Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: BKA Virus, bekämpfen wie?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 26.07.2012, 16:29   #1
xJackey
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?



Hallo ihr lieben,

jetzt hat mich der BKA bzw. GVU-Trojaner auch erwischt. Ich soll 100€ uCash bezahlen. Ich bräuchte eure schnelle Hilfe, wie ich den Trojaner von meinem Laptop bekomme. Leider habe ich davon garkeine Ahnung..

Windows 7 / 64-Bit / Home Professional
______________________

OTL-Prüfung (Ich kopiere einfach mal alles, weil ich davon überhaupt keine Ahnung habe..)

[QUOTE] dOTL Logfile:
Code:
ATTFilter
OTL logfile created on: 7/26/2012 5:21:47 PM - Run 1
OTL by OldTimer - Version 3.2.54.1     Folder = C:\Users\Jacqueline\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5.48 Gb Total Physical Memory | 3.56 Gb Available Physical Memory | 64.99% Memory free
10.96 Gb Paging File | 8.97 Gb Available in Paging File | 81.89% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 230.00 Gb Total Space | 150.70 Gb Free Space | 65.52% Space Free | Partition Type: NTFS
Drive D: | 342.90 Gb Total Space | 342.80 Gb Free Space | 99.97% Space Free | Partition Type: NTFS
 
Computer Name: JACQUELINE-PC | User Name: Jacqueline | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012/07/26 16:50:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Jacqueline\Downloads\OTL.exe
PRC - [2012/07/20 15:02:56 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/06/24 16:25:29 | 000,932,528 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012/06/06 21:33:42 | 001,564,872 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
PRC - [2012/03/19 13:38:47 | 002,666,880 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2011/12/20 15:52:04 | 002,783,312 | ---- | M] (Samsung Electronics) -- C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
PRC - [2011/07/17 06:56:48 | 001,038,848 | ---- | M] () -- C:\Program Files (x86)\WebcamMax\wcmmon.exe
PRC - [2011/06/15 15:12:58 | 002,158,160 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Samsung Control Center\dmhkcore.exe
PRC - [2011/06/06 09:09:00 | 003,870,112 | ---- | M] (Samsung Electronics) -- C:\Program Files (x86)\Samsung\Eco Mode\SmartEco.exe
PRC - [2011/04/17 10:07:16 | 001,757,264 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
PRC - [2011/04/14 13:38:50 | 000,727,120 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Samsung Control Center\EasySpeedUpManager.exe
PRC - [2011/04/14 09:15:38 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2011/03/29 06:15:54 | 004,399,696 | ---- | M] (SEC) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
PRC - [2011/02/16 18:03:20 | 000,775,848 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Samsung Control Center\MovieColorEnhancer.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012/07/23 22:06:17 | 000,195,488 | ---- | M] () -- C:\Users\JACQUE~1\AppData\Local\Temp\wpbt0.dll
MOD - [2012/07/20 15:02:55 | 002,003,424 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012/06/24 16:25:29 | 000,932,528 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/07/17 06:56:48 | 001,038,848 | ---- | M] () -- C:\Program Files (x86)\WebcamMax\wcmmon.exe
MOD - [2011/02/16 18:03:20 | 000,203,776 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Control Center\WinCRT.dll
MOD - [2010/10/25 14:44:50 | 001,973,760 | ---- | M] () -- C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
MOD - [2010/05/07 16:22:18 | 001,636,864 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll
MOD - [2006/08/12 05:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Control Center\HookDllPS2.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011/05/26 22:09:58 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/09/22 11:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/08/09 21:04:12 | 000,166,704 | ---- | M] (Samsung Electronics CO., LTD.) [On_Demand | Stopped] -- C:\Windows\SysNative\SUPDSvc.exe -- (Samsung UPD Service)
SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2012/07/20 15:02:56 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/03/19 13:38:47 | 002,666,880 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2010/06/01 08:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012/05/20 18:30:04 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV:64bit: - [2012/04/15 23:32:14 | 001,071,032 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\wcmvcam64.sys -- (WCMVCAM)
DRV:64bit: - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/07/06 08:16:24 | 000,289,704 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2011/05/26 23:58:22 | 009,263,104 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/05/26 21:28:50 | 000,300,544 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/05/23 17:24:22 | 002,750,464 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2011/05/17 08:55:28 | 000,533,096 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/04/14 09:16:08 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/03/05 12:46:20 | 000,078,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2011/03/05 12:46:20 | 000,038,528 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2010/11/21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/18 07:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/06/10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/28 08:38:04 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008/12/26 12:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vcsvad.sys -- (VCSVADHWSer)
DRV - [2011/10/21 09:00:09 | 000,015,144 | ---- | M] (Windows (R) 2003 DDK 3790 provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\rtport.sys -- (rtport)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
IE - HKLM\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=112542&tt=2912_2&babsrc=HP_ss&mntrId=108511fc000000000000e81132e1e92a
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=112542&tt=2912_2&babsrc=SP_ss&mntrId=108511fc000000000000e81132e1e92a
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{C5896B20-7A78-49D6-B059-815AA2B0BB01}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=CLM&o=15427&src=kw&q={searchTerms}&locale=&apn_ptnrs=LE&apn_dtid=YYYYYYYYDE&apn_uid=66fc579c-9e41-4bac-9899-9d77ba202010&apn_sauid=913CB72A-92EC-40D2-BF16-DECACE91BD1A
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{C78F5212-DEA7-43E8-B1C6-DA7660B5170C}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2319825
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.defaultthis.engineName: "Winload Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=FFOB10&ctid=CT2319825&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=FFOB10&ctid=CT2319825&SearchSource=2&q="
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\webbooster@iminent.com: C:\Program Files (x86)\Iminent\webbooster@iminent.com
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/20 15:02:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/20 15:02:56 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2012/02/07 20:30:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Extensions
[2012/07/26 16:48:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions
[2012/07/16 11:10:38 | 000,000,000 | ---D | M] (Winload Community Toolbar) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f}
[2012/07/26 16:48:41 | 000,000,000 | ---D | M] ("Vid-Saver") -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions\crossriderapp3491@crossrider.com
[2012/06/26 15:00:45 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions\ich@maltegoetz.de
[2012/06/26 15:51:19 | 000,000,000 | ---D | M] (loadtbs) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions\software@loadtubes.com
[2012/06/29 15:40:53 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions\toolbar@ask.com
[2012/06/29 15:40:53 | 000,002,323 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Mozilla\Firefox\Profiles\zbblcamh.default\searchplugins\askcom.xml
[2012/06/24 01:00:50 | 000,000,949 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Mozilla\Firefox\Profiles\zbblcamh.default\searchplugins\conduit.xml
[2012/06/06 22:43:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/07/20 15:02:56 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/04/27 16:06:26 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/07/19 21:36:55 | 000,002,349 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012/04/27 16:06:26 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/04/27 16:06:26 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012/04/27 16:06:26 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/04/27 16:06:26 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/04/27 16:06:26 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (Vid-Saver) - {11111111-1111-1111-1111-110011341191} - C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll (215 Apps)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Samsung BHO Class) - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (loadtbs) - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Jacqueline\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\Toolbar\WebBrowser: (Winload Toolbar) - {40C3CC16-7269-4B32-9531-17F2950FB06F} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\Toolbar\WebBrowser: (loadtbs) - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Jacqueline\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [Akamai NetSession Interface] "C:\Users\Jacqueline\AppData\Local\Akamai\netsession_win.exe" File not found
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [Spotify Web Helper] C:\Users\Jacqueline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [WebcamMaxAutoRun] C:\Program Files (x86)\WebcamMax\wcmmon.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\SysWow64\GPhotos.scr (Google Inc.)
O9 - Extra Button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1CDAE34C-11AB-4B10-B828-629CF6D17BFF}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7785BA55-ECA9-4695-B0F8-3433877001BA}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 7 Days ==========
 
[2012/07/26 16:44:36 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{4E4D8144-E3F0-4109-8D89-A91E1127ABCE}
[2012/07/26 16:44:24 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{1080B4D5-EC70-49EB-B3F9-26D80E5F9A15}
[2012/07/26 16:23:45 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{F84F0AD8-D9E5-43E6-9C07-4E66446BD39D}
[2012/07/26 16:23:33 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{C3B39A71-18E2-4735-BE0D-229AD268193E}
[2012/07/26 16:02:47 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{786283B9-39D8-404A-B938-090332BFDC45}
[2012/07/26 16:02:32 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{E7346E57-6153-4047-BC36-7DFC28A436BA}
[2012/07/26 15:59:56 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{CAE95854-F0C6-41CF-9C48-FE6C04BE0709}
[2012/07/26 15:59:43 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{A69743AF-4726-41FA-AFCB-FD98589B542D}
[2012/07/25 15:24:00 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{53F3CA7C-AA88-451A-B625-C1A4DA7E11BB}
[2012/07/25 15:23:47 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{63B23AAB-F764-4518-B9A4-70EFEF9F90EB}
[2012/07/24 15:53:58 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{656BB7CE-7953-4F3F-A810-74EB5E3F9CFC}
[2012/07/24 15:53:44 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{9E537325-6317-49B6-A2F2-F9122878A7B3}
[2012/07/23 22:09:58 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\Desktop\GameOver
[2012/07/23 20:08:29 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{23D3572E-EDC8-4B28-A71F-5482D00EFB00}
[2012/07/23 20:08:14 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{F0DCCD94-96ED-469C-B7C5-5F22A9B95B5E}
[2012/07/22 16:45:55 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{EE2B5996-B18F-4DCA-BFEB-6D28F5E9D9C4}
[2012/07/22 16:45:31 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{D5F9A03D-DFD1-44CB-96A8-4DD6EF347695}
[2012/07/21 15:20:14 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{92514032-055C-4DC5-BAEC-4AD72E455C90}
[2012/07/21 15:19:56 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{4851D00F-B733-498F-83F2-4647D7C0C7A7}
[2012/07/20 21:53:48 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\Desktop\Originals
[2012/07/20 15:02:19 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{63087B75-09CC-4B3D-808B-32A6A22D6807}
[2012/07/20 15:02:07 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\{8CFD282F-4DCB-4663-9830-019BD921D3F0}
[2012/07/19 21:37:30 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperCam 2
[2012/07/19 21:37:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HyperCam 2
[2012/07/19 21:37:18 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Local\Vid-Saver
[2012/07/19 21:37:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vid-Saver
[2012/07/19 21:37:03 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Roaming\BabylonToolbar
[2012/07/19 21:36:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar
[2012/07/19 21:36:49 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Roaming\Babylon
[2012/07/19 21:36:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
 
========== Files - Modified Within 7 Days ==========
 
[2012/07/26 17:25:59 | 004,503,728 | ---- | M] () -- C:\ProgramData\0tbpw.pad
[2012/07/26 16:53:15 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/26 16:53:15 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/26 16:49:32 | 001,498,742 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2012/07/26 16:49:32 | 000,654,400 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
[2012/07/26 16:49:32 | 000,616,242 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2012/07/26 16:49:32 | 000,130,240 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
[2012/07/26 16:49:32 | 000,106,622 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2012/07/26 16:45:08 | 000,001,118 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/26 16:44:13 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2012/07/26 16:43:33 | 000,001,114 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/26 16:43:11 | 1589,440,511 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/23 23:22:11 | 000,021,321 | ---- | M] () -- C:\Users\Jacqueline\Desktop\558217_324603804299675_493944181_n.jpg
[2012/07/23 22:06:18 | 000,001,885 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012/07/23 21:01:26 | 000,026,869 | ---- | M] () -- C:\Users\Jacqueline\Desktop\aa.jpg
[2012/07/22 17:24:54 | 000,152,513 | ---- | M] () -- C:\Users\Jacqueline\Desktop\kkkk.jpg
[2012/07/22 17:24:28 | 000,052,224 | -H-- | M] () -- C:\Users\Jacqueline\Desktop\photothumb.db
[2012/07/21 17:29:32 | 001,623,812 | ---- | M] () -- C:\Users\Jacqueline\Desktop\Foto0719.jpg
[2012/07/21 15:15:00 | 001,201,690 | ---- | M] () -- C:\Users\Jacqueline\Desktop\Foto0718b.jpg
[2012/07/21 00:12:08 | 000,094,981 | ---- | M] () -- C:\Users\Jacqueline\Desktop\wombat_front.jpg
[2012/07/20 21:53:48 | 000,003,102 | ---- | M] () -- C:\Users\Jacqueline\Desktop\Pras2_Food.jpg
[2012/07/19 23:07:22 | 000,005,120 | ---- | M] () -- C:\Users\Jacqueline\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/07/19 21:57:08 | 770,204,238 | ---- | M] () -- C:\Users\Jacqueline\Documents\clip0004.avi
[2012/07/19 21:41:30 | 037,195,408 | ---- | M] () -- C:\Users\Jacqueline\Documents\clip0003.avi
[2012/07/19 21:39:44 | 077,814,414 | ---- | M] () -- C:\Users\Jacqueline\Documents\clip0002.avi
[2012/07/19 21:38:18 | 004,209,806 | ---- | M] () -- C:\Users\Jacqueline\Documents\clip0001.avi
[2012/07/19 21:37:30 | 000,000,925 | ---- | M] () -- C:\Users\Jacqueline\Desktop\HyperCam 2.lnk
[2012/07/19 21:37:01 | 000,000,247 | ---- | M] () -- C:\user.js
 
========== Files Created - No Company Name ==========
 
[2012/07/23 23:22:10 | 000,021,321 | ---- | C] () -- C:\Users\Jacqueline\Desktop\558217_324603804299675_493944181_n.jpg
[2012/07/23 22:06:18 | 004,503,728 | ---- | C] () -- C:\ProgramData\0tbpw.pad
[2012/07/23 22:06:18 | 000,001,885 | ---- | C] () -- C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012/07/23 21:01:23 | 000,026,869 | ---- | C] () -- C:\Users\Jacqueline\Desktop\aa.jpg
[2012/07/22 17:24:54 | 000,152,513 | ---- | C] () -- C:\Users\Jacqueline\Desktop\kkkk.jpg
[2012/07/21 17:21:37 | 001,623,812 | ---- | C] () -- C:\Users\Jacqueline\Desktop\Foto0719.jpg
[2012/07/21 17:21:34 | 001,201,690 | ---- | C] () -- C:\Users\Jacqueline\Desktop\Foto0718b.jpg
[2012/07/21 00:12:07 | 000,094,981 | ---- | C] () -- C:\Users\Jacqueline\Desktop\wombat_front.jpg
[2012/07/20 21:51:22 | 000,003,102 | ---- | C] () -- C:\Users\Jacqueline\Desktop\Pras2_Food.jpg
[2012/07/19 21:41:34 | 770,204,238 | ---- | C] () -- C:\Users\Jacqueline\Documents\clip0004.avi
[2012/07/19 21:40:49 | 037,195,408 | ---- | C] () -- C:\Users\Jacqueline\Documents\clip0003.avi
[2012/07/19 21:38:52 | 077,814,414 | ---- | C] () -- C:\Users\Jacqueline\Documents\clip0002.avi
[2012/07/19 21:38:04 | 004,209,806 | ---- | C] () -- C:\Users\Jacqueline\Documents\clip0001.avi
[2012/07/19 21:37:30 | 000,000,925 | ---- | C] () -- C:\Users\Jacqueline\Desktop\HyperCam 2.lnk
[2012/07/19 21:37:00 | 000,000,247 | ---- | C] () -- C:\user.js
[2012/07/19 19:03:23 | 001,563,959 | ---- | C] () -- C:\Users\Jacqueline\Desktop\Foto0698.jpg
[2012/07/19 19:03:21 | 001,540,010 | ---- | C] () -- C:\Users\Jacqueline\Desktop\Foto0699.jpg
[2012/07/04 22:29:51 | 000,696,014 | ---- | C] () -- C:\Users\Jacqueline\bunti.png
[2012/07/02 22:12:16 | 000,024,114 | ---- | C] () -- C:\Users\Jacqueline\msjs.jpg
[2012/06/29 17:27:33 | 000,770,724 | ---- | C] () -- C:\Users\Jacqueline\Unbenannt.png
[2012/06/19 21:29:11 | 005,938,604 | ---- | C] () -- C:\Users\Jacqueline\ssff.wav
[2012/06/17 14:38:59 | 001,822,124 | ---- | C] () -- C:\Users\Jacqueline\haha.wav
[2012/06/08 19:32:36 | 000,007,314 | ---- | C] () -- C:\Users\Jacqueline\bloow192b6.png
[2012/06/08 19:08:05 | 000,014,441 | ---- | C] () -- C:\Users\Jacqueline\bio10l.png
[2012/06/08 19:06:09 | 002,129,244 | ---- | C] () -- C:\Users\Jacqueline\DSCF1730.JPG
[2012/06/08 19:06:02 | 002,124,423 | ---- | C] () -- C:\Users\Jacqueline\DSCF1729.JPG
[2012/06/08 19:05:29 | 002,173,904 | ---- | C] () -- C:\Users\Jacqueline\DSCF1731.JPG
[2012/06/06 14:30:55 | 000,004,822 | ---- | C] () -- C:\Users\Jacqueline\ddd.jpg
[2012/06/05 17:43:20 | 000,017,475 | ---- | C] () -- C:\Users\Jacqueline\kkkokok.jpg
[2012/06/04 21:41:41 | 000,011,330 | ---- | C] () -- C:\Users\Jacqueline\ddd.png
[2012/06/04 21:15:06 | 000,338,232 | ---- | C] () -- C:\Users\Jacqueline\dgd.png
[2012/06/04 19:42:00 | 000,240,120 | ---- | C] () -- C:\Users\Jacqueline\lll.jpg
[2012/05/31 18:27:46 | 000,028,265 | ---- | C] () -- C:\Users\Jacqueline\545038_365947443468885_335505578_n.jpg
[2012/05/31 16:59:41 | 001,273,411 | ---- | C] () -- C:\Users\Jacqueline\PICT1213.JPG
[2012/05/26 14:59:21 | 003,619,244 | ---- | C] () -- C:\Users\Jacqueline\Jingle - Kaddi - Mitten im Habbo..wav
[2012/05/22 13:11:53 | 000,015,522 | ---- | C] () -- C:\Users\Jacqueline\aaa.jpg
[2012/05/18 21:08:29 | 000,024,733 | ---- | C] () -- C:\Users\Jacqueline\kim-jong-il-relaxing11.jpg
[2012/05/17 21:05:49 | 000,158,720 | ---- | C] () -- C:\Users\Jacqueline\noch besser - Kopie.jpg
[2012/05/17 20:47:49 | 000,037,319 | ---- | C] () -- C:\Users\Jacqueline\noch besser.jpg
[2012/05/16 16:46:02 | 000,265,560 | ---- | C] () -- C:\Users\Jacqueline\sadas.jpg
[2012/05/15 17:54:19 | 000,255,099 | ---- | C] () -- C:\Users\Jacqueline\asda.jpg
[2012/05/14 16:48:58 | 000,253,823 | ---- | C] () -- C:\Users\Jacqueline\2zuhzu.jpg
[2012/05/14 16:47:39 | 000,200,101 | ---- | C] () -- C:\Users\Jacqueline\ssss.jpg
[2012/05/13 21:15:21 | 004,785,259 | ---- | C] () -- C:\Users\Jacqueline\Unbenannt.mp3
[2012/05/13 21:14:03 | 003,152,292 | ---- | C] () -- C:\Users\Jacqueline\Chris_und_Rob_-_Superheld_Original.flv.mp3
[2012/05/13 20:23:07 | 000,385,024 | ---- | C] () -- C:\Users\Jacqueline\Finger & Kadel - Wahnsinn (Extended Mix).mp3
[2012/05/13 20:06:37 | 008,250,041 | ---- | C] () -- C:\Users\Jacqueline\Alex Claire - Too close.mp3
[2012/05/11 22:18:15 | 000,041,502 | ---- | C] () -- C:\Users\Jacqueline\img001.jpg
[2012/05/10 22:40:52 | 000,466,080 | ---- | C] () -- C:\Users\Jacqueline\düdü.png
[2012/05/10 19:17:07 | 000,255,294 | ---- | C] () -- C:\Users\Jacqueline\www.jpg
[2012/05/10 13:27:00 | 000,525,967 | ---- | C] () -- C:\Users\Jacqueline\adasd.jpg
[2012/05/09 19:42:57 | 000,531,179 | ---- | C] () -- C:\Users\Jacqueline\pikachu.jpg
[2012/05/06 19:12:44 | 005,420,969 | ---- | C] () -- C:\Users\Jacqueline\2-21 Von allein (WIR & Culcha Candel.mp3
[2012/05/04 17:54:29 | 000,054,693 | ---- | C] () -- C:\Users\Jacqueline\hjbghuikn.jpg
[2012/04/26 20:19:04 | 006,587,872 | ---- | C] () -- C:\Users\Jacqueline\12.mp3
[2012/04/25 21:46:09 | 000,111,111 | ---- | C] () -- C:\Users\Jacqueline\cc.jpg
[2012/04/25 21:45:40 | 000,124,836 | ---- | C] () -- C:\Users\Jacqueline\e.jpg
[2012/04/22 15:45:14 | 000,005,640 | ---- | C] () -- C:\Users\Jacqueline\Unbenannt.jpg
[2012/04/16 17:36:41 | 004,911,219 | ---- | C] () -- C:\Users\Jacqueline\2-18 Stay Awake [Single Version].mp3
[2012/04/15 18:20:24 | 000,070,436 | ---- | C] () -- C:\Users\Jacqueline\VirtualDJ Database v6.xml
[2012/04/09 15:41:17 | 000,012,613 | ---- | C] () -- C:\Users\Jacqueline\sffas.odt
[2012/04/09 14:05:19 | 000,016,976 | ---- | C] () -- C:\Users\Jacqueline\1.0.odt
[2012/03/29 20:25:36 | 000,155,594 | ---- | C] () -- C:\Users\Jacqueline\IMG00630-20120326-0934.jpg
[2012/03/29 20:25:32 | 000,196,591 | ---- | C] () -- C:\Users\Jacqueline\IMG00631-20120326-0934.jpg
[2012/03/27 16:19:13 | 000,190,821 | ---- | C] () -- C:\Users\Jacqueline\überarbeitet.odt
[2012/03/19 17:14:25 | 000,018,737 | ---- | C] () -- C:\Users\Jacqueline\saq.jpg
[2012/03/15 15:22:29 | 000,960,261 | ---- | C] () -- C:\Users\Jacqueline\Foto0450.jpg
[2012/03/11 00:40:16 | 000,058,745 | ---- | C] () -- C:\Users\Jacqueline\angel.jpg
[2012/03/11 00:39:41 | 000,123,639 | ---- | C] () -- C:\Users\Jacqueline\sda.jpg
[2012/03/11 00:23:57 | 000,118,917 | ---- | C] () -- C:\Users\Jacqueline\das.jpg
[2012/03/11 00:19:04 | 000,104,309 | ---- | C] () -- C:\Users\Jacqueline\sds.jpg
[2012/03/10 19:27:23 | 000,044,659 | ---- | C] () -- C:\Users\Jacqueline\Snapshot_20120310_5.jpg
[2012/03/10 19:20:52 | 000,064,637 | ---- | C] () -- C:\Users\Jacqueline\Snapshot_20120310_10.jpg
[2012/03/10 19:18:23 | 000,001,938 | ---- | C] () -- C:\Users\Jacqueline\Snapshot_20120310_5 - Verknüpfung.lnk
[2012/03/10 19:18:11 | 000,001,947 | ---- | C] () -- C:\Users\Jacqueline\Snapshot_20120310_10 - Verknüpfung.lnk
[2012/03/08 21:57:29 | 001,826,596 | ---- | C] () -- C:\Users\Jacqueline\Foto0412.jpg
[2012/03/08 21:57:29 | 001,817,674 | ---- | C] () -- C:\Users\Jacqueline\Foto0410.jpg
[2012/03/08 21:57:29 | 000,936,735 | ---- | C] () -- C:\Users\Jacqueline\Foto0413.jpg
[2012/03/08 21:57:29 | 000,901,341 | ---- | C] () -- C:\Users\Jacqueline\Foto0411.jpg
[2012/03/08 21:57:29 | 000,801,253 | ---- | C] () -- C:\Users\Jacqueline\Foto0406.jpg
[2012/03/08 21:57:29 | 000,590,472 | ---- | C] () -- C:\Users\Jacqueline\Foto0416.jpg
[2012/03/06 16:53:33 | 009,675,160 | ---- | C] () -- C:\Users\Jacqueline\SBot_1.99.33.zip
[2012/03/01 20:27:32 | 000,661,832 | ---- | C] () -- C:\Users\Jacqueline\asasad.jpg
[2012/02/29 22:56:14 | 001,069,834 | ---- | C] () -- C:\Users\Jacqueline\Foto0008e3cbc.jpg
[2012/02/29 20:22:56 | 000,446,131 | ---- | C] () -- C:\Users\Jacqueline\gewonnen.jpg
[2012/02/28 21:30:03 | 001,800,299 | ---- | C] () -- C:\Users\Jacqueline\Foto0398.jpg
[2012/02/28 21:30:01 | 001,373,614 | ---- | C] () -- C:\Users\Jacqueline\Foto0400.jpg
[2012/02/28 20:30:33 | 000,684,162 | ---- | C] () -- C:\Users\Jacqueline\asas.jpg
[2012/02/28 20:17:03 | 022,454,421 | -H-- | C] () -- C:\Users\Jacqueline\SilkroadOnline_GlobalOfficial_v1_350(for_v1_345_349).exe.part
[2012/02/27 15:46:14 | 000,000,084 | ---- | C] () -- C:\windows\SysWow64\academy.dat
[2012/02/27 15:46:11 | 000,003,734 | ---- | C] () -- C:\windows\SysWow64\charpacket.dat
[2012/02/27 15:45:04 | 000,053,403 | ---- | C] () -- C:\windows\SysWow64\items.dat
[2012/02/26 21:22:17 | 000,019,315 | ---- | C] () -- C:\Users\Jacqueline\blubb.odt
[2012/02/21 22:32:04 | 000,054,680 | ---- | C] () -- C:\Users\Jacqueline\Bert.jpg
[2012/02/16 19:47:05 | 000,139,364 | ---- | C] () -- C:\Users\Jacqueline\296172_121573451281045_100002851715518_99991_1094537271_n.jpg
[2012/02/15 18:31:48 | 000,644,124 | ---- | C] () -- C:\Users\Jacqueline\yxy.jpg
[2012/02/13 22:53:09 | 000,012,639 | ---- | C] () -- C:\Users\Jacqueline\spicker deutsch.odt
[2012/02/12 21:55:44 | 000,508,375 | ---- | C] () -- C:\Users\Jacqueline\neuaufgebaut...jpg
[2012/02/11 21:56:40 | 000,071,916 | ---- | C] () -- C:\Users\Jacqueline\11-02-12_1100.jpg
[2012/02/11 21:56:40 | 000,068,303 | ---- | C] () -- C:\Users\Jacqueline\19-01-12_1144.jpg
[2012/02/11 21:56:40 | 000,057,023 | ---- | C] () -- C:\Users\Jacqueline\17-01-12_1514.jpg
[2012/02/11 21:56:40 | 000,054,236 | ---- | C] () -- C:\Users\Jacqueline\11-01-12_1312.jpg
[2012/02/11 21:53:20 | 000,053,058 | ---- | C] () -- C:\Users\Jacqueline\RIMG1580.JPG
[2012/01/30 19:13:50 | 000,189,569 | ---- | C] () -- C:\Users\Jacqueline\img_0471.jpg
[2012/01/17 23:10:36 | 000,009,266 | ---- | C] () -- C:\Users\Jacqueline\nnnnn.odt
[2012/01/17 21:51:01 | 000,004,148 | ---- | C] () -- C:\Users\Jacqueline\hr-3012-32_hd-605-3_ch-3036-1320-1329_lg-3018-82,s-0_g-1_d-3_h-3_a-0,88f784e857962811a70c6d60cdc1dc14.jpg
[2012/01/11 21:39:58 | 000,011,883 | ---- | C] () -- C:\Users\Jacqueline\sport.odt
[2012/01/09 12:20:48 | 000,093,982 | ---- | C] () -- C:\Users\Jacqueline\mmm1.odt
[2012/01/08 15:11:32 | 000,116,736 | -H-- | C] () -- C:\Users\Jacqueline\photothumb.db
[2012/01/08 15:06:02 | 000,230,250 | ---- | C] () -- C:\Users\Jacqueline\Foto0337.jpg
[2012/01/08 15:03:43 | 000,744,173 | ---- | C] () -- C:\Users\Jacqueline\Foto0336.jpg
[2012/01/08 14:50:56 | 001,778,583 | ---- | C] () -- C:\Users\Jacqueline\Foto0335.jpg
[2012/01/06 22:35:00 | 000,112,043 | ---- | C] () -- C:\Users\Jacqueline\Unbenannt 1.odt
[2012/01/01 19:26:42 | 002,242,927 | ---- | C] () -- C:\Users\Jacqueline\Foto0318.jpg
[2012/01/01 16:04:41 | 001,992,740 | ---- | C] () -- C:\Users\Jacqueline\Foto0322.jpg
[2011/12/26 20:07:16 | 000,009,764 | ---- | C] () -- C:\Users\Jacqueline\Habbo, alte räume.odt
[2011/12/22 18:26:56 | 000,606,857 | ---- | C] () -- C:\Users\Jacqueline\;D.jpg
[2011/12/20 16:39:16 | 001,698,696 | ---- | C] () -- C:\Users\Jacqueline\Foto0300.jpg
[2011/12/20 16:39:16 | 000,938,220 | ---- | C] () -- C:\Users\Jacqueline\Foto0302.jpg
[2011/12/20 16:39:16 | 000,456,067 | ---- | C] () -- C:\Users\Jacqueline\Foto0301.jpg
[2011/12/19 18:19:02 | 000,011,394 | ---- | C] () -- C:\Users\Jacqueline\mmm.odt
[2011/12/15 20:44:23 | 000,020,653 | ---- | C] () -- C:\Users\Jacqueline\Englisch..odt
[2011/12/13 22:18:56 | 000,005,120 | ---- | C] () -- C:\Users\Jacqueline\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/13 20:42:12 | 001,384,798 | ---- | C] () -- C:\Users\Jacqueline\Produce.wmv
[2011/12/13 16:06:18 | 090,041,248 | ---- | C] () -- C:\Users\Jacqueline\Video0004.mp4
[2011/12/11 21:29:20 | 000,001,804 | ---- | C] () -- C:\Users\Jacqueline\Canon My Printer.lnk
[2011/12/07 22:22:10 | 000,071,555 | ---- | C] () -- C:\Users\Jacqueline\scheiße xd.pds
[2011/07/21 20:58:30 | 000,258,864 | ---- | C] () -- C:\windows\SUPDRun.exe
[2011/07/21 20:57:58 | 000,003,155 | ---- | C] () -- C:\windows\SysWow64\atipblag.dat
[2011/07/21 07:23:46 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe
[2011/07/21 06:51:40 | 000,000,000 | ---- | C] () -- C:\windows\ativpsrm.bin
[2011/07/21 06:38:29 | 000,000,918 | ---- | C] () -- C:\windows\HotFixList.ini
[2011/07/21 06:03:11 | 000,142,128 | ---- | C] () -- C:\windows\wiainst64.exe
[2011/03/21 12:56:22 | 000,059,904 | ---- | C] () -- C:\windows\SysWow64\OVDecode.dll
 
========== LOP Check ==========
 
[2012/07/14 22:51:00 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\.minecraft
[2012/06/18 18:15:28 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Audacity
[2012/06/18 16:14:41 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Avnex
[2012/07/19 21:36:49 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Babylon
[2012/07/19 21:37:03 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\BabylonToolbar
[2012/06/26 15:51:00 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\convert
[2012/04/20 23:27:00 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Hits4Habbo.de
[2012/07/26 16:14:15 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\ICQ
[2012/06/26 15:51:01 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\loadtbs
[2012/05/27 16:27:30 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\LolClient2
[2011/12/08 18:28:27 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\OpenOffice.org
[2012/06/30 21:31:22 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Origin
[2012/06/05 18:04:05 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\PhotoScape
[2012/05/11 21:13:28 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Spark
[2012/07/03 17:38:10 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\Spotify
[2012/05/01 20:25:03 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\TeamViewer
[2012/07/27 02:21:43 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\TS3Client
[2012/06/29 15:40:36 | 000,000,000 | ---D | M] -- C:\Users\Jacqueline\AppData\Roaming\WebcamMax
[2012/05/30 14:37:06 | 000,032,640 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         
--- --- ---




Ich hoffe auf schnelle effektive Antworten..
Danke schonmal im Vorraus..

Hi, Malwarebytes - LOG

___________________



Zitat:
Malwarebytes Anti-Malware (Test) 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.26.12

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Jacqueline :: JACQUELINE-PC [Administrator]

Schutz: Aktiviert

26.07.2012 18:06:22
mbam-log-2012-07-26 (18-06-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 446641
Laufzeit: 57 Minute(n), 41 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 6
HKCR\CrossriderApp0003491.FBApi (PUP.CrossFire.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0003491.FBApi.1 (PUP.CrossFire.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0003491.Sandbox (PUP.CrossFire.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0003491.Sandbox.1 (PUP.CrossFire.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\Cr_Installer\3491 (Adware.GamePlayLab) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS (PUP.CrossFire.SA) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstalledBrowserExtensions\215 Apps|3491 (PUP.CrossFire.SA) -> Daten: Vid-Saver -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 11
C:\Users\Jacqueline\AppData\Local\Temp\wpbt0.dll (Spyware.Zbot.DG) -> Löschen bei Neustart.
C:\Users\Jacqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FC0RYY7H\readme[1].exe (Spyware.Zbot.DG) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\AppData\Local\Temp\fe0_zip.exe (Spyware.Zbot.DG) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\installer_webcammax.exe (PUP.Adbundler) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\SoftonicDownloader_fuer_av-voice-changer-software.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\SoftonicDownloader_fuer_axife-mouse-recorder.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\SoftonicDownloader_fuer_gpl-mpeg-1-2-directshow-decoder-filter.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\SoftonicDownloader_fuer_ixjingleplayer.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\SoftonicDownloader_fuer_photoscape.exe (PUP.BundleOffer.Downloader.S) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\Downloads\VideoConverterSetup.exe (Trojan.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk (Trojan.Ransom.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Geändert von xJackey (26.07.2012 um 17:27 Uhr)

Alt 26.07.2012, 22:37   #2
t'john
/// Helfer-Team
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?





Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:


Code:
ATTFilter
:Processes
killallprocesses

:OTL

MOD - [2012/07/23 22:06:17 | 000,195,488 | ---- | M] () -- C:\Users\JACQUE~1\AppData\Local\Temp\wpbt0.dll 
MOD - [2012/06/24 16:25:29 | 000,932,528 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC 
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 
IE - HKLM\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) 
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox 
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112542&tt=2912_2&babsrc=HP_ss&mntrId=108511fc000000000000e81132e1e92a 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112542&tt=2912_2&babsrc=SP_ss&mntrId=108511fc000000000000e81132e1e92a 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz= 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{C5896B20-7A78-49D6-B059-815AA2B0BB01}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=CLM&o=15427&src=kw&q={searchTerms}&locale=&apn_ptnrs=LE&apn_dtid=YYYYYYYYDE&apn_uid=66fc579c-9e41-4bac-9899-9d77ba202010&apn_sauid=913CB72A-92EC-40D2-BF16-DECACE91BD1A 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\SearchScopes\{C78F5212-DEA7-43E8-B1C6-DA7660B5170C}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2319825 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ;*.local 
FF - prefs.js..browser.search.defaultengine: "Ask.com" 
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" 
FF - prefs.js..browser.search.defaultthis.engineName: "Winload Customized Web Search" 
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?SSPV=FFOB10&ctid=CT2319825&SearchSource=3&q={searchTerms}" 
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" 
FF - prefs.js..browser.search.selectedEngine: "Google" 
FF - prefs.js..browser.startup.homepage: "http://www.google.de/" 
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?SSPV=FFOB10&ctid=CT2319825&SearchSource=2&q=" 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) 
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) 
O2 - BHO: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) 
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) 
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 
O3 - HKLM\..\Toolbar: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) 
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) 
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) 
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 
O3 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\Toolbar\WebBrowser: (Winload Toolbar) - {40C3CC16-7269-4B32-9531-17F2950FB06F} - C:\Program Files (x86)\Winload\prxtbWinl.dll (Conduit Ltd.) 
O3 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001\..\Toolbar\WebBrowser: (loadtbs) - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - C:\Users\Jacqueline\AppData\Roaming\loadtbs\toolbar.dll (InfiniAd GmbH) 
O4 - HKLM..\Run: [] File not found 
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) 
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [Akamai NetSession Interface] "C:\Users\Jacqueline\AppData\Local\Akamai\netsession_win.exe" File not found 
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent File not found 
O4 - HKU\S-1-5-21-2545573064-1671415295-1629012448-1001..\Run: [Spotify Web Helper] C:\Users\Jacqueline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () 
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found 
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found 
O4 - Startup: C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found 
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found 
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found 
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O32 - HKLM CDRom: AutoRun - 1 

[2012/06/29 15:40:53 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Users\Jacqueline\AppData\Roaming\mozilla\Firefox\Profiles\zbblcamh.default\extensions\toolbar@ask.com 

[2012/07/19 21:36:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar 
[2012/07/19 21:36:49 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Roaming\Babylon 
[2012/07/19 21:36:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon 

[2012/07/19 21:37:03 | 000,000,000 | ---D | C] -- C:\Users\Jacqueline\AppData\Roaming\BabylonToolbar 

[2012/07/26 17:25:59 | 004,503,728 | ---- | M] () -- C:\ProgramData\0tbpw.pad 
[2012/07/26 16:45:08 | 000,001,118 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job 
[2012/07/26 16:43:33 | 000,001,114 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job 
[2012/07/23 22:06:18 | 000,001,885 | ---- | M] () -- C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk 
:Files

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
[emptyjava]
         
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
__________________

__________________

Alt 28.07.2012, 12:56   #3
xJackey
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?



Herzlichen Dank!
__________________

Alt 28.07.2012, 13:27   #4
t'john
/// Helfer-Team
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?



Wir sind noch nicht fertig!

Wo ist das Log?
__________________
Mfg, t'john
Das TB unterstützen

Alt 28.07.2012, 17:16   #5
xJackey
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?



Hallo,

Seit dem ich das eingefügt habe & Malewarebytes durchlaufen hab lassen, ist soweit alles weg..


Alt 28.07.2012, 21:08   #6
t'john
/// Helfer-Team
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?



Willst du bereinigen und absichern oder nicht?
Dein Rechner ist immer noch verseucht.

Poste die Logs von OTL (nach dem Fix) und Malwarebytes!
__________________
--> BKA Virus, bekämpfen wie?

Alt 14.08.2012, 04:54   #7
t'john
/// Helfer-Team
 
BKA Virus, bekämpfen wie? - Standard

BKA Virus, bekämpfen wie?



Fehlende Rückmeldung

Gibt es Probleme beim Abarbeiten obiger Anleitung?

Um Kapazitäten für andere Hilfesuchende freizumachen, lösche ich dieses Thema aus meinen Benachrichtigungen.

Solltest Du weitermachen wollen, schreibe mir eine PN oder eröffne ein neues Thema.
http://www.trojaner-board.de/69886-a...-beachten.html


Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner sauber ist.
__________________
Mfg, t'john
Das TB unterstützen

Antwort

Themen zu BKA Virus, bekämpfen wie?
akamai, babylon toolbar, babylontoolbar, bho, bka - trojaner, bka sperrbildschirm, bonjour, canon, cdrom, conduit, defender, explorer, explorer.exe, firefox, format, google earth, hilfe bei trojaner, home, icq, ics, logfile, microsoft, mozilla, plug-in, realtek, registry, scan, search the web, searchscopes, software, spotify web helper, symantec, system32, temp, virus, winload toolbar, winlogon




Ähnliche Themen: BKA Virus, bekämpfen wie?


  1. Encrypt Virus lässt sich nicht beheben/Löschen/bekämpfen
    Log-Analyse und Auswertung - 09.12.2014 (3)
  2. Ramnit.A 4909 Viren wurden von Avira erkannt! Wie kann ich diesen Virus/Wurm bekämpfen ohne dass Benutzer Dateien zu schaden kommen?
    Plagegeister aller Art und deren Bekämpfung - 16.08.2014 (3)
  3. Holasearch bekämpfen
    Log-Analyse und Auswertung - 04.10.2013 (25)
  4. GVU-Trojaner bekämpfen
    Plagegeister aller Art und deren Bekämpfung - 17.06.2013 (20)
  5. Virus nur mit eingeschränktem Benutzerkonto bekämpfen
    Plagegeister aller Art und deren Bekämpfung - 21.03.2012 (3)
  6. Bundestrojaner? Wie bekämpfen?
    Plagegeister aller Art und deren Bekämpfung - 28.12.2011 (1)
  7. exdoer.be.2 bekämpfen?
    Plagegeister aller Art und deren Bekämpfung - 26.05.2011 (4)
  8. Facebook Virus bei MSN mit Combofix bekämpfen aber CF stürzt immer ab
    Plagegeister aller Art und deren Bekämpfung - 18.08.2010 (1)
  9. Viren bekämpfen....aber wie?
    Plagegeister aller Art und deren Bekämpfung - 01.03.2010 (1)
  10. TR/Dropper.gen wie bekämpfen?
    Plagegeister aller Art und deren Bekämpfung - 23.02.2010 (4)
  11. URL Zone wie bekämpfen
    Plagegeister aller Art und deren Bekämpfung - 15.01.2010 (3)
  12. URL Zone bekämpfen
    Plagegeister aller Art und deren Bekämpfung - 30.10.2009 (15)
  13. Trojaner bekämpfen/entfernen?!
    Plagegeister aller Art und deren Bekämpfung - 24.05.2008 (2)
  14. spylocked 3.6 bekämpfen wie?
    Plagegeister aller Art und deren Bekämpfung - 04.05.2007 (3)
  15. Wie kann ich Trojaner bekämpfen?
    Plagegeister aller Art und deren Bekämpfung - 12.05.2005 (19)
  16. Wie soll ich meinen Virus bekämpfen?
    Plagegeister aller Art und deren Bekämpfung - 23.04.2005 (2)
  17. Desktop Warnung!Wie bekämpfen?
    Plagegeister aller Art und deren Bekämpfung - 07.12.2004 (1)

Zum Thema BKA Virus, bekämpfen wie? - Hallo ihr lieben, jetzt hat mich der BKA bzw. GVU-Trojaner auch erwischt. Ich soll 100€ uCash bezahlen. Ich bräuchte eure schnelle Hilfe, wie ich den Trojaner von meinem Laptop bekomme. - BKA Virus, bekämpfen wie?...
Archiv
Du betrachtest: BKA Virus, bekämpfen wie? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.