Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: BKA Trojaner, boote ueber CD aber komme nicht weiter

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 08.08.2011, 17:38   #1
arkturos
 
BKA Trojaner, boote ueber CD aber komme nicht weiter - Standard

BKA Trojaner, boote ueber CD aber komme nicht weiter



Hallo allerseits!!

Ich habe mir unerklaerlicherweise den BKA Trojaner eingefangen.

Leider hat mir die AVIRA Rescue CD nicht weitergeholfen und auch nicht das Karpasky.

Ich habe jetzt ueber OTLEnet.exe gebootet, einen Scan durchgefuehrt und das Resultat ist dieses *Kopie unterhalb meines Textes...

Was muss ich jetzt noch tun, damit ich mein Windows XP wieder starten kann und einen Virusscan mit Avira dann ausfuehren kann. Bitte um Hilfe, bin verzweifelt.

LG an alle.

OTL logfile created on: 8/8/2011 10:16:50 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 93.00% Paging File free
Paging file location(s): C:\pagefile.sys 2500 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 244.14 Gb Total Space | 125.40 Gb Free Space | 51.36% Space Free | Partition Type: NTFS
Drive D: | 111.70 Gb Total Space | 58.27 Gb Free Space | 52.17% Space Free | Partition Type: NTFS
Drive E: | 221.62 Gb Total Space | 176.53 Gb Free Space | 79.66% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto] -- -- (WudfSvc)
SRV - File not found [On_Demand] -- -- (WMPNetworkSvc)
SRV - File not found [On_Demand] -- -- (usnjsvc)
SRV - File not found [Auto] -- -- (TeamViewer4)
SRV - File not found [Auto] -- -- (PnkBstrB)
SRV - File not found [Auto] -- -- (PnkBstrA)
SRV - File not found [Auto] -- -- (PMounter)
SRV - File not found [On_Demand] -- -- (IDriverT)
SRV - File not found [Auto] -- -- (HidServ)
SRV - File not found [On_Demand] -- -- (gusvc)
SRV - File not found [On_Demand] -- -- (FLEXnet Licensing Service)
SRV - File not found [Disabled] -- -- (de_serv)
SRV - File not found [Auto] -- -- (Brother XP spl Service)
SRV - File not found [Auto] -- -- (AVM WLAN Connection Service)
SRV - File not found [Auto] -- -- (Apple Mobile Device)
SRV - [2011/07/02 03:02:04 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/04/28 02:26:54 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/09/06 12:56:38 | 000,247,096 | ---- | M] () [Auto] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010/01/09 16:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009/01/21 09:00:54 | 000,065,536 | ---- | M] () [Auto] -- C:\Programme\Brother\BRAdmin Professional 3\bratimer.exe -- (BRA_Scheduler)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (W3SVC)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (SMTPSVC) Simple Mail Transfer Protocol (SMTP)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (MSFtpsvc)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (IISADMIN)
SRV - [2008/04/13 22:22:23 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\WINDOWS\system32\p2pgasvc.dll -- (p2pgasvc)
SRV - [2008/04/13 22:22:23 | 000,038,400 | ---- | M] (Microsoft Corporation) [Auto] -- D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc)
SRV - [2008/04/13 22:22:12 | 000,036,864 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\iprip.dll -- (Iprip)
SRV - [2008/01/16 10:02:16 | 000,081,920 | ---- | M] () [Auto] -- C:\Programme\Brother\Web BRAdmin\cgi-bin\agentrcv.exe -- (WBA_Agent_Receiver)
SRV - [2008/01/16 09:48:22 | 000,081,920 | ---- | M] () [Auto] -- C:\Programme\Brother\Web BRAdmin\cgi-bin\wbaagent.exe -- (WBA_Agent_Client_Service)
SRV - [2008/01/16 03:53:12 | 000,065,536 | ---- | M] () [Auto] -- C:\Programme\Brother\Web BRAdmin\cgi-bin\wbatimer.exe -- (WBA_Scheduler)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WudfRd)
DRV - File not found [Kernel | Boot] -- -- (WudfPf)
DRV - File not found [Kernel | On_Demand] -- -- (WpdUsb)
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [File_System | System] -- -- (SysVfs)
DRV - File not found [Kernel | On_Demand] -- -- (StillCam)
DRV - File not found [Kernel | On_Demand] -- -- (ss_mdm)
DRV - File not found [Kernel | On_Demand] -- -- (ss_mdfl)
DRV - File not found [Kernel | On_Demand] -- -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (MarvinBus)
DRV - File not found [Kernel | Auto] -- -- (lirsgt)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | Auto] -- -- (Haspnt)
DRV - File not found [Kernel | Auto] -- -- (hardlock)
DRV - File not found [Kernel | On_Demand] -- -- (fwlanusbn)
DRV - File not found [Kernel | On_Demand] -- -- (FWLANUSB)
DRV - File not found [File_System | System] -- -- (Ext2Fs)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - File not found [Kernel | On_Demand] -- -- (BrUsbScn) Brother MFC-Scannertreiber (USB)
DRV - File not found [Kernel | On_Demand] -- -- (BrUsbMdm) Brother MFC-nur-Fax-Modem (USB)
DRV - File not found [Kernel | On_Demand] -- -- (BrSerWDM) Brother WDM-Treiber (seriell)
DRV - File not found [Kernel | Auto] -- -- (BrPar)
DRV - File not found [Kernel | On_Demand] -- -- (brfilt)
DRV - File not found [Kernel | On_Demand] -- -- (avmeject)
DRV - File not found [Kernel | On_Demand] -- -- (avmaura)
DRV - File not found [Kernel | Auto] -- -- (atksgt)
DRV - File not found [Kernel | System] -- -- (ASPI32)
DRV - File not found [Kernel | On_Demand] -- -- (ASAPIW2k)
DRV - File not found [Kernel | On_Demand] -- -- (AIDA32Driver)
DRV - File not found [Kernel | Auto] -- -- (acedrv11)
DRV - [2011/07/02 03:02:04 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/02 03:02:04 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/02/11 08:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009/06/22 07:48:44 | 000,091,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mqac.sys -- (MQAC)
DRV - [2009/05/11 06:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 04:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008/05/08 10:02:52 | 000,203,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rmcast.sys -- (RMCAST)
DRV - [2008/04/13 14:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008/04/13 14:36:41 | 000,063,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mf.sys -- (mf)
DRV - [2007/10/25 11:26:10 | 000,005,632 | ---- | M] () [File_System | System] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2007/08/06 09:29:46 | 000,094,720 | ---- | M] (Guillemot Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\camfilt2.sys -- (camfilt2)
DRV - [2007/07/17 12:07:42 | 010,371,072 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3)
DRV - [2007/02/07 11:57:20 | 000,035,840 | ---- | M] (CACE Technologies) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\npf_devolo.sys -- (NPF_devolo) NetGroup Packet Filter Driver (devolo)
DRV - [2003/03/05 06:19:28 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\PFMODNT.SYS -- (PfModNT)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: File not found
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Programme\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins

[2011/08/08 22:14:37 | 000,000,000 | ---D | M] (No name found) -- B:\Documents and Settings\Default User\Application Data\Mozilla\Extensions

O1 HOSTS File: ([2011/08/08 18:06:58 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - File not found
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - File not found
O2 - BHO: (Pando Search Assistant BHO) - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - File not found
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - File not found
O2 - BHO: (CInterceptor Object) - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - File not found
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - File not found
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - File not found
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - File not found
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - File not found
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - File not found
O2 - BHO: (Pando Toolbar BHO) - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - File not found
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - File not found
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient] File not found
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [MAAgent] File not found
O4 - HKLM..\Run: [MsmqIntCert] C:\WINDOWS\System32\mqrt.dll (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Opware15] File not found
O4 - HKLM..\Run: [PinnacleDriverCheck] File not found
O4 - HKLM..\Run: [SMSTray] File not found
O4 - HKLM..\Run: [SoundMan] File not found
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - File not found
O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - File not found
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - File not found
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\yinsthelper.dll (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file:///C:/WINDOWS/Java/classes/xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - File not found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - File not found
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - File not found
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - File not found
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - File not found
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {88485281-8b4b-4f8d-9ede-82e29a064277} - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/07/16 10:58:07 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/08 20:41:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32\config\systemprofile\Local Settings
[2011/08/08 18:06:24 | 002,237,440 | R--- | C] (OldTimer Tools) -- C:\OTLPE.exe
[2011/08/08 18:06:15 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/08/04 17:20:11 | 000,000,000 | ---D | C] -- C:\Programme\EB Documentation
[2011/08/04 17:19:57 | 000,000,000 | ---D | C] -- C:\Programme\Recruitment Viewer
[2011/08/04 17:19:38 | 000,000,000 | ---D | C] -- C:\Programme\EBTrivialScript
[2011/07/11 16:14:43 | 000,000,000 | ---D | C] -- C:\Dimitrios Bilder
[2010/07/29 18:27:54 | 000,045,056 | ---- | C] ( ) -- C:\WINDOWS\System32\ct_api_com.dll
[2010/07/29 16:59:49 | 000,057,344 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll
[2010/07/29 16:59:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll

========== Files - Modified Within 30 Days ==========

[2011/08/08 20:39:52 | 000,000,475 | ---- | M] () -- C:\haha
[2011/08/08 18:06:58 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2011/08/08 14:57:40 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1016.job
[2011/08/08 14:57:13 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1715567821-1993962763-725345543-1016.job
[2011/08/08 14:57:12 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/08/08 14:57:12 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/08 14:57:07 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1003.job
[2011/08/08 14:57:06 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1004.job
[2011/08/08 14:57:06 | 000,000,262 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011/08/08 14:53:03 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/08 14:53:00 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{C498935C-6A4A-49D0-AB6F-40B5780903F4}.job
[2011/08/08 14:51:47 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/08/08 14:50:47 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1715567821-1993962763-725345543-1004.job
[2011/08/08 03:40:57 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1715567821-1993962763-725345543-1003.job
[2011/08/08 01:21:57 | 000,001,952 | ---- | M] () -- C:\WINDOWS\System32\PrivacyProvider.ini
[2011/08/08 01:21:57 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\PCProxyOff.ini
[2011/08/07 13:50:21 | 000,000,254 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011/08/06 11:12:27 | 000,000,464 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Psyrakis.job
[2011/08/05 08:34:01 | 000,000,248 | ---- | M] () -- C:\WINDOWS\RomeTW.ini
[2011/08/05 03:28:17 | 000,286,112 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/08/04 16:36:41 | 824,204,729 | ---- | M] () -- C:\Programme\EB1.1.exe
[2011/08/03 03:56:48 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/07/27 12:58:16 | 000,002,520 | ---- | M] () -- C:\WINDOWS\WINACS.INI
[2011/07/17 05:10:37 | 000,000,432 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI
[2011/07/13 21:01:16 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/07/12 22:55:05 | 002,237,440 | R--- | M] (OldTimer Tools) -- C:\OTLPE.exe

========== Files Created - No Company Name ==========

[2011/08/08 20:42:44 | 000,000,475 | ---- | C] () -- C:\haha
[2011/08/04 16:28:40 | 824,204,729 | ---- | C] () -- C:\Programme\EB1.1.exe
[2011/07/29 07:41:59 | 000,000,278 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1004.job
[2011/06/29 06:47:39 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2011/06/21 17:01:01 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\PCProxyOff.ini
[2011/06/21 16:22:11 | 002,740,224 | ---- | C] () -- C:\WINDOWS\System32\PrivacyProvider.exe
[2011/06/21 16:22:11 | 000,471,040 | ---- | C] () -- C:\WINDOWS\System32\RegisterLSP.exe
[2011/06/21 16:22:11 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\PrivacyProvider.dll
[2011/06/21 16:22:11 | 000,001,952 | ---- | C] () -- C:\WINDOWS\System32\PrivacyProvider.ini
[2011/06/10 16:41:00 | 000,000,040 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2011/05/29 17:31:26 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2011/05/27 12:22:09 | 000,000,276 | ---- | C] () -- C:\WINDOWS\game.ini
[2011/05/25 06:40:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011/05/25 06:35:47 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011/05/23 07:04:52 | 000,000,248 | ---- | C] () -- C:\WINDOWS\RomeTW.ini
[2011/05/08 15:58:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\cd.dat
[2011/05/08 15:15:55 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/05/08 15:15:55 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/05/08 15:15:55 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/05/08 15:15:55 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/05/08 15:15:55 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/05/06 13:40:46 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Ubuwumusetubet.dat
[2011/05/06 13:40:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Fnozanawif.bin
[2011/04/15 12:16:13 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011/04/15 12:16:13 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010/11/27 09:40:59 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/08/06 04:17:29 | 000,002,520 | ---- | C] () -- C:\WINDOWS\WINACS.INI
[2010/08/06 04:17:29 | 000,001,061 | ---- | C] () -- C:\WINDOWS\WINACSLok.INI
[2010/08/06 04:16:44 | 000,000,970 | ---- | C] () -- C:\WINDOWS\IsyPoller.ini
[2010/08/06 04:16:44 | 000,000,214 | ---- | C] () -- C:\WINDOWS\cardterm.ini
[2010/08/06 04:16:43 | 000,000,031 | ---- | C] () -- C:\WINDOWS\HIGHEDIT.INI
[2010/08/06 03:33:08 | 000,001,756 | ---- | C] () -- C:\WINDOWS\dcdruck.dat
[2010/08/04 10:55:09 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\omnithread_rt.dll
[2010/08/03 07:16:53 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\vsmon1.dll
[2010/07/30 03:31:01 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2010/07/30 03:31:01 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe
[2010/07/29 18:31:23 | 000,001,657 | ---- | C] () -- C:\WINDOWS\WINACSALTNetz.INI
[2010/07/29 18:27:58 | 000,004,681 | ---- | C] () -- C:\WINDOWS\System32\FoxFix5.ini
[2010/07/29 18:27:57 | 000,573,952 | ---- | C] () -- C:\WINDOWS\System32\HEKRNL32.DLL
[2010/07/29 18:27:57 | 000,225,792 | ---- | C] () -- C:\WINDOWS\System32\IMGMAN30.DLL
[2010/07/29 18:27:57 | 000,187,392 | ---- | C] () -- C:\WINDOWS\System32\HEICON32.DLL
[2010/07/29 18:27:57 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\HEMENU32.DLL
[2010/07/29 18:27:57 | 000,069,120 | ---- | C] () -- C:\WINDOWS\System32\HEDLG32.DLL
[2010/07/29 18:27:57 | 000,066,560 | ---- | C] () -- C:\WINDOWS\System32\HERTF32.DLL
[2010/07/29 18:27:57 | 000,039,936 | ---- | C] () -- C:\WINDOWS\System32\HETOOL32.DLL
[2010/07/29 18:27:56 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2010/07/29 18:27:56 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2010/07/29 18:27:55 | 001,261,568 | ---- | C] () -- C:\WINDOWS\System32\QtCore4.dll
[2010/07/29 18:27:55 | 000,368,640 | ---- | C] () -- C:\WINDOWS\System32\QtSql4.dll
[2010/07/29 18:27:55 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\Msvcrt10.dll
[2010/07/29 18:27:55 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\pdf_edit.dll
[2010/07/29 18:19:09 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2010/07/29 18:00:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brdfxspd.dat
[2010/07/29 17:25:50 | 000,003,821 | ---- | C] () -- C:\WINDOWS\medikam.ini
[2010/07/29 17:25:13 | 000,001,369 | ---- | C] () -- C:\WINDOWS\TERMINPL.INI
[2010/07/29 17:25:13 | 000,000,070 | ---- | C] () -- C:\WINDOWS\ZIFFGRID.INI
[2010/07/29 17:25:12 | 000,006,752 | ---- | C] () -- C:\WINDOWS\CMBTLL.INI
[2010/07/29 17:25:12 | 000,005,814 | ---- | C] () -- C:\WINDOWS\MAP.INI
[2010/07/29 17:25:12 | 000,004,770 | ---- | C] () -- C:\WINDOWS\PRIVABR.INI
[2010/07/29 17:25:12 | 000,004,279 | ---- | C] () -- C:\WINDOWS\CUSTOEXP.INI
[2010/07/29 17:25:12 | 000,001,716 | ---- | C] () -- C:\WINDOWS\KVDT.INI
[2010/07/29 17:25:12 | 000,001,078 | ---- | C] () -- C:\WINDOWS\EKGSMP.INI
[2010/07/29 17:25:12 | 000,001,025 | ---- | C] () -- C:\WINDOWS\MESS.INI
[2010/07/29 17:25:12 | 000,000,819 | ---- | C] () -- C:\WINDOWS\LABOR.INI
[2010/07/29 17:25:12 | 000,000,763 | ---- | C] () -- C:\WINDOWS\adrspal.ini
[2010/07/29 17:25:12 | 000,000,704 | ---- | C] () -- C:\WINDOWS\DIKTAT.INI
[2010/07/29 17:25:12 | 000,000,674 | ---- | C] () -- C:\WINDOWS\EKG.INI
[2010/07/29 17:25:12 | 000,000,639 | ---- | C] () -- C:\WINDOWS\CUSTOMAP.INI
[2010/07/29 17:25:12 | 000,000,585 | ---- | C] () -- C:\WINDOWS\SCANMDI.INI
[2010/07/29 17:25:12 | 000,000,583 | ---- | C] () -- C:\WINDOWS\ABRSORT.INI
[2010/07/29 17:25:12 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ADRESSEN.INI
[2010/07/29 17:25:12 | 000,000,251 | ---- | C] () -- C:\WINDOWS\DIGI.INI
[2010/07/29 17:25:12 | 000,000,162 | ---- | C] () -- C:\WINDOWS\SAPRI.INI
[2010/07/29 17:25:12 | 000,000,084 | ---- | C] () -- C:\WINDOWS\BETTENPL.INI
[2010/07/29 17:25:12 | 000,000,070 | ---- | C] () -- C:\WINDOWS\PLZGRID.INI
[2010/07/29 17:25:12 | 000,000,057 | ---- | C] () -- C:\WINDOWS\FLEX.INI
[2010/07/29 17:18:31 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2010/07/29 17:18:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2010/07/29 17:18:20 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\BRTCPCON.DLL
[2010/07/29 17:18:17 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\BRLMW03A.INI
[2010/07/29 17:17:48 | 000,000,070 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2010/07/29 17:13:48 | 000,000,221 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2010/07/29 17:13:48 | 000,000,093 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2010/07/29 17:13:48 | 000,000,065 | ---- | C] () -- C:\WINDOWS\System32\bd7840w.dat
[2010/07/29 17:12:25 | 000,000,146 | ---- | C] () -- C:\WINDOWS\Brfaxrx.ini
[2010/07/29 17:12:24 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2010/07/29 17:10:04 | 000,031,664 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2010/07/29 16:59:48 | 000,015,478 | ---- | C] () -- C:\WINDOWS\snpstd3.ini
[2010/07/29 16:59:29 | 003,600,384 | ---- | C] () -- C:\WINDOWS\ffmpeg.exe
[2010/07/29 16:10:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/07/29 15:42:12 | 000,000,534 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/07/29 15:08:29 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2010/07/29 15:05:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\frontpg.ini
[2010/07/29 15:04:34 | 000,024,222 | ---- | C] () -- C:\WINDOWS\System32\smtpctrs.ini
[2010/07/29 15:04:34 | 000,001,137 | ---- | C] () -- C:\WINDOWS\System32\ntfsdrct.ini
[2010/07/29 15:04:20 | 000,012,089 | ---- | C] () -- C:\WINDOWS\System32\ftpctrs.ini
[2010/07/29 15:04:18 | 000,061,950 | ---- | C] () -- C:\WINDOWS\System32\w3ctrs.ini
[2010/07/29 15:04:18 | 000,016,173 | ---- | C] () -- C:\WINDOWS\System32\axperf.ini
[2010/07/29 15:04:16 | 000,017,590 | ---- | C] () -- C:\WINDOWS\System32\infoctrs.ini
[2010/07/29 15:04:11 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2010/07/29 14:56:14 | 000,004,346 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/07/29 14:54:56 | 000,286,112 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/07/29 14:46:45 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/07/29 14:41:22 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/02/11 00:12:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010/02/11 00:12:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009/11/17 11:13:12 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\LXPrnUtil10.dll
[2009/11/17 11:11:26 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\dnt27VC8.dll
[2009/11/17 11:09:36 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\dntvmc27VC8.dll
[2009/11/17 11:09:20 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\dntvm27VC8.dll
[2009/04/23 18:29:16 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2007/10/25 11:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007/03/26 04:45:18 | 000,071,208 | ---- | C] () -- C:\WINDOWS\System32\PhysXLoader.dll
[2007/02/20 08:59:08 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007/02/20 08:59:04 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2006/02/13 09:05:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/02/13 09:05:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2006/02/13 09:05:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/02/13 09:05:00 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/02/13 09:05:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2006/02/13 09:05:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2006/02/13 09:05:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/02/13 09:05:00 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2004/08/04 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/04 08:00:00 | 000,682,992 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/04 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,625,596 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/04 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,170,680 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/04 08:00:00 | 000,140,086 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/04 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/04 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2010/07/29 18:21:12 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\TeamViewer
[2011/08/08 14:57:06 | 000,000,262 | ---- | M] () -- C:\WINDOWS\Tasks\RegistryBooster.job
[2011/08/07 13:50:21 | 000,000,254 | ---- | M] () -- C:\WINDOWS\Tasks\RMSchedule.job
[2011/08/08 14:53:00 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{C498935C-6A4A-49D0-AB6F-40B5780903F4}.job

========== Purity Check ==========


< End of report >

Alt 09.08.2011, 21:03   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
BKA Trojaner, boote ueber CD aber komme nicht weiter - Standard

BKA Trojaner, boote ueber CD aber komme nicht weiter



Hast du den Scan wirklich richtig gemacht? Ich seh da zu viele "File not found" außerdem nicht mal den typischen Eintrag für das BKA-Vieh.
__________________

__________________

Antwort

Themen zu BKA Trