x86)\Mozilla Firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
 
O1 HOSTS File: ([2013/02/06 09:50:28 | 000,000,847 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 10.181.1.10    bprmsg001
O2:64bit: - BHO: (no name) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - No CLSID value found.
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKU\Gilligan_ON_D\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\Gilligan_ON_D\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Apoint] D:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [FreeFallProtection] D:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [IntelPROSet] D:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [NVHotkey] D:\Windows\System32\nvHotkey.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] D:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [TdmNotify] D:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe (Wave Systems Corp.)
O4:64bit: - HKLM..\Run: [Utility Chest Home Page Guard 64 bit] D:\Program Files (x86)\UtilityChest_49\bar\1.bin\AppIntegrator64.exe ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] D:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] D:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] D:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] D:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] D:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [IAStorIcon] D:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [IMSS] D:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation)
O4 - HKLM..\Run: [KiesTrayAgent] D:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [PDVD9LanguageShortcut] D:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] D:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] D:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKLM..\Run: [Utility Chest Search Scope Monitor] D:\Program Files (x86)\UtilityChest_49\bar\1.bin\49SrchMn.exe (MindSpark)
O4 - HKU\Administrator_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\UpdatusUser_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\Administrator_ON_D..\RunOnce: [mctadmin] File not found
O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin] File not found
O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin] File not found
O4 - HKU\UpdatusUser_ON_D..\RunOnce: [mctadmin] File not found
O4 - Startup: Error locating startup folders.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000011 - D:\Windows\System32\vsocklib.dll (VMware, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000012 - D:\Windows\System32\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - D:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - D:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
O13:64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - ..Trusted Domains: affiniagroup.com ([inside] http in Lokales Intranet)
O15:64bit: - ..Trusted Domains: deutsche-bank.com ([www.db-bankline] https in Vertrauenswürdige Sites)
O15:64bit: - ..Trusted Domains: heidler-strichcode.de ([www] ftp in Vertrauenswürdige Sites)
O15:64bit: - ..Trusted Domains: heidler-strichcode.de ([www] http in Vertrauenswürdige Sites)
O15:64bit: - ..Trusted Domains: qhdaxadb1 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdaxadb1 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhddom01 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhddom01 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhddom03 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhddom03 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdfile01 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdfile01 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm01 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm01 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm02 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm02 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm03 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm03 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm04 ([]file in Lokales Intranet)
O15:64bit: - ..Trusted Domains: qhdterm04 ([]https in Lokales Intranet)
O15:64bit: - ..Trusted Domains: timax.co.uk ([www] https in Lokales Intranet)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {538793D5-659C-4639-A56C-A179AD87ED44} https://109.174.149.210/CACHE/stc/1/binaries/vpnweb.cab (Cisco AnyConnect Secure Mobility Client Web Control)
O16 - DPF: {55963676-2F5E-4BAF-AC28-CF26AA587566} https://109.174.149.210/CACHE/stc/1/binaries/vpnweb.cab (Cisco AnyConnect VPN Client Web Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.webex.com/client/WBXclient-T27L10NSP31-13320/webex/ieatgpc1.cab (GpcContainer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - D:\Windows\System32\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - D:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKU\Gilligan_ON_D Winlogon: Shell - (explorer.exe) - D:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKU\Gilligan_ON_D Winlogon: Shell - (C:\Users\Gilligan\AppData\Roaming\skype.dat) - D:\Users\Gilligan\AppData\Roaming\skype.dat ()
O20:64bit: - Winlogon\Notify\spba: DllName - C:\Program Files\Common Files\SPBA\homefus2.dll - D:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Authentication Packages - (wvauth) - D:\Windows\System32\wvauth.dll (Wave Systems Corp.)
