Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
GVU Trojaner mit Webcam Einschaltung 27.12.2012

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Plagegeister aller Art und deren Bekämpfung: GVU Trojaner mit Webcam Einschaltung 27.12.2012

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 29.12.2012, 23:02   #1
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hallo,
seit dem 27.12., 23.30h habe ich einen GVU Trojaner mit Webcam Einschaltung auf dem Laptop mit Windows7 Premuim 64bit System.

Habe eine CD mit Kaspersky Rescue Disk 10 eingelegt, diese hat auch zwei Trojaner (Dropper) gefunden. Diese habe ich geloescht.

Dann habe ich Eset nochmals suchen lassen. Verdächtige Datei wurde gefunden. Diese habe ich einfach geloescht.

Dann habe ich erstmals vom trojaner-board gehört ( via Bing-Suche). Habe dann die Freeware Malwarebytes installiert und nach eurer Anweisung suchen lassen.

Folgendes hat der Scan gefunden:


Malwarebytes Anti-Malware (Test) 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2012.12.29.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
JL :: JL-PC [Administrator]

Schutz: Aktiviert

29.12.2012 22:04:11
mbam-log-2012-12-29 (22-04-11).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 236630
Laufzeit: 11 Minute(n), 24 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\ProgramData\dsgsdgdsgdsgw.pad (Exploit.Drop.GSA) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\JL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk (Trojan.Ransom.SUGen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Die beiden Dateien habe ich geloescht/entfernt.

Wie gehe ich weiter vor?

Vielen Dank im voraus!!

LL

Alt 30.12.2012, 10:50   #2
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012




Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


danach:


Systemscan mit OTL (bebilderte Anleitung)

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden)- Doppelklick auf die OTL.exe

  • Vista und Win7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Wähle Scanne Alle Benuzer
  • Oben findest Du ein Kästchen mit Ausgabe. Wähle bitte Minimale Ausgabe
  • Unter Extra Registrierung, wähle bitte Benutze SafeList
  • Klicke nun auf Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in den Thread.
__________________

__________________
Alt 30.12.2012, 12:46   #3
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hier die Logdatei.OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 30.12.2012 12:23:28 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\JL\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,86 Gb Total Physical Memory | 1,48 Gb Available Physical Memory | 38,50% Memory free
7,71 Gb Paging File | 4,91 Gb Available in Paging File | 63,65% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 154,83 Gb Total Space | 54,31 Gb Free Space | 35,08% Space Free | Partition Type: NTFS
Drive D: | 419,86 Gb Total Space | 171,83 Gb Free Space | 40,93% Space Free | Partition Type: NTFS
 
Computer Name: JL-PC | User Name: JL | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\JL\Desktop\adwcleaner.exe ()
PRC - C:\Users\JL\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Opera\opera.exe (Opera Software)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe ()
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Windows\AsScrPro.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe (syncables, LLC)
PRC - C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (syncables, LLC)
PRC - C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
PRC - C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (asus)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtAvAC.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
PRC - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (Microsoft Corp.)
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtPSS.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe ()
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\JL\Desktop\adwcleaner.exe ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
MOD - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\66694f9192bd0dddc2eaf90fbcbcd555\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7c4de95aa433eb8d81a81caf805947a8\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ec80905a71750be50dfc7981ad5ae28\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53d6d827964619285771ed72332d3659\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b311b783e1efaa9527f4c2c9680c44d1\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\i-Funbox DevTeam\libcef.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll ()
MOD - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll ()
MOD - C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll ()
MOD - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe ()
MOD - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll ()
MOD - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (NisSrv) -- C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.)
SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (TeamViewer6) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (TOSHIBA Bluetooth Service) -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ADSMService) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe (ASUSTek Computer Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (NisDrv) -- C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (AsDsm) -- C:\Windows\SysNative\drivers\AsDsm.sys (ASUSTek Computer Inc)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (ATI Technologies, Inc.)
DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.)
DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronic Corp.)
DRV:64bit: - (Tosrfusb) -- C:\Windows\SysNative\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV:64bit: - (tosrfbd) -- C:\Windows\SysNative\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV:64bit: - (TosRfSnd) -- C:\Windows\SysNative\drivers\TosRfSnd.sys (TOSHIBA Corporation)
DRV:64bit: - (Impcd) -- C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (JME) -- C:\Windows\SysNative\drivers\JME.sys (JMicron Technology Corp.)
DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (HECIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (SNP2UVC) -- C:\Windows\SysNative\drivers\snp2uvc.sys ()
DRV:64bit: - (JMCR) -- C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
DRV:64bit: - (VClone) -- C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys ()
DRV:64bit: - (Tosrfcom) -- C:\Windows\SysNative\drivers\tosrfcom.sys (TOSHIBA Corporation)
DRV:64bit: - (tosrfnds) -- C:\Windows\SysNative\drivers\tosrfnds.sys (TOSHIBA Corporation.)
DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (Tosrfhid) -- C:\Windows\SysNative\drivers\Tosrfhid.sys (TOSHIBA Corporation.)
DRV:64bit: - (tosrfbnp) -- C:\Windows\SysNative\drivers\tosrfbnp.sys (TOSHIBA Corporation)
DRV:64bit: - (tosporte) -- C:\Windows\SysNative\drivers\tosporte.sys (TOSHIBA Corporation)
DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - ({B154377D-700F-42cc-9474-23858FBDF4BD}) -- C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl (CyberLink Corp.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=ca244a5b000000000000bcaec5a02c52&tlver=1.4.19.19&ss=1&affID=17395
IE - HKLM\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111224110958905&tb_oid=24-12-2011&tb_mrud=24-12-2011
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2625848&SSPV=TB_IESB20
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101365&mntrId=ca244a5b000000000000bcaec5a02c52
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111224110958905&tb_oid=24-12-2011&tb_mrud=24-12-2011
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.startup.homepage: "hxxp://www.bing.com/?cc=de"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.2.0.7165
FF - prefs.js..keyword.URL: "hxxp://search.babylon.com/?babsrc=adbartrp&affID=101365&mntrId=ca244a5b000000000000bcaec5a02c52&q="
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=4.0: C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\JL\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.08.08 11:56:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\Firefox [2011.08.08 11:57:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [2012.12.22 16:24:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.12.14 11:30:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.12.16 14:08:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.08.08 11:56:57 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.12.14 11:30:55 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.12.16 14:08:34 | 000,000,000 | ---D | M]
 
