Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Interpol-BKA PC gesperrt (https://www.trojaner-board.de/150417-interpol-bka-pc-gesperrt.html)

caschi 28.02.2014 11:09
Interpol-BKA PC gesperrt
 
Hallo, nun hat es mich auch mal erwischt.
Mein System: win7 pro, 64bit

wäre klasse wenn ich um eine neuinstallation herum kommen würde:crazy:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by SYSTEM on MININT-3ORO0J2 on 28-02-2014 10:54:02
Running from F:\
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.




==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [VIRTU MVP] - C:\Program Files\Lucidlogix Technologies\VIRTU MVP\MVPControlPanel.Exe [3006240 2012-03-12] ()
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [G Data AntiVirus Tray Application] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1035216 2013-01-09] (G Data Software AG)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1475096 2012-11-29] (G Data Software AG)
HKLM-x32\...\Run: [GamingMouse] - C:\Program Files (x86)\GamingMouse\hid.exe [262656 2011-07-28] ()
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-10-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\Paul\...\Run: [RGSC] - C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\Paul\...\Run: [Steam] - C:\Games\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
AppInit_DLLs: C:\Windows\system32\appinit_dll.dll => C:\Windows\system32\appinit_dll.dll [172320 2012-03-12] (Lucidlogix Inc.)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-02-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\appinit_dll.dll => C:\Windows\SysWOW64\appinit_dll.dll [148256 2012-03-12] (Lucidlogix Inc.)
AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148528 2014-02-08] (NVIDIA Corporation)
Startup: C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lcrj2bn7v.lnk
ShortcutTarget: lcrj2bn7v.lnk -> C:\ProgramData\v7nb2jrcl.cpp (Корпорация Майкрософт)

==================== Services (Whitelisted) =================

S2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1548312 2012-11-29] (G Data Software AG)
S2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [469016 2012-11-29] (G Data Software AG)
S2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2012592 2012-11-29] (G Data Software AG)
S3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2377736 2012-11-29] (G Data Software AG)
S3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [470008 2012-03-29] (G Data Software AG)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] ()
S2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-30] ()
S2 Winmgmt; C:\PROGRA~3\lcrj2bn7v.zvv [X]

==================== Drivers (Whitelisted) ====================

S0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [54176 2013-02-02] (G Data Software AG)
S1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [126880 2013-02-02] (G Data Software AG)
S3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62368 2013-02-02] (G Data Software AG)
S1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [65008 2013-02-02] (G Data Software AG)
S1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [64416 2013-02-02] (G Data Software AG)
S3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
S3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-02-28] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-28 10:53 - 2014-02-28 10:54 - 00000000 ____D () C:\FRST
2014-02-28 09:58 - 2014-02-28 09:59 - 95027928 ____T () C:\ProgramData\lcrj2bn7v.fee
2014-02-28 09:58 - 2014-02-28 09:58 - 00163840 _____ (Корпорация Майкрософт) C:\ProgramData\v7nb2jrcl.cpp
2014-02-21 08:06 - 2014-02-21 08:06 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-21 08:06 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-02-21 08:04 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys
2014-02-21 08:04 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6433489.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6433489.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00483104 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00378656 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-21 08:04 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-21 08:04 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvhda64v.sys
2014-02-21 08:04 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdap64.dll
2014-02-21 08:04 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdagenco6420103.dll
2014-02-21 07:57 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2014-02-21 07:57 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-15 13:13 - 2014-02-28 09:59 - 00094656 _____ (CACE Technologies) C:\Windows\System32\WPRO_41_2001woem.tmp
2014-02-14 17:58 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-02-14 17:58 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-02-14 17:58 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-02-14 17:58 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-02-14 17:58 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-02-14 17:58 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-02-14 17:58 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-02-14 17:58 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-02-14 17:58 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-02-14 17:58 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-02-14 17:58 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-02-14 17:58 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-02-14 17:58 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 17:58 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-02-14 17:58 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 17:58 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-02-14 17:58 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-02-14 17:58 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 17:58 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 17:58 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 17:58 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-02-14 17:58 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 17:58 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 17:58 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-02-14 17:58 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 17:58 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 17:58 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 17:58 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 17:58 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 17:58 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-02-14 17:58 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-02-14 17:58 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 17:58 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 17:58 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 17:58 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-02-14 17:58 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 17:58 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-02-14 17:58 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 17:58 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 17:58 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2014-02-14 17:58 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 12:52 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 12:52 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\System32\locale.nls
2014-02-14 12:52 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2014-02-14 12:52 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2014-02-14 12:52 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 12:52 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 12:51 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 12:51 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2014-02-14 12:51 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\System32\secproc.dll
2014-02-14 12:51 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\System32\secproc_isv.dll
2014-02-14 12:51 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\System32\secproc_ssp_isv.dll
2014-02-14 12:51 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\System32\secproc_ssp.dll
2014-02-14 12:51 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\System32\msdrm.dll
2014-02-14 12:51 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate_isv.exe
2014-02-14 12:51 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate.exe
2014-02-14 12:51 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp.exe
2014-02-14 12:51 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp_isv.exe
2014-02-14 12:51 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 12:51 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 12:51 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 12:51 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 12:51 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 12:51 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 12:51 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 12:51 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 12:51 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 12:51 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 12:51 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2014-01-30 20:25 - 2014-02-09 14:54 - 00000000 ____D () C:\Users\Paul\Documents\DayZ
2014-01-30 20:25 - 2014-01-30 20:29 - 00000000 ____D () C:\Users\Paul\AppData\Local\DayZ
2014-01-30 18:53 - 2014-01-30 18:53 - 00000208 _____ () C:\Users\Paul\Desktop\DayZ.url