O30 - LSA: Authentication Packages - (wvauth) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/06/11 10:31:00 | 000,000,000 | -HSD | C] -- D:\RECYCLER
[2013/06/04 11:40:47 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Cisco
[2013/06/04 11:37:54 | 000,000,000 | ---D | C] -- D:\ProgramData\AVM
[2013/06/04 11:33:25 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Fernzugang
[2013/06/04 11:33:24 | 000,000,000 | ---D | C] -- D:\Program Files\FRITZ!Fernzugang
[2013/06/04 11:33:10 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\Common Files\Wise Installation Wizard
[2013/06/04 04:29:30 | 000,000,000 | ---D | C] -- D:\Windows\pss
[2013/06/04 03:53:09 | 001,892,184 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\D3DX9_42.dll
[2013/06/04 03:52:33 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2013/06/04 02:27:56 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Google
[2013/06/03 21:14:08 | 000,294,912 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\browserchoice.exe
[2013/06/03 21:08:37 | 000,194,048 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFPlatform.dll
[2013/06/03 21:08:36 | 000,744,448 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFx.dll
[2013/06/03 21:08:36 | 000,229,888 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFHost.exe
[2013/06/03 21:08:36 | 000,045,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WUDFCoinstaller.dll
[2013/06/03 21:07:28 | 000,096,768 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmled.dll
[2013/06/03 21:07:28 | 000,073,216 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmled.dll
[2013/06/03 21:07:27 | 000,248,320 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
[2013/06/03 21:07:27 | 000,231,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\url.dll
[2013/06/03 21:07:27 | 000,176,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieui.dll
[2013/06/03 21:07:27 | 000,173,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
[2013/06/03 21:07:27 | 000,142,848 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieUnatt.exe
[2013/06/03 21:07:26 | 002,312,704 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
[2013/06/03 21:07:26 | 001,494,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
[2013/06/03 21:07:26 | 001,427,968 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inetcpl.cpl
[2013/06/03 21:07:26 | 000,729,088 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
[2013/06/03 21:07:26 | 000,607,744 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeeds.dll
[2013/06/03 21:07:26 | 000,237,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\url.dll
[2013/06/03 21:07:25 | 001,800,704 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript9.dll
[2013/06/03 21:07:25 | 000,816,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
[2013/06/03 21:07:25 | 000,717,824 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript.dll
[2013/06/03 21:07:25 | 000,599,040 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
[2013/06/03 13:27:08 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Macromedia
[2013/06/03 13:25:00 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Skype
[2013/06/03 13:24:42 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Mozilla
[2013/06/03 13:24:42 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Mozilla
[2013/06/03 09:15:04 | 000,265,064 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\drivers\dxgmms1.sys
[2013/06/03 09:15:03 | 000,226,816 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dhcpcore6.dll
[2013/06/03 09:15:03 | 000,144,384 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\cdd.dll
[2013/06/03 09:15:02 | 000,193,536 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dhcpcore6.dll
[2013/06/03 09:15:02 | 000,055,296 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dhcpcsvc6.dll
[2013/06/03 09:15:02 | 000,044,032 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dhcpcsvc6.dll
[2013/06/03 09:14:45 | 000,509,952 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ntshrui.dll
[2013/06/03 09:14:41 | 001,930,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\authui.dll
[2013/06/03 09:14:41 | 001,796,096 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\authui.dll
[2013/06/03 09:14:41 | 000,197,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\shdocvw.dll
[2013/06/03 09:14:41 | 000,111,448 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\consent.exe
[2013/06/03 09:14:26 | 000,515,584 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\timedate.cpl
[2013/06/03 09:14:26 | 000,478,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\timedate.cpl
[2013/06/03 09:14:26 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wwanprotdim.dll
[2013/06/03 09:14:25 | 000,041,472 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\drivers\RNDISMP.sys
[2013/06/03 09:14:22 | 000,246,272 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\netcorehc.dll
[2013/06/03 09:14:22 | 000,216,576 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ncsi.dll
[2013/06/03 09:14:22 | 000,175,104 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\netcorehc.dll
[2013/06/03 09:14:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ncsi.dll
[2013/06/03 09:14:21 | 000,018,944 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\netevent.dll
[2013/06/03 09:14:21 | 000,018,944 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\netevent.dll
[2013/06/03 09:14:16 | 000,245,760 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\OxpsConverter.exe
[2013/06/03 09:14:09 | 000,800,768 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\usp10.dll
[2013/06/03 09:13:48 | 002,746,368 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\gameux.dll
[2013/06/03 09:13:48 | 002,576,384 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\gameux.dll
[2013/06/03 09:13:48 | 000,441,856 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\Wpc.dll
[2013/06/03 09:13:48 | 000,308,736 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\Wpc.dll
[2013/06/03 09:13:48 | 000,046,592 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\fpb.rs
[2013/06/03 09:13:48 | 000,046,592 | ---- | C] (Microsoft) -- D:\Windows\System32\fpb.rs
[2013/06/03 09:13:48 | 000,045,568 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\oflc-nz.rs
[2013/06/03 09:13:48 | 000,045,568 | ---- | C] (Microsoft) -- D:\Windows\System32\oflc-nz.rs
[2013/06/03 09:13:48 | 000,044,544 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\pegibbfc.rs
[2013/06/03 09:13:48 | 000,044,544 | ---- | C] (Microsoft) -- D:\Windows\System32\pegibbfc.rs
[2013/06/03 09:13:48 | 000,043,520 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\csrr.rs
[2013/06/03 09:13:48 | 000,043,520 | ---- | C] (Microsoft) -- D:\Windows\System32\csrr.rs
[2013/06/03 09:13:48 | 000,040,960 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\cob-au.rs
[2013/06/03 09:13:48 | 000,040,960 | ---- | C] (Microsoft) -- D:\Windows\System32\cob-au.rs
[2013/06/03 09:13:48 | 000,030,720 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\usk.rs
[2013/06/03 09:13:48 | 000,030,720 | ---- | C] (Microsoft) -- D:\Windows\System32\usk.rs
[2013/06/03 09:13:48 | 000,021,504 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\grb.rs
[2013/06/03 09:13:48 | 000,021,504 | ---- | C] (Microsoft) -- D:\Windows\System32\grb.rs
[2013/06/03 09:13:48 | 000,020,480 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\pegi-pt.rs
[2013/06/03 09:13:48 | 000,020,480 | ---- | C] (Microsoft) -- D:\Windows\System32\pegi-pt.rs
[2013/06/03 09:13:48 | 000,020,480 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\pegi.rs
[2013/06/03 09:13:48 | 000,020,480 | ---- | C] (Microsoft) -- D:\Windows\System32\pegi.rs
[2013/06/03 09:13:48 | 000,015,360 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\djctq.rs
[2013/06/03 09:13:48 | 000,015,360 | ---- | C] (Microsoft) -- D:\Windows\System32\djctq.rs
[2013/06/03 09:13:46 | 000,055,296 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\cero.rs
[2013/06/03 09:13:46 | 000,055,296 | ---- | C] (Microsoft) -- D:\Windows\System32\cero.rs
[2013/06/03 09:13:46 | 000,051,712 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\esrb.rs
[2013/06/03 09:13:46 | 000,051,712 | ---- | C] (Microsoft) -- D:\Windows\System32\esrb.rs
[2013/06/03 09:13:46 | 000,023,552 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\oflc.rs
[2013/06/03 09:13:46 | 000,023,552 | ---- | C] (Microsoft) -- D:\Windows\System32\oflc.rs
[2013/06/03 09:13:46 | 000,020,480 | ---- | C] (Microsoft) -- D:\Windows\SysWow64\pegi-fi.rs
[2013/06/03 09:13:46 | 000,020,480 | ---- | C] (Microsoft) -- D:\Windows\System32\pegi-fi.rs
[2013/06/03 09:13:26 | 003,216,384 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msi.dll
[2013/06/03 09:13:26 | 002,342,400 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msi.dll
[2013/06/03 09:13:08 | 001,161,216 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\kernel32.dll
[2013/06/03 09:13:08 | 000,424,448 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KernelBase.dll
[2013/06/03 09:13:08 | 000,338,432 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\conhost.exe
[2013/06/03 09:13:07 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013/06/03 09:13:07 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013/06/03 09:13:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/06/03 09:13:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013/06/03 09:13:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013/06/03 09:13:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013/06/03 09:13:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/06/03 09:13:06 | 000,362,496 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wow64win.dll
[2013/06/03 09:13:06 | 000,243,200 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wow64.dll
[2013/06/03 09:13:06 | 000,016,384 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ntvdm64.dll
[2013/06/03 09:13:06 | 000,013,312 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wow64cpu.dll
[2013/06/03 09:13:06 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013/06/03 09:13:06 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013/06/03 09:13:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013/06/03 09:13:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013/06/03 09:13:05 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013/06/03 09:13:05 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013/06/03 09:13:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013/06/03 09:13:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013/06/03 09:13:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013/06/03 09:13:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013/06/03 09:13:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013/06/03 09:12:17 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\Documents\My Games
[2013/06/03 09:12:17 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Fallout3
[2013/06/03 09:00:13 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Roxio Burn
[2013/06/03 08:59:59 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Intel Corporation
[2013/06/03 08:59:55 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Adobe
[2013/06/03 08:59:52 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Adobe
[2013/06/03 08:59:46 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Roxio
[2013/06/03 08:59:42 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Creative
[2013/06/03 08:59:27 | 000,000,000 | R--D | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013/06/03 08:59:27 | 000,000,000 | R--D | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013/06/03 08:59:27 | 000,000,000 | -H-D | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2013/06/03 08:59:18 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Identities
[2013/06/03 08:59:08 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Apple Computer
[2013/06/03 08:59:08 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Apple Computer
[2013/06/03 08:59:00 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\HTC MediaHub
[2013/06/03 08:59:00 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\Documents\HTC
[2013/06/03 08:58:52 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Symantec
[2013/06/03 08:58:51 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\VirtualStore
[2013/06/03 08:58:48 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Intel
[2013/06/03 08:58:46 | 000,000,000 | -HSD | C] -- D:\Users\Gilligan\AppData\Local\Verlauf
[2013/06/03 08:58:46 | 000,000,000 | -HSD | C] -- D:\Users\Gilligan\AppData\Local\Temporary Internet Files
[2013/06/03 08:58:46 | 000,000,000 | -HSD | C] -- D:\Users\Gilligan\Documents\Eigene Videos
[2013/06/03 08:58:46 | 000,000,000 | -HSD | C] -- D:\Users\Gilligan\Documents\Eigene Musik
[2013/06/03 08:58:46 | 000,000,000 | -HSD | C] -- D:\Users\Gilligan\Documents\Eigene Bilder
[2013/06/03 08:58:46 | 000,000,000 | -HSD | C] -- D:\Users\Gilligan\AppData\Local\Anwendungsdaten
[2013/06/03 08:58:46 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\LocalLow
[2013/06/03 08:58:45 | 000,000,000 | --SD | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft
[2013/06/03 08:58:45 | 000,000,000 | R--D | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013/06/03 08:58:45 | 000,000,000 | R--D | C] -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Temp
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Microsoft
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Media Center Programs
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Roaming\Macromedia
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\LocalGoogle
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local
[2013/06/03 08:58:45 | 000,000,000 | ---D | C] -- D:\Users\Gilligan\AppData\Local\Google
[2013/06/03 07:15:36 | 000,503,808 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\srcore.dll
[2013/06/03 07:15:33 | 000,067,072 | ---- | C] (Microsoft Corporation) -- D:\Windows\splwow64.exe
[2013/06/01 09:33:43 | 000,000,000 | ---D | C] -- D:\Users\Public\Documents\microsoft
[2013/06/01 09:21:11 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- D:\Windows\SysWow64\CmdLineExt_x64.dll
[2013/06/01 09:08:30 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\Bethesda Softworks
[2013/06/01 09:08:25 | 000,511,496 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XAudio2_1.dll
[2013/06/01 09:08:25 | 000,507,400 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\XAudio2_1.dll
[2013/06/01 09:08:25 | 000,068,104 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XAPOFX1_0.dll
[2013/06/01 09:08:25 | 000,065,032 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\XAPOFX1_0.dll
[2013/06/01 09:08:24 | 004,991,496 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\D3DX9_38.dll
[2013/06/01 09:08:24 | 003,850,760 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\D3DX9_38.dll
[2013/06/01 09:08:24 | 001,941,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\D3DCompiler_38.dll
[2013/06/01 09:08:24 | 001,491,992 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\D3DCompiler_38.dll
[2013/06/01 09:08:24 | 000,540,688 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3dx10_38.dll
[2013/06/01 09:08:24 | 000,467,984 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3dx10_38.dll
[2013/06/01 09:08:24 | 000,238,088 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\xactengine3_1.dll
[2013/06/01 09:08:24 | 000,177,672 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\xactengine3_1.dll
[2013/06/01 09:08:24 | 000,028,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\X3DAudio1_4.dll
[2013/06/01 09:08:24 | 000,025,608 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\X3DAudio1_4.dll
[2013/06/01 09:08:23 | 000,489,480 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XAudio2_0.dll
[2013/06/01 09:08:23 | 000,479,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\XAudio2_0.dll
[2013/06/01 09:08:23 | 000,238,088 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\xactengine3_0.dll
[2013/06/01 09:08:23 | 000,177,672 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\xactengine3_0.dll
[2013/06/01 09:08:22 | 001,860,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\D3DCompiler_37.dll
[2013/06/01 09:08:22 | 000,529,424 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3dx10_37.dll
[2013/06/01 09:08:22 | 000,028,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\X3DAudio1_3.dll
[2013/06/01 09:08:22 | 000,025,608 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\X3DAudio1_3.dll
[2013/06/01 09:08:21 | 004,910,088 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\D3DX9_37.dll
[2013/06/01 09:06:46 | 003,786,760 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\D3DX9_37.dll
[2013/06/01 09:06:46 | 001,420,824 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\D3DCompiler_37.dll
[2013/06/01 09:06:46 | 000,462,864 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3dx10_37.dll
[2013/06/01 09:06:28 | 000,000,000 | ---D | C] -- D:\Windows\SysWow64\xlive
[2013/06/01 09:06:28 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2013/05/30 09:05:02 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\UtilityChest_49
[2013/05/22 14:01:41 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\Mozilla Firefox
[2013/05/16 13:41:00 | 000,000,000 | ---D | C] -- D:\Windows\rescache
[2013/05/16 02:28:11 | 000,054,376 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\drivers\WdfLdr.sys
[2013/05/16 02:28:11 | 000,009,728 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\Wdfres.dll
[2012/01/27 10:08:57 | 001,040,384 | ---- | C] ( ) -- D:\Windows\SysWow64\lmabserv.dll
[2012/01/27 10:08:57 | 000,802,816 | ---- | C] ( ) -- D:\Windows\SysWow64\lmabcomc.dll
[2012/01/27 10:08:57 | 000,593,920 | ---- | C] ( ) -- D:\Windows\SysWow64\lmabcoms.exe
[2012/01/27 10:08:57 | 000,372,736 | ---- | C] ( ) -- D:\Windows\SysWow64\lmabcomm.dll
[2012/01/27 10:08:57 | 000,356,352 | ---- | C] ( ) -- D:\Windows\SysWow64\lmabhcp.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013/06/11 02:35:47 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat
[2013/06/11 02:35:40 | 000,021,280 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/11 02:35:40 | 000,021,280 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/11 02:35:31 | 000,000,004 | ---- | M] () -- D:\Users\Gilligan\AppData\Roaming\skype.ini
[2013/06/11 02:32:26 | 000,001,106 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/06/11 02:31:36 | 4201,299,966 | -HS- | M] () -- D:\hiberfil.sys
[2013/06/11 02:22:01 | 000,000,830 | ---- | M] () -- D:\Windows\tasks\Adobe Flash Player Updater.job
[2013/06/11 02:09:00 | 000,001,110 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/06/11 01:50:00 | 000,001,124 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1479220187-799570456-1392588124-8079UA.job
[2013/06/11 01:26:08 | 000,001,072 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1479220187-799570456-1392588124-8079Core.job
[2013/06/10 16:52:04 | 000,715,422 | ---- | M] () -- D:\Windows\System32\perfh007.dat
[2013/06/10 16:52:04 | 000,669,364 | ---- | M] () -- D:\Windows\System32\perfh009.dat
[2013/06/10 16:52:04 | 000,154,400 | ---- | M] () -- D:\Windows\System32\perfc007.dat
[2013/06/10 16:52:04 | 000,127,250 | ---- | M] () -- D:\Windows\System32\perfc009.dat
[2013/06/06 04:16:09 | 697,143,956 | ---- | M] () -- D:\Windows\MEMORY.DMP
[2013/06/04 14:19:04 | 000,132,924 | ---- | M] () -- D:\Users\Gilligan\Desktop\Terminals QH IH.rts
[2013/06/04 14:17:20 | 000,002,044 | -H-- | M] () -- D:\Users\Gilligan\Documents\Default.rdp
[2013/06/04 03:52:34 | 000,000,000 | R--D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
[2013/06/04 03:52:33 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2013/06/04 02:27:52 | 000,001,435 | ---- | M] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/06/04 00:37:22 | 000,000,146 | ---- | M] () -- D:\Users\Gilligan\Desktop\Sound - Verknüpfung.lnk
[2013/06/03 21:33:42 | 000,564,744 | ---- | M] () -- D:\Windows\System32\FNTCACHE.DAT
[2013/06/03 21:06:56 | 001,639,812 | ---- | M] () -- D:\Windows\SysWow64\PerfStringBackup.INI
[2013/06/03 13:24:58 | 000,002,515 | ---- | M] () -- D:\Users\Public\Desktop\Skype.lnk
[2013/06/03 13:24:58 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/06/03 10:32:12 | 000,001,771 | ---- | M] () -- D:\Users\Gilligan\Desktop\FalloutLauncher - Verknüpfung.lnk
[2013/06/03 06:53:07 | 000,000,008 | RHS- | M] () -- D:\ProgramData\ntuser.pol
[2013/06/01 09:33:16 | 000,026,344 | ---- | M] () -- D:\Users\Gilligan\Desktop\Terminals Friesen.rts
[2013/06/01 09:21:11 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- D:\Windows\SysWow64\CmdLineExt_x64.dll
[2013/05/17 00:33:43 | 000,002,441 | ---- | M] () -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2013/05/16 02:28:26 | 000,000,000 | -H-- | M] () -- D:\Windows\System32\drivers\Msft_Kernel_dc3d_01011.Wdf
[2013/05/16 02:28:25 | 000,000,000 | -H-- | M] () -- D:\Windows\System32\drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
[2013/05/15 14:22:11 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- D:\Windows\SysWow64\FlashPlayerApp.exe
[2013/05/15 14:22:11 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- D:\Windows\SysWow64\FlashPlayerCPLApp.cpl
 
========== Files Created - No Company Name ==========
 
[2013/06/11 02:17:17 | 000,000,004 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\skype.ini
[2013/06/04 11:43:04 | 000,002,044 | -H-- | C] () -- D:\Users\Gilligan\Documents\Default.rdp
[2013/06/04 02:27:52 | 000,001,435 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/06/04 00:37:22 | 000,000,146 | ---- | C] () -- D:\Users\Gilligan\Desktop\Sound - Verknüpfung.lnk
[2013/06/03 21:08:36 | 000,000,003 | ---- | C] () -- D:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013/06/03 10:32:12 | 000,001,771 | ---- | C] () -- D:\Users\Gilligan\Desktop\FalloutLauncher - Verknüpfung.lnk
[2013/06/03 08:59:33 | 000,001,407 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2013/06/03 08:59:29 | 000,001,441 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013/06/03 08:58:45 | 000,001,017 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VMware Player.lnk
[2013/06/03 08:58:45 | 000,000,290 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2013/06/03 08:58:45 | 000,000,272 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2013/05/16 02:28:26 | 000,000,000 | -H-- | C] () -- D:\Windows\System32\drivers\Msft_Kernel_dc3d_01011.Wdf
[2013/05/16 02:28:25 | 000,000,000 | -H-- | C] () -- D:\Windows\System32\drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
[2013/05/16 02:28:13 | 000,000,003 | ---- | C] () -- D:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013/02/21 06:47:15 | 000,110,592 | ---- | C] () -- D:\Windows\SysWow64\FsUsbExDevice.Dll
[2013/02/21 06:47:15 | 000,037,344 | ---- | C] () -- D:\Windows\SysWow64\FsUsbExDisk.Sys
[2012/03/28 16:11:08 | 000,030,568 | ---- | C] () -- D:\Windows\MusiccityDownload.exe
[2012/03/28 16:11:06 | 000,974,848 | ---- | C] () -- D:\Windows\SysWow64\cis-2.4.dll
[2012/03/28 16:11:06 | 000,081,920 | ---- | C] () -- D:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012/03/28 16:11:06 | 000,065,536 | ---- | C] () -- D:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012/03/28 16:11:06 | 000,057,344 | ---- | C] () -- D:\Windows\SysWow64\issacapi_se-2.3.dll
[2012/01/18 06:00:40 | 000,069,120 | ---- | C] () -- D:\Users\Gilligan\AppData\Roaming\skype.dat
[2011/10/24 06:16:31 | 000,000,376 | ---- | C] () -- D:\Windows\ODBC.INI
[2011/10/13 07:08:46 | 000,000,008 | RHS- | C] () -- D:\ProgramData\ntuser.pol
[2011/10/07 03:28:09 | 000,963,116 | ---- | C] () -- D:\Windows\SysWow64\igkrng600.bin
[2011/10/07 03:28:08 | 000,218,304 | ---- | C] () -- D:\Windows\SysWow64\igfcg600m.bin
[2011/10/07 03:28:06 | 000,056,832 | ---- | C] () -- D:\Windows\SysWow64\igdde32.dll
[2011/10/07 03:28:04 | 000,145,804 | ---- | C] () -- D:\Windows\SysWow64\igcompkrng600.bin
[2011/10/07 03:28:01 | 013,906,944 | ---- | C] () -- D:\Windows\SysWow64\ig4icd32.dll
[2011/10/07 02:16:54 | 000,080,368 | ---- | C] () -- D:\Windows\SysWow64\pbadrvdll.dll
[2011/10/07 02:10:22 | 000,032,256 | ---- | C] () -- D:\Windows\SysWow64\instsrv.exe
[2011/10/07 02:10:22 | 000,008,192 | ---- | C] () -- D:\Windows\SysWow64\srvany.exe
[2011/09/28 11:44:14 | 000,179,271 | ---- | C] () -- D:\Windows\SysWow64\xlive.dll.cat
[2011/02/11 14:06:36 | 001,639,812 | ---- | C] () -- D:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/20 23:24:49 | 000,252,928 | ---- | C] () -- D:\Windows\SysWow64\DShowRdpFilter.dll
[2010/08/19 18:18:20 | 001,008,640 | ---- | C] () -- D:\Windows\SysWow64\DemoLicense.dll
[2009/10/06 03:16:02 | 000,819,200 | ---- | C] () -- D:\Windows\SysWow64\xvidcore.dll
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- D:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- D:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- D:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- D:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- D:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- D:\Windows\SysWow64\mlang.dat
[2003/01/07 09:05:08 | 000,002,695 | ---- | C] () -- D:\Windows\SysWow64\OUTLPERF.INI
 
========== LOP Check ==========
 
[2011/10/13 07:03:08 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2013/02/28 00:06:27 | 000,000,000 | ---D | M] -- D:\ProgramData\AT&T
[2013/06/04 11:37:54 | 000,000,000 | ---D | M] -- D:\ProgramData\AVM
[2011/10/07 02:16:46 | 000,000,000 | ---D | M] -- D:\ProgramData\Broadcom
[2013/03/31 18:00:20 | 000,000,000 | ---D | M] -- D:\ProgramData\Cisco
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2011/10/13 07:03:08 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente
[2011/10/13 07:03:08 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2013/03/14 05:19:20 | 000,000,000 | ---D | M] -- D:\ProgramData\HTC
[2013/03/14 05:35:17 | 000,000,000 | ---D | M] -- D:\ProgramData\Motorola
[2011/10/07 02:17:35 | 000,000,000 | ---D | M] -- D:\ProgramData\NTRU Cryptosystems
[2011/10/07 02:32:33 | 000,000,000 | ---D | M] -- D:\ProgramData\PhotoShow Shared Assets
[2012/04/23 10:45:46 | 000,000,000 | ---D | M] -- D:\ProgramData\Samsung
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2011/10/13 07:03:08 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü
[2011/10/07 02:23:47 | 000,000,000 | ---D | M] -- D:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2011/10/07 02:33:06 | 000,000,000 | ---D | M] -- D:\ProgramData\Uninstall
[2011/10/13 07:03:08 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen
[2011/11/07 07:11:43 | 000,000,000 | ---D | M] -- D:\ProgramData\Wave Systems Corp
[2012/01/05 10:02:44 | 000,000,000 | ---D | M] -- D:\ProgramData\WebEx
[2012/08/06 01:47:27 | 000,032,632 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
< End of report >
--- --- ---
 

Themen zu GVU Trojaner eingefangen
autorun, bho, bildschirm, browser, computer, computer gesperrt paysafe, defender, desktop, device driver, einstellungen, firefox, flash player, format, gesperrt, helper, home, hängen, installation, intranet, mindspark, monitor.exe, nvpciflt.sys, plug-in, registry, remote user, security, server, sierra, software, trojaner


« Bundestrojaner | wssetup.exe »


Ähnliche Themen: GVU Trojaner eingefangen


  1. Trojaner eingefangen?
    Log-Analyse und Auswertung - 17.10.2015 (13)
  2. Trojaner eingefangen
    Plagegeister aller Art und deren Bekämpfung - 19.12.2013 (10)
  3. GVU Trojaner eingefangen...
    Plagegeister aller Art und deren Bekämpfung - 17.05.2013 (43)
  4. Viren eingefangen (JAVA/dldr.lamar.TP), auch Trojaner (Polizei.Trojaner) gefunden
    Log-Analyse und Auswertung - 07.05.2013 (15)
  5. GVU Trojaner eingefangen
    Plagegeister aller Art und deren Bekämpfung - 24.02.2013 (6)
  6. GVU Trojaner eingefangen!
    Log-Analyse und Auswertung - 17.10.2012 (2)
  7. GVU Trojaner eingefangen
    Plagegeister aller Art und deren Bekämpfung - 22.09.2012 (17)
  8. Gvu Trojaner 2.07 Eingefangen
    Log-Analyse und Auswertung - 21.08.2012 (6)
  9. GVU Trojaner eingefangen?
    Plagegeister aller Art und deren Bekämpfung - 07.08.2012 (11)
  10. GVU-Trojaner 2.07 eingefangen
    Log-Analyse und Auswertung - 25.07.2012 (11)
  11. GVU Trojaner eingefangen
    Plagegeister aller Art und deren Bekämpfung - 22.07.2012 (19)
  12. 50€ Trojaner eingefangen
    Log-Analyse und Auswertung - 13.02.2012 (21)
  13. Trojaner eingefangen
    Log-Analyse und Auswertung - 13.02.2012 (1)
  14. Trojaner eingefangen....
    Log-Analyse und Auswertung - 27.04.2011 (1)
  15. Trojaner eingefangen
    Plagegeister aller Art und deren Bekämpfung - 16.07.2010 (2)
  16. Trojaner eingefangen?
    Log-Analyse und Auswertung - 03.03.2009 (0)
  17. Trojaner VX2 eingefangen
    Log-Analyse und Auswertung - 03.05.2005 (8)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU Trojaner eingefangen - Hi Team, nachdem ich die Suchbegriffe "Computer gesperrt Paysafe" eingegeben hatte bin ich quasi direkt bei Euch gelandet. Ich habe ein paar Threads zum Thema gelesen und schonmal erste Schritte - GVU Trojaner eingefangen...
Archiv
Du betrachtest: GVU Trojaner eingefangen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131