[2011.01.26 08:56:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JL\AppData\Roaming\mozilla\Extensions
[2012.11.14 13:19:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JL\AppData\Roaming\mozilla\Firefox\Profiles\clpt4w3c.default\extensions
[2012.11.14 13:19:48 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\JL\AppData\Roaming\mozilla\Firefox\Profiles\clpt4w3c.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2012.05.24 12:53:56 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\JL\AppData\Roaming\mozilla\Firefox\Profiles\clpt4w3c.default\extensions\ffxtlbr@babylon.com
[2012.12.14 11:30:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012.12.14 11:30:45 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2012.12.14 11:30:55 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.09.10 08:45:07 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012.06.22 18:43:02 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.10.17 17:03:48 | 000,002,288 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012.09.30 06:27:05 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.06.22 18:43:02 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.22 18:43:02 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.22 18:43:02 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.22 18:43:02 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.03.10 21:26:20 | 000,002,581 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O1 - Hosts: 127.0.0.1 2O7.net
O1 - Hosts: 127.0.0.1 192.168.112.2O7.net
O1 - Hosts: 127.0.0.1       activate.adobe.com
O1 - Hosts: 127.0.0.1       practivate.adobe.com
O1 - Hosts: 127.0.0.1       ereg.adobe.com
O1 - Hosts: 127.0.0.1       activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1       wip3.adobe.com
O1 - Hosts: 127.0.0.1       3dns-3.adobe.com
O1 - Hosts: 48 more lines...
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (DVDVideoSoftTB_DE Toolbar) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll File not found
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB_DE Toolbar) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft Device Center\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelliType Pro] C:\Program Files\Microsoft Device Center\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found
O4:64bit: - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4:64bit: - HKLM..\Run: [TNOD UP] "C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe" /i File not found
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [MSN Toolbar] C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (Microsoft Corp.)
O4 - HKLM..\Run: [RemoteControl9] C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" File not found
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [iFunBoxConnector] C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe ()
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background File not found
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [Syncables] C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (syncables, LLC)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.179.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3883AD0C-6BD9-4E0A-9A25-062D3289A5D9}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8B7F62CF-59AB-4C75-BC5B-EFDA7067FEFF}: DhcpNameServer = 192.168.179.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{479896ac-331d-11e1-a07f-bcaec5a02c52}\Shell - "" = AutoRun
O33 - MountPoints2\{479896ac-331d-11e1-a07f-bcaec5a02c52}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{c5a7b879-4b46-11e0-a293-bcaec5a02c52}\Shell - "" = AutoRun
O33 - MountPoints2\{c5a7b879-4b46-11e0-a293-bcaec5a02c52}\Shell\AutoRun\command - "" = H:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.12.30 10:59:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2012.12.30 10:59:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012.12.30 00:58:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.12.30 00:58:51 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.12.29 22:02:00 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\Malwarebytes
[2012.12.29 22:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.12.29 22:01:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.12.29 22:01:22 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Local\Programs
[2012.12.28 21:18:18 | 000,000,000 | -HSD | C] -- C:\found.000
[2012.12.28 09:36:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2012.12.22 16:27:18 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Local\Conduit
[2012.12.22 16:26:49 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.12.22 16:26:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012.12.22 16:25:23 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\TuneUp Software
[2012.12.22 16:25:11 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.12.22 16:25:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.12.22 16:25:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.12.22 16:23:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2012.12.22 16:23:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2012.12.22 16:23:24 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\DVDVideoSoft
[2012.12.21 05:38:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.12.21 05:37:19 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.12.21 05:37:18 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.12.21 05:37:18 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2012.12.21 05:23:22 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2012.12.21 05:23:22 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2012.12.21 05:23:21 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2012.12.21 05:23:20 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2012.12.14 12:37:14 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\iFunbox_UserCache
[2012.12.14 12:36:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
[2012.12.14 12:36:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\i-Funbox DevTeam
[2012.12.14 11:30:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.12.14 08:02:33 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.12.13 17:57:56 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.12.13 17:57:56 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.12.13 17:57:55 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.12.13 17:57:55 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.12.13 17:57:55 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.12.13 17:57:55 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.12.13 17:57:55 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.12.13 17:57:55 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.12.13 17:57:54 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.12.13 17:57:54 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.12.13 17:57:53 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.12.13 17:57:53 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012.12.13 17:57:51 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.12.13 17:57:51 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.12.13 17:57:51 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2012.12.13 15:12:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2012.12.13 15:06:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012.12.13 06:44:22 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2012.12.13 06:44:22 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2012.12.13 06:44:22 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2012.12.13 06:44:22 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2012.12.13 06:44:19 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2012.12.13 06:44:19 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2012.12.13 06:44:19 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2012.12.13 06:44:19 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2012.12.13 06:44:19 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2012.12.13 06:44:18 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2012.12.13 06:44:18 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2012.12.13 06:44:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2012.12.13 06:44:16 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2012.12.13 06:44:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.12.13 06:44:16 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2012.12.13 06:44:15 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2012.12.13 06:44:15 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2012.12.13 06:44:15 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2012.12.13 06:44:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2012.12.13 06:44:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2012.12.13 06:44:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2012.12.13 06:44:13 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2012.12.13 06:44:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2012.12.13 06:44:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2012.12.13 06:44:12 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2012.12.13 06:43:52 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll
[2012.12.13 06:43:52 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll
 
========== Files - Modified Within 30 Days ==========
 
[2012.12.30 12:03:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.12.30 12:01:01 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.30 11:36:36 | 000,551,997 | ---- | M] () -- C:\Users\JL\Desktop\adwcleaner.exe
[2012.12.30 11:32:40 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.30 11:32:40 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.30 11:24:06 | 000,001,020 | ---- | M] () -- C:\Users\JL\Desktop\Bluetooth-Informationsaustausch.lnk
[2012.12.30 11:22:50 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.30 11:22:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.12.30 11:22:24 | 3105,259,520 | -HS- | M] () -- C:\hiberfil.sys
[2012.12.30 11:00:10 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.12.30 10:37:30 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012.12.30 10:37:24 | 000,001,574 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012.12.30 00:58:53 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.12.22 16:27:49 | 000,000,009 | ---- | M] () -- C:\END
[2012.12.22 16:26:31 | 000,001,201 | ---- | M] () -- C:\Users\JL\Desktop\DVDVideoSoft Free Studio.lnk
[2012.12.22 15:13:01 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.12.22 15:13:01 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.12.22 15:13:01 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.12.22 15:13:01 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.12.22 15:13:01 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.12.21 05:38:00 | 000,001,745 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.12.21 05:27:38 | 005,007,016 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.12.16 18:11:22 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2012.12.16 15:45:03 | 000,367,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2012.12.16 15:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2012.12.16 15:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2012.12.14 20:32:01 | 000,002,496 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.12.14 16:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.12.14 12:36:47 | 000,001,058 | ---- | M] () -- C:\Users\Public\Desktop\iFunbox.lnk
[2012.12.14 08:02:28 | 559,788,889 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.12.14 05:33:52 | 000,002,093 | ---- | M] () -- C:\Users\JL\Desktop\SMA001d SN_ 2100485478 SN2100485478.lnk
[2012.12.13 15:06:03 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012.12.12 21:03:57 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.12.12 21:03:57 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
 
========== Files Created - No Company Name ==========
 
[2012.12.30 11:36:32 | 000,551,997 | ---- | C] () -- C:\Users\JL\Desktop\adwcleaner.exe
[2012.12.30 11:00:10 | 000,001,912 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012.12.30 11:00:04 | 000,002,119 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012.12.30 00:58:53 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.12.22 16:27:48 | 000,000,009 | ---- | C] () -- C:\END
[2012.12.22 16:26:31 | 000,001,201 | ---- | C] () -- C:\Users\JL\Desktop\DVDVideoSoft Free Studio.lnk
[2012.12.21 05:38:00 | 000,001,745 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.12.14 12:36:47 | 000,001,058 | ---- | C] () -- C:\Users\Public\Desktop\iFunbox.lnk
[2012.12.14 08:02:28 | 559,788,889 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.12.14 05:33:52 | 000,002,093 | ---- | C] () -- C:\Users\JL\Desktop\SMA001d SN_ 2100485478 SN2100485478.lnk
[2012.12.13 15:06:03 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012.03.11 15:10:06 | 000,007,074 | ---- | C] () -- C:\Users\JL\.swfinfo
[2012.01.11 16:42:25 | 000,000,000 | ---- | C] () -- C:\Users\JL\AppData\Local\{FB02400B-2B5E-4DF7-9595-E998D2FF1415}
[2011.10.07 18:40:27 | 000,017,408 | ---- | C] () -- C:\Users\JL\AppData\Local\WebpageIcons.db
[2011.08.08 11:50:24 | 000,233,514 | ---- | C] () -- C:\Windows\hpoins47.dat
[2011.04.10 12:57:05 | 000,044,544 | ---- | C] () -- C:\Windows\SysWow64\mhproc.dll
[2011.03.13 00:04:47 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.02.22 20:39:04 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.02.07 19:00:08 | 001,529,856 | ---- | C] () -- C:\Windows\SysWow64\ff_samplerate.dll
[2011.02.07 19:00:08 | 000,925,667 | ---- | C] () -- C:\Windows\SysWow64\ffmpegmt.dll
[2011.02.07 19:00:08 | 000,721,798 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.02.07 19:00:08 | 000,336,384 | ---- | C] () -- C:\Windows\SysWow64\ff_libfaad2.dll
[2011.02.07 19:00:08 | 000,324,096 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2011.02.07 19:00:08 | 000,216,576 | ---- | C] () -- C:\Windows\SysWow64\ff_libdts.dll
[2011.02.07 19:00:08 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ff_libmad.dll
[2011.02.07 19:00:08 | 000,145,408 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2011.02.07 19:00:08 | 000,140,800 | ---- | C] () -- C:\Windows\SysWow64\ff_unrar.dll
[2011.02.07 19:00:08 | 000,121,856 | ---- | C] () -- C:\Windows\SysWow64\ff_liba52.dll
[2011.02.07 19:00:08 | 000,100,864 | ---- | C] () -- C:\Windows\SysWow64\ff_wmv9.dll
[2011.02.07 19:00:08 | 000,065,024 | ---- | C] () -- C:\Windows\SysWow64\FLT_ffdshow.dll
[2011.02.07 18:45:52 | 000,080,896 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011.02.07 18:39:02 | 004,166,551 | ---- | C] () -- C:\Windows\SysWow64\ffmpeg.dll
[2011.02.01 12:04:27 | 002,681,344 | ---- | C] () -- C:\Windows\SysWow64\dvmsg.dll
[2011.01.29 17:54:12 | 000,003,584 | ---- | C] () -- C:\Users\JL\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.27 21:06:01 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2010.12.10 06:08:51 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2011.01.26 08:48:02 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Asus WebStorage
[2011.10.17 17:03:46 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Babylon
[2012.05.17 17:55:53 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\BSplayer PRO
[2011.03.10 22:07:10 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.04.10 08:12:50 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DriverCure
[2012.12.22 16:26:49 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DVDVideoSoft
[2012.12.22 16:26:50 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.12.18 06:02:28 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\iFunbox_UserCache
[2012.12.22 16:23:56 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\OpenCandy
[2011.10.21 05:39:36 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Opera
[2011.04.10 08:12:50 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\ParetoLogic
[2012.02.02 14:33:07 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\ProtectDISC
[2011.03.10 22:21:53 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Quark
[2011.12.22 21:24:41 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\RavensburgerTipToi
[2011.08.09 18:12:21 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\TeamViewer
[2011.12.30 20:47:25 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Tobit
[2012.12.22 16:25:23 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\TuneUp Software
[2011.10.28 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Unity
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:3E7393FC

< End of report >
--- --- ---
__________________
Alt 30.12.2012, 14:09   #4
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


adwCleaner Log?
__________________
Mfg, t'john
Das TB unterstützen

Alt 30.12.2012, 14:45   #5
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hallo Ihr, hier der adwCleaner Log:

# AdwCleaner v2.104 - Datei am 30/12/2012 um 12:33:58 erstellt
# Aktualisiert am 29/12/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : JL - JL-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\JL\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Software Update Utility
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\JL\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\JL\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\JL\AppData\Local\Temp\Conduit
Ordner Gelöscht : C:\Users\JL\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\WinampToolbarData
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\OpenCandy

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SmartBar.CT2625848
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16457

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2625848&SSPV=TB_IESB20 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=ca244a5b000000000000bcaec5a02c52&tlver=1.4.19.19&ss=1&affID=17395 --> hxxp://www.google.com

-\\ Mozilla Firefox v17.0.1 (de)

Datei : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\prefs.js

Gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Gelöscht : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Gelöscht : user_pref("browser.search.order.1", "Search the web (Babylon)");
Gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 16);
Gelöscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "de");
Gelöscht : user_pref("extensions.BabylonToolbar.firstRun", false);
Gelöscht : user_pref("extensions.BabylonToolbar.hdrMd5", "F0E76A9ADDD921D7CD0CA7D36440C145");
Gelöscht : user_pref("extensions.BabylonToolbar.id", "5addf3d5846444e1854c820ba12594d7");
Gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15120");
Gelöscht : user_pref("extensions.BabylonToolbar.lastActv", "16");
Gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 16);
Gelöscht : user_pref("extensions.BabylonToolbar.newTab", true);
Gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Gelöscht : user_pref("extensions.BabylonToolbar.propectorlck", 62586535);
Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Gelöscht : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Gelöscht : user_pref("extensions.BabylonToolbar.sid", "5addf3d5846444e1854c820ba12594d7");
Gelöscht : user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=adbartrp&affID=101365&mntrId=ca244a5b000[...]

-\\ Opera v12.12.1707.0

Datei : C:\Users\JL\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [9936 octets] - [30/12/2012 12:19:00]
AdwCleaner[R2].txt - [9996 octets] - [30/12/2012 12:32:24]
AdwCleaner[R3].txt - [10057 octets] - [30/12/2012 12:33:47]
AdwCleaner[S2].txt - [9758 octets] - [30/12/2012 12:33:58]

########## EOF - C:\AdwCleaner[S2].txt - [9818 octets] ##########

# AdwCleaner v2.104 - Datei am 30/12/2012 um 12:33:58 erstellt
# Aktualisiert am 29/12/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : JL - JL-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\JL\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Software Update Utility
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\JL\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\JL\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\JL\AppData\Local\Temp\Conduit
Ordner Gelöscht : C:\Users\JL\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\WinampToolbarData
Ordner Gelöscht : C:\Users\JL\AppData\Roaming\OpenCandy

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SmartBar.CT2625848
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16457

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2625848&SSPV=TB_IESB20 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=ca244a5b000000000000bcaec5a02c52&tlver=1.4.19.19&ss=1&affID=17395 --> hxxp://www.google.com

-\\ Mozilla Firefox v17.0.1 (de)

Datei : C:\Users\JL\AppData\Roaming\Mozilla\Firefox\Profiles\clpt4w3c.default\prefs.js

Gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Gelöscht : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Gelöscht : user_pref("browser.search.order.1", "Search the web (Babylon)");
Gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 16);
Gelöscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "de");
Gelöscht : user_pref("extensions.BabylonToolbar.firstRun", false);
Gelöscht : user_pref("extensions.BabylonToolbar.hdrMd5", "F0E76A9ADDD921D7CD0CA7D36440C145");
Gelöscht : user_pref("extensions.BabylonToolbar.id", "5addf3d5846444e1854c820ba12594d7");
Gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15120");
Gelöscht : user_pref("extensions.BabylonToolbar.lastActv", "16");
Gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 16);
Gelöscht : user_pref("extensions.BabylonToolbar.newTab", true);
Gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Gelöscht : user_pref("extensions.BabylonToolbar.propectorlck", 62586535);
Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Gelöscht : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Gelöscht : user_pref("extensions.BabylonToolbar.sid", "5addf3d5846444e1854c820ba12594d7");
Gelöscht : user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=adbartrp&affID=101365&mntrId=ca244a5b000[...]

-\\ Opera v12.12.1707.0

Datei : C:\Users\JL\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [9936 octets] - [30/12/2012 12:19:00]
AdwCleaner[R2].txt - [9996 octets] - [30/12/2012 12:32:24]
AdwCleaner[R3].txt - [10057 octets] - [30/12/2012 12:33:47]
AdwCleaner[S2].txt - [9758 octets] - [30/12/2012 12:33:58]

########## EOF - C:\AdwCleaner[S2].txt - [9818 octets] ##########


Alt 31.12.2012, 09:02   #6
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Du hast die Reihenfolge nicht beachtet.

Neues OTL-Log
__________________
--> GVU Trojaner mit Webcam Einschaltung 27.12.2012

Alt 31.12.2012, 10:35   #7
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Guten Morgen,

die Reihenfolge hatte ich eingehalten wie beschrieben. Ich hatte nur zuerst das OTL geschickt.

Grüße, Lothar

Alt 31.12.2012, 14:18   #8
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Und wie steht es hier?

http://www.trojaner-board.de/128830-...tml#post980737
__________________
Mfg, t'john
Das TB unterstützen

Alt 31.12.2012, 14:46   #9
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hallo, hier jetzt der neue OLT Bericht:OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 31.12.2012 14:33:04 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\JL\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,86 Gb Total Physical Memory | 1,47 Gb Available Physical Memory | 38,18% Memory free
7,71 Gb Paging File | 4,96 Gb Available in Paging File | 64,28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 154,83 Gb Total Space | 53,48 Gb Free Space | 34,54% Space Free | Partition Type: NTFS
Drive D: | 419,86 Gb Total Space | 171,83 Gb Free Space | 40,93% Space Free | Partition Type: NTFS
 
Computer Name: JL-PC | User Name: JL | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\JL\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Opera\opera.exe (Opera Software)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe ()
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Windows\AsScrPro.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe (syncables, LLC)
PRC - C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (syncables, LLC)
PRC - C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
PRC - C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (asus)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtAvAC.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
PRC - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (Microsoft Corp.)
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtPSS.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe ()
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll ()
MOD - C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
MOD - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\66694f9192bd0dddc2eaf90fbcbcd555\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7c4de95aa433eb8d81a81caf805947a8\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ec80905a71750be50dfc7981ad5ae28\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53d6d827964619285771ed72332d3659\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b311b783e1efaa9527f4c2c9680c44d1\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\i-Funbox DevTeam\libcef.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSPTLS.DLL ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll ()
MOD - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll ()
MOD - C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll ()
MOD - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll ()
MOD - C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll ()
MOD - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe ()
MOD - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll ()
MOD - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (NisSrv) -- C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.)
SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (TeamViewer6) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (TOSHIBA Bluetooth Service) -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ADSMService) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe (ASUSTek Computer Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (NisDrv) -- C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (AsDsm) -- C:\Windows\SysNative\drivers\AsDsm.sys (ASUSTek Computer Inc)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdW76.sys (ATI Technologies, Inc.)
DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.)
DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronic Corp.)
DRV:64bit: - (Tosrfusb) -- C:\Windows\SysNative\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV:64bit: - (tosrfbd) -- C:\Windows\SysNative\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV:64bit: - (TosRfSnd) -- C:\Windows\SysNative\drivers\TosRfSnd.sys (TOSHIBA Corporation)
DRV:64bit: - (Impcd) -- C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (JME) -- C:\Windows\SysNative\drivers\JME.sys (JMicron Technology Corp.)
DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (HECIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (SNP2UVC) -- C:\Windows\SysNative\drivers\snp2uvc.sys ()
DRV:64bit: - (JMCR) -- C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
DRV:64bit: - (VClone) -- C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys ()
DRV:64bit: - (Tosrfcom) -- C:\Windows\SysNative\drivers\tosrfcom.sys (TOSHIBA Corporation)
DRV:64bit: - (tosrfnds) -- C:\Windows\SysNative\drivers\tosrfnds.sys (TOSHIBA Corporation.)
DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (Tosrfhid) -- C:\Windows\SysNative\drivers\Tosrfhid.sys (TOSHIBA Corporation.)
DRV:64bit: - (tosrfbnp) -- C:\Windows\SysNative\drivers\tosrfbnp.sys (TOSHIBA Corporation)
DRV:64bit: - (tosporte) -- C:\Windows\SysNative\drivers\tosporte.sys (TOSHIBA Corporation)
DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - ({B154377D-700F-42cc-9474-23858FBDF4BD}) -- C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl (CyberLink Corp.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com
IE - HKLM\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.startup.homepage: "hxxp://www.bing.com/?cc=de"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.2.0.7165
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=4.0: C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\JL\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.08.08 11:56:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\Firefox [2011.08.08 11:57:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [2012.12.22 16:24:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.12.14 11:30:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.12.30 12:34:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011.08.08 11:56:57 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.12.14 11:30:55 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.12.30 12:34:00 | 000,000,000 | ---D | M]
 
[2011.01.26 08:56:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JL\AppData\Roaming\mozilla\Extensions
[2012.12.30 12:34:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JL\AppData\Roaming\mozilla\Firefox\Profiles\clpt4w3c.default\extensions
[2012.12.14 11:30:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012.12.14 11:30:45 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2012.12.14 11:30:55 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.09.10 08:45:07 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012.06.22 18:43:02 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.30 06:27:05 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.06.22 18:43:02 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.22 18:43:02 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.22 18:43:02 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.22 18:43:02 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.03.10 21:26:20 | 000,002,581 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O1 - Hosts: 127.0.0.1 2O7.net
O1 - Hosts: 127.0.0.1 192.168.112.2O7.net
O1 - Hosts: 127.0.0.1       activate.adobe.com
O1 - Hosts: 127.0.0.1       practivate.adobe.com
O1 - Hosts: 127.0.0.1       ereg.adobe.com
O1 - Hosts: 127.0.0.1       activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1       wip3.adobe.com
O1 - Hosts: 127.0.0.1       3dns-3.adobe.com
O1 - Hosts: 48 more lines...
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (DVDVideoSoftTB_DE Toolbar) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll File not found
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB_DE Toolbar) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll ()
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft Device Center\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelliType Pro] C:\Program Files\Microsoft Device Center\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd File not found
O4:64bit: - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4:64bit: - HKLM..\Run: [TNOD UP] "C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe" /i File not found
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [MSN Toolbar] C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (Microsoft Corp.)
O4 - HKLM..\Run: [RemoteControl9] C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" File not found
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [iFunBoxConnector] C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe ()
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background File not found
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [Syncables] C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (syncables, LLC)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3883AD0C-6BD9-4E0A-9A25-062D3289A5D9}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8B7F62CF-59AB-4C75-BC5B-EFDA7067FEFF}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{479896ac-331d-11e1-a07f-bcaec5a02c52}\Shell - "" = AutoRun
O33 - MountPoints2\{479896ac-331d-11e1-a07f-bcaec5a02c52}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{c5a7b879-4b46-11e0-a293-bcaec5a02c52}\Shell - "" = AutoRun
O33 - MountPoints2\{c5a7b879-4b46-11e0-a293-bcaec5a02c52}\Shell\AutoRun\command - "" = H:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.12.30 10:59:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2012.12.30 10:59:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012.12.30 00:58:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.12.30 00:58:51 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.12.29 22:02:00 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\Malwarebytes
[2012.12.29 22:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.12.29 22:01:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.12.29 22:01:22 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Local\Programs
[2012.12.28 21:18:18 | 000,000,000 | -HSD | C] -- C:\found.000
[2012.12.28 09:36:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2012.12.22 16:26:49 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.12.22 16:26:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012.12.22 16:25:23 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\TuneUp Software
[2012.12.22 16:25:11 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.12.22 16:25:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.12.22 16:25:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.12.22 16:23:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2012.12.22 16:23:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2012.12.22 16:23:24 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\DVDVideoSoft
[2012.12.21 05:38:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.12.21 05:37:19 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.12.21 05:37:18 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.12.21 05:37:18 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2012.12.21 05:23:22 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2012.12.21 05:23:22 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2012.12.21 05:23:21 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2012.12.21 05:23:20 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2012.12.14 12:37:14 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\iFunbox_UserCache
[2012.12.14 12:36:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
[2012.12.14 12:36:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\i-Funbox DevTeam
[2012.12.14 11:30:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.12.14 08:02:33 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.12.13 17:57:56 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.12.13 17:57:56 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.12.13 17:57:55 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.12.13 17:57:55 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.12.13 17:57:55 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.12.13 17:57:55 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.12.13 17:57:55 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.12.13 17:57:55 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.12.13 17:57:54 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.12.13 17:57:54 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.12.13 17:57:53 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.12.13 17:57:53 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012.12.13 17:57:51 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.12.13 17:57:51 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.12.13 17:57:51 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2012.12.13 15:12:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2012.12.13 15:06:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012.12.13 06:44:22 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2012.12.13 06:44:22 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2012.12.13 06:44:22 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2012.12.13 06:44:22 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2012.12.13 06:44:19 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2012.12.13 06:44:19 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2012.12.13 06:44:19 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2012.12.13 06:44:19 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2012.12.13 06:44:19 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2012.12.13 06:44:18 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2012.12.13 06:44:18 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2012.12.13 06:44:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2012.12.13 06:44:16 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2012.12.13 06:44:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.12.13 06:44:16 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2012.12.13 06:44:15 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2012.12.13 06:44:15 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2012.12.13 06:44:15 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.12.13 06:44:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2012.12.13 06:44:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2012.12.13 06:44:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2012.12.13 06:44:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2012.12.13 06:44:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2012.12.13 06:44:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2012.12.13 06:44:13 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2012.12.13 06:44:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2012.12.13 06:44:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2012.12.13 06:44:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2012.12.13 06:44:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2012.12.13 06:44:12 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2012.12.13 06:43:52 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll
[2012.12.13 06:43:52 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll
 
========== Files - Modified Within 30 Days ==========
 
[2012.12.31 14:03:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.12.31 14:01:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.31 09:01:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.31 08:25:06 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.31 08:25:06 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.31 08:19:41 | 000,001,020 | ---- | M] () -- C:\Users\JL\Desktop\Bluetooth-Informationsaustausch.lnk
[2012.12.31 08:16:27 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012.12.31 08:15:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.12.31 08:15:42 | 3105,259,520 | -HS- | M] () -- C:\hiberfil.sys
[2012.12.30 11:36:36 | 000,551,997 | ---- | M] () -- C:\Users\JL\Desktop\adwcleaner.exe
[2012.12.30 11:00:10 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.12.30 10:37:24 | 000,001,574 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012.12.30 00:58:53 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.12.22 16:26:31 | 000,001,201 | ---- | M] () -- C:\Users\JL\Desktop\DVDVideoSoft Free Studio.lnk
[2012.12.22 15:13:01 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.12.22 15:13:01 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.12.22 15:13:01 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.12.22 15:13:01 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.12.22 15:13:01 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.12.21 05:38:00 | 000,001,745 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.12.21 05:27:38 | 005,007,016 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.12.16 18:11:22 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2012.12.16 15:45:03 | 000,367,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2012.12.16 15:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2012.12.16 15:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2012.12.14 20:32:01 | 000,002,496 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.12.14 16:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.12.14 12:36:47 | 000,001,058 | ---- | M] () -- C:\Users\Public\Desktop\iFunbox.lnk
[2012.12.14 08:02:28 | 559,788,889 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.12.14 05:33:52 | 000,002,093 | ---- | M] () -- C:\Users\JL\Desktop\SMA001d SN_ 2100485478 SN2100485478.lnk
[2012.12.13 15:06:03 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012.12.12 21:03:57 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.12.12 21:03:57 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
 
========== Files Created - No Company Name ==========
 
[2012.12.30 11:36:32 | 000,551,997 | ---- | C] () -- C:\Users\JL\Desktop\adwcleaner.exe
[2012.12.30 11:00:10 | 000,001,912 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012.12.30 11:00:04 | 000,002,119 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012.12.30 00:58:53 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.12.22 16:26:31 | 000,001,201 | ---- | C] () -- C:\Users\JL\Desktop\DVDVideoSoft Free Studio.lnk
[2012.12.21 05:38:00 | 000,001,745 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.12.14 12:36:47 | 000,001,058 | ---- | C] () -- C:\Users\Public\Desktop\iFunbox.lnk
[2012.12.14 08:02:28 | 559,788,889 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.12.14 05:33:52 | 000,002,093 | ---- | C] () -- C:\Users\JL\Desktop\SMA001d SN_ 2100485478 SN2100485478.lnk
[2012.12.13 15:06:03 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012.03.11 15:10:06 | 000,007,074 | ---- | C] () -- C:\Users\JL\.swfinfo
[2012.01.11 16:42:25 | 000,000,000 | ---- | C] () -- C:\Users\JL\AppData\Local\{FB02400B-2B5E-4DF7-9595-E998D2FF1415}
[2011.10.07 18:40:27 | 000,017,408 | ---- | C] () -- C:\Users\JL\AppData\Local\WebpageIcons.db
[2011.08.08 11:50:24 | 000,233,514 | ---- | C] () -- C:\Windows\hpoins47.dat
[2011.04.10 12:57:05 | 000,044,544 | ---- | C] () -- C:\Windows\SysWow64\mhproc.dll
[2011.03.13 00:04:47 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.02.22 20:39:04 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.02.07 19:00:08 | 001,529,856 | ---- | C] () -- C:\Windows\SysWow64\ff_samplerate.dll
[2011.02.07 19:00:08 | 000,925,667 | ---- | C] () -- C:\Windows\SysWow64\ffmpegmt.dll
[2011.02.07 19:00:08 | 000,721,798 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.02.07 19:00:08 | 000,336,384 | ---- | C] () -- C:\Windows\SysWow64\ff_libfaad2.dll
[2011.02.07 19:00:08 | 000,324,096 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2011.02.07 19:00:08 | 000,216,576 | ---- | C] () -- C:\Windows\SysWow64\ff_libdts.dll
[2011.02.07 19:00:08 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ff_libmad.dll
[2011.02.07 19:00:08 | 000,145,408 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2011.02.07 19:00:08 | 000,140,800 | ---- | C] () -- C:\Windows\SysWow64\ff_unrar.dll
[2011.02.07 19:00:08 | 000,121,856 | ---- | C] () -- C:\Windows\SysWow64\ff_liba52.dll
[2011.02.07 19:00:08 | 000,100,864 | ---- | C] () -- C:\Windows\SysWow64\ff_wmv9.dll
[2011.02.07 19:00:08 | 000,065,024 | ---- | C] () -- C:\Windows\SysWow64\FLT_ffdshow.dll
[2011.02.07 18:45:52 | 000,080,896 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011.02.07 18:39:02 | 004,166,551 | ---- | C] () -- C:\Windows\SysWow64\ffmpeg.dll
[2011.02.01 12:04:27 | 002,681,344 | ---- | C] () -- C:\Windows\SysWow64\dvmsg.dll
[2011.01.29 17:54:12 | 000,003,584 | ---- | C] () -- C:\Users\JL\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.27 21:06:01 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2010.12.10 06:08:51 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2011.01.26 08:48:02 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Asus WebStorage
[2012.05.17 17:55:53 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\BSplayer PRO
[2011.03.10 22:07:10 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.04.10 08:12:50 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DriverCure
[2012.12.22 16:26:49 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DVDVideoSoft
[2012.12.22 16:26:50 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.12.18 06:02:28 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\iFunbox_UserCache
[2011.10.21 05:39:36 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Opera
[2011.04.10 08:12:50 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\ParetoLogic
[2012.02.02 14:33:07 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\ProtectDISC
[2011.03.10 22:21:53 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Quark
[2011.12.22 21:24:41 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\RavensburgerTipToi
[2011.08.09 18:12:21 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\TeamViewer
[2011.12.30 20:47:25 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Tobit
[2012.12.22 16:25:23 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\TuneUp Software
[2011.10.28 19:20:00 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\Unity
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:3E7393FC

< End of report >
--- --- ---
Alt 31.12.2012, 16:58   #10
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:
  • Der Fix fängt mit :OTL an. Vergewissere dich, dass du ihn richtig kopiert hast.


Code:
ATTFilter
:OTL
IE - HKLM\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll () 
IE - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\..\URLSearchHook: {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll () 
O4:64bit: - HKLM..\Run: [Setwallpaper] c:\ProgramData\SetWallpaper.cmd File not found 
O4 - HKLM..\Run: [] File not found 
O4 - HKLM..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" File not found 
O4 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001..\Run: [AdobeBridge] File not found 
O7 - HKU\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 

[2012.12.22 16:26:49 | 000,000,000 | ---D | C] -- C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers 
[2012.12.22 16:26:31 | 000,001,201 | ---- | M] () -- C:\Users\JL\Desktop\DVDVideoSoft Free Studio.lnk 
[2012.12.22 16:26:49 | 000,000,000 | ---D | M] -- C:\Users\JL\AppData\Roaming\DVDVideoSoft 

:Files
C:\ProgramData\*.exe
C:\ProgramData\*.dll
C:\ProgramData\*.tmp
C:\ProgramData\TEMP
C:\Users\JL\*.tmp
C:\Users\JL\AppData\Local\Temp\*.exe
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
ipconfig /flushdns /c
:Commands
[emptytemp]
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
__________________
Mfg, t'john
Das TB unterstützen

Alt 31.12.2012, 17:32   #11
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hallo, hier das Ergebnis nach dem Neustart:

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}\ deleted successfully.
C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-1330783970-360372414-1813274389-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}\ not found.
File C:\Users\JL\AppData\LocalLow\CT2625848\ldrtbDVDV.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Setwallpaper deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1330783970-360372414-1813274389-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1330783970-360372414-1813274389-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun deleted successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoftIEHelpers folder moved successfully.
C:\Users\JL\Desktop\DVDVideoSoft Free Studio.lnk moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\logs folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeWebMVideoConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToTabletPCConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToJPGConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToJPGConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToJPGConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToDVDConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToDVDConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToDVDConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackBerryConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeMP4VideoConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeHTML5VideoPlayerAndConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAVIVideoConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioCDBurner\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioCDBurner\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioCDBurner\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\FreeAudioCDBurner folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\None folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Mountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\GreenHills folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Default folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Concert folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Avatar folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft\backup folder moved successfully.
C:\Users\JL\AppData\Roaming\DVDVideoSoft folder moved successfully.
========== FILES ==========
C:\ProgramData\FullRemove.exe moved successfully.
File\Folder C:\ProgramData\*.dll not found.
File\Folder C:\ProgramData\*.tmp not found.
C:\ProgramData\Temp\{E3739848-5329-48E3-8D28-5BBD6E8BE384} folder moved successfully.
C:\ProgramData\Temp\{D36DD326-7280-11D8-97C8-000129760CBE} folder moved successfully.
C:\ProgramData\Temp\{CB099890-1D5F-11D5-9EA9-0050BAE317E1} folder moved successfully.
C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243} folder moved successfully.
C:\ProgramData\Temp\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} folder moved successfully.
C:\ProgramData\Temp\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41} folder moved successfully.
C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658} folder moved successfully.
C:\ProgramData\Temp\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} folder moved successfully.
C:\ProgramData\Temp folder moved successfully.
File\Folder C:\Users\JL\*.tmp not found.
C:\Users\JL\AppData\Local\Temp\contentDATs.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\GameXNGO.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\install_reader10_de_mssd_aih.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\jre-6u25-windows-i586-iftw-rv.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\ose00000.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\Refresh.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\SecurityScan_Release.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\SkypeSetup.exe moved successfully.
C:\Users\JL\AppData\Local\Temp\TUUUninstallHelper.exe moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 folder moved successfully.
C:\Users\JL\AppData\LocalLow\Sun\Java\Deployment\cache folder moved successfully.
File/Folder C:\Users\JL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk not found.
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\JL\Desktop\cmd.bat deleted successfully.
C:\Users\JL\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: JL
->Temp folder emptied: 1160068934 bytes
->Temporary Internet Files folder emptied: 39104569313 bytes
->FireFox cache emptied: 66391179 bytes
->Apple Safari cache emptied: 1662976 bytes
->Opera cache emptied: 3561777 bytes
->Flash cache emptied: 42540 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1822495858 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 57737 bytes
RecycleBin emptied: 21309664 bytes

Total Files Cleaned = 40.226,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12312012_171727

Files\Folders moved on Reboot...
C:\Users\JL\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Alt 31.12.2012, 18:04   #12
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Entpacke das Archiv auf deinem Desktop.
  • Im neu erstellten Ordner starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________
Mfg, t'john
Das TB unterstützen

Alt 31.12.2012, 18:40   #13
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hallo, hier das Ergebnis aus dem AntirootKit: Das Programm hat gemeldet, dass keine Malware gefunden wurde. Es gab kein Cleanup und keinen Neustart.

Malwarebytes Anti-Rootkit 1.01.0.1011
Malwarebytes : Free Anti-Malware download

Database version: v2012.12.31.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
JL :: JL-PC [administrator]

31.12.2012 18:32:59
mbar-log-2012-12-31 (18-32-59).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 30331
Time elapsed: 12 minute(s), 11 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Alt 01.01.2013, 12:21   #14
t'john
/// Helfer-Team
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Sehr gut!



ESET Online Scanner

Vorbereitung

  • Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an.
  • Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.
  • Vista/Win7-User: Bitte den Browser unbedingt als Administrator starten.
Los geht's

  • Lade und starte Eset Smartinstaller
  • Haken setzen bei YES, I accept the Terms of Use.
  • Klick auf Start.
  • Haken setzen bei Remove found threads und Scan archives.
  • Klick auf Start.
  • Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Finish drücken.
  • Browser schließen.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (manchmal auch C:\Programme\Eset\log.txt) suchen und mit Deinem Editor öffnen.
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset
__________________
Mfg, t'john
Das TB unterstützen

Alt 01.01.2013, 13:03   #15
tomduli
 
GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Standard

GVU Trojaner mit Webcam Einschaltung 27.12.2012


Hallo, erstmal wünsche ich Dir/Euch ein frohes, gesegnetes Neues Jahr! ich habe keine eigenen USB Sticks oder Festplatten. Somit werde ich den Eset Online Scan nicht ausführen.

Vielen, vielen Dank für die Hilfe!

MFG!
tomduli

Antwort
Seite 1 von 2 1 2

Themen zu GVU Trojaner mit Webcam Einschaltung 27.12.2012
administrator, anti-malware, appdata, autostart, datei, dsgsdgdsgdsgw.pad, eset, exp/2012-0507.cz.3, freeware, gelöscht, java/hackav.a, kaspersky, laptop, malwarebytes, microsoft, quarantäne, roaming, runctf.lnk, scan, suche, tr/rogue.kdv.683070, trojaner, trojaner-board, version, webcam, windows


« Trojaner, Java Viren und Exploits - in Form von z.B. Rogue.KD, Kalika.E, Agent.MT verschiedene Exploits :( | Gvu-trojaner mit webcam / gmer hängt gerade »


Ähnliche Themen: GVU Trojaner mit Webcam Einschaltung 27.12.2012


  1. GVU Trojaner mit Webcam
    Plagegeister aller Art und deren Bekämpfung - 02.08.2013 (16)
  2. GVU Trojaner hat Windows 7 gesperrt - Webcam - paysafecard oder ukash - Trojaner-Board
    Plagegeister aller Art und deren Bekämpfung - 26.06.2013 (3)
  3. GVU Trojaner mit Webcam
    Log-Analyse und Auswertung - 04.02.2013 (8)
  4. GVU Trojaner mit Webcam
    Log-Analyse und Auswertung - 20.01.2013 (17)
  5. GVU Trojaner mit Webcam
    Plagegeister aller Art und deren Bekämpfung - 10.01.2013 (7)
  6. GVU Trojaner mit webcam
    Log-Analyse und Auswertung - 20.12.2012 (24)
  7. GVU Trojaner mit Webcam
    Plagegeister aller Art und deren Bekämpfung - 16.12.2012 (1)
  8. GVU Trojaner (mit Webcam)
    Log-Analyse und Auswertung - 15.12.2012 (1)
  9. GVU Trojaner mit Webcam
    Plagegeister aller Art und deren Bekämpfung - 18.09.2012 (39)
  10. Trojaner TR/Agent.464.4 , EXP/2012-0507.CX, EXP/2012-0507.DV, JS/Expack-ZG
    Plagegeister aller Art und deren Bekämpfung - 10.09.2012 (9)
  11. GVU Trojaner mit WebCam: TR/Rogue.kdv.683070 und EXP/2012-0507.CZ.3
    Log-Analyse und Auswertung - 04.08.2012 (14)
  12. Infektion von XP-Rechner Ende Juli 2012, mit neuem GVU-Bundespolizei Ukash & Paysafe & Webcam
    Plagegeister aller Art und deren Bekämpfung - 01.08.2012 (1)
  13. GVU Trojaner mit Webcam
    Log-Analyse und Auswertung - 20.07.2012 (9)
  14. GVU Trojaner mit Webcam
    Plagegeister aller Art und deren Bekämpfung - 10.07.2012 (1)
  15. GVU-trojaner mit webcam
    Plagegeister aller Art und deren Bekämpfung - 09.07.2012 (2)
  16. GVU Trojaner neu mit Webcam
    Plagegeister aller Art und deren Bekämpfung - 25.06.2012 (2)
  17. Win 7 Antispyware 2012, Vista Antivirus 2012, XP Security 2012 entfernen
    Anleitungen, FAQs & Links - 07.06.2011 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU Trojaner mit Webcam Einschaltung 27.12.2012 - Hallo, seit dem 27.12., 23.30h habe ich einen GVU Trojaner mit Webcam Einschaltung auf dem Laptop mit Windows7 Premuim 64bit System. Habe eine CD mit Kaspersky Rescue Disk 10 eingelegt, - GVU Trojaner mit Webcam Einschaltung 27.12.2012...
Archiv
Du betrachtest: GVU Trojaner mit Webcam Einschaltung 27.12.2012 auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54