==================== One Month Modified Files and Folders =======

2014-02-28 10:54 - 2014-02-28 10:53 - 00000000 ____D () C:\FRST
2014-02-28 10:05 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 10:05 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 10:00 - 2012-11-28 15:38 - 00000000 ____D () C:\Users\Paul\AppData\Local\VirtualStore
2014-02-28 09:59 - 2014-02-28 09:58 - 95027928 ____T () C:\ProgramData\lcrj2bn7v.fee
2014-02-28 09:59 - 2014-02-15 13:13 - 00094656 _____ (CACE Technologies) C:\Windows\System32\WPRO_41_2001woem.tmp
2014-02-28 09:59 - 2013-10-04 09:28 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-28 09:59 - 2012-11-28 15:51 - 00034752 _____ () C:\Windows\System32\Drivers\WPRO_41_2001.sys
2014-02-28 09:59 - 2012-11-28 15:38 - 01631473 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 09:59 - 2010-11-21 04:47 - 00639674 _____ () C:\Windows\PFRO.log
2014-02-28 09:59 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 09:59 - 2009-07-14 05:51 - 00062532 _____ () C:\Windows\setupact.log
2014-02-28 09:58 - 2014-02-28 09:58 - 00163840 _____ (Корпорация Майкрософт) C:\ProgramData\v7nb2jrcl.cpp
2014-02-28 08:13 - 2012-11-30 23:14 - 01281537 _____ () C:\Windows\SysWOW64\sig.bin
2014-02-28 08:13 - 2012-11-30 23:14 - 00061225 _____ () C:\Windows\SysWOW64\nmp.map
2014-02-27 22:30 - 2013-10-02 21:15 - 01594028 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 22:30 - 2011-04-12 08:43 - 00699432 _____ () C:\Windows\System32\perfh007.dat
2014-02-27 22:30 - 2011-04-12 08:43 - 00149572 _____ () C:\Windows\System32\perfc007.dat
2014-02-27 22:30 - 2009-07-14 06:13 - 01594028 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-02-27 22:28 - 2012-12-01 14:47 - 00000000 ____D () C:\Users\Paul\AppData\Roaming\TS3Client
2014-02-27 13:25 - 2014-01-08 13:44 - 00000000 ____D () C:\Users\Paul\AppData\Local\Arma 3
2014-02-21 08:06 - 2014-02-21 08:06 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-21 08:06 - 2012-11-28 15:59 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-20 15:30 - 2012-12-02 11:49 - 00000000 ____D () C:\ProgramData\Origin
2014-02-20 14:14 - 2012-12-02 12:35 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-02-20 13:58 - 2012-12-02 12:35 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-02-20 13:33 - 2012-12-02 11:49 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-02-18 19:30 - 2013-08-21 18:58 - 00000000 ____D () C:\Windows\System32\MRT
2014-02-18 19:29 - 2012-11-28 16:07 - 88567024 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-02-18 16:23 - 2013-05-28 14:16 - 00000000 ____D () C:\Users\Paul\AppData\Local\CrashDumps
2014-02-18 16:06 - 2012-11-29 16:19 - 00000000 ____D () C:\Tools
2014-02-15 17:52 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-14 18:02 - 2013-03-09 14:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-14 17:58 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-02-11 17:47 - 2013-03-09 15:06 - 00000000 ____D () C:\Users\Paul\Documents\Outlook-Dateien
2014-02-09 14:54 - 2014-01-30 20:25 - 00000000 ____D () C:\Users\Paul\Documents\DayZ
2014-02-08 19:34 - 2014-02-21 08:04 - 31432480 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 25256224 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 17715784 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 12324640 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys
2014-02-08 19:34 - 2014-02-21 08:04 - 11636176 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 11589272 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 03142432 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 02782496 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 01885472 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6433489.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 01515296 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6433489.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00892192 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00875296 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00483104 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00378656 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00353504 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-08 19:34 - 2014-02-21 08:04 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 18257576 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 03090184 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 02713728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 00947296 _____ (NVIDIA Corporation) C:\Windows\System32\nvumdshimx.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 00174296 _____ (NVIDIA Corporation) C:\Windows\System32\nvinitx.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-08 19:34 - 2013-10-04 09:26 - 00024544 _____ () C:\Windows\System32\nvinfo.pb
2014-02-08 18:42 - 2013-10-04 09:28 - 06712608 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll
2014-02-08 18:42 - 2013-10-04 09:28 - 03498272 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll
2014-02-08 18:42 - 2013-10-04 09:28 - 02559776 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll
2014-02-08 18:42 - 2013-10-04 09:28 - 00923936 _____ (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
2014-02-08 18:42 - 2013-10-04 09:28 - 00386336 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll
2014-02-08 18:42 - 2013-10-04 09:28 - 00063776 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll
2014-02-08 17:18 - 2014-02-21 08:06 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-02-06 13:16 - 2014-02-14 17:58 - 23170048 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 17:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 17:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 17:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 17:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 17:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 17:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 17:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 17:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-02-06 11:49 - 2014-02-14 17:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 17:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 17:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 17:58 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 17:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 17:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 17:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-02-06 11:11 - 2014-02-14 17:58 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 17:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 17:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 17:58 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 17:58 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 17:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 17:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 17:58 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 17:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 17:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 17:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 17:58 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 17:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 17:58 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-02-06 10:22 - 2014-02-14 17:58 - 13051392 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 17:58 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 17:58 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 17:58 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 17:58 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 17:58 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 17:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 17:58 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 17:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 18:52 - 2013-10-04 09:28 - 03573739 _____ () C:\Windows\System32\nvcoproc.bin
2014-01-30 20:29 - 2014-01-30 20:25 - 00000000 ____D () C:\Users\Paul\AppData\Local\DayZ
2014-01-30 18:53 - 2014-01-30 18:53 - 00000208 _____ () C:\Users\Paul\Desktop\DayZ.url
2014-01-29 13:52 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Files to move or delete:
====================
C:\ProgramData\lcrj2bn7v.fee


Some content of TEMP:
====================
C:\Users\Paul\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Paul\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Paul\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Paul\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Paul\AppData\Local\Temp\nvStInst.exe
C:\Users\Paul\AppData\Local\Temp\sonarinst.exe
C:\Users\Paul\AppData\Local\Temp\ubi2FE6.tmp.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2014-02-18 15:57:32
Restore point made on: 2014-02-18 19:29:02
Restore point made on: 2014-02-21 07:58:53
Restore point made on: 2014-02-25 17:55:52
Restore point made on: 2014-02-27 22:29:08

==================== Memory info ===========================

Percentage of memory in use: 10%
Total physical RAM: 8087.01 MB
Available physical RAM: 7267.86 MB
Total Pagefile: 8085.21 MB
Available Pagefile: 7270.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:757.37 GB) NTFS
Drive e: (GRMCPRXVOL_DE_DVD) (CDROM) (Total:2.86 GB) (Free:0 GB) UDF
Drive f: (Transcend) (Removable) (Total:14.7 GB) (Free:13.33 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 91CF1498)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 15 GB) (Disk ID: 6F20736B)
No partition Table on disk 1.
Disk 1 is a removable device.


LastRegBack: 2014-02-19 19:32

==================== End Of Log ============================
--- --- ---

Aneri 28.02.2014 11:17
:hallo:

Mein Name ist Heiko und ich werde dir helfen.

Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen.

Ich bedanke mich für deine Geduld :)

Aneri 28.02.2014 11:20
:hallo:

Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
  • Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
  • Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
  • Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Schritt 1
Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
Startup: C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lcrj2bn7v.lnk
ShortcutTarget: lcrj2bn7v.lnk -> C:\ProgramData\v7nb2jrcl.cpp (Корпорация Майкрософт)
C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lcrj2bn7v.lnk
C:\ProgramData\v7nb2jrcl.cpp
S2 Winmgmt; C:\PROGRA~3\lcrj2bn7v.zvv [X]
C:\PROGRA~3\lcrj2bn7v.zvv
C:\ProgramData\lcrj2bn7v.fee
C:\ProgramData\v7nb2jrcl.cpp
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


starte das System neu und teile mir mit ob es normal startet.

Falls nicht bitte ein neues FRST Logfile aus der Recovery umgebung

caschi 28.02.2014 14:17
Hallo Heiko,

vielen Dank erst einmal für die prompte und schnelle Antwort.

Ich habe meinen Rechner insoweit wieder flott bekommen das ich mich wieder am System anmelden kann ohne das der Sperrbildschirm aufpoppt.
Was aber nun folgen würde ist mir dann doch ein wenig zu Zeitraubend.

Wie du aber auch schon in deinem "Hinweis" angibst: "...niemals eine Garantie..." und: "...Formatierung ist meist der Schnellere und immer der sicherste Weg.",
hab ich mich dann doch entschlossen das System neu aufzusetzen.

Bei mir handelt es sich "glücklicher weise" nur um meinen Rechner zum zocken. Da sind keine
relevanten Daten drauf die ich nicht ersetzen könnte:applaus:

Ich bedanke mich hier ganz Herzlich für die Unterstützung und das Hilfeangebot, auch einen Gruß an das gesamte Team.

Carsten

Aneri 28.02.2014 15:23
Ich kann mir nicht vorstellen das es Zeitraubend wird ;)

Lass uns doch erstmal schauen wie es auf dem System aussieht.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Aneri 03.03.2014 11:41
Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomm ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:00 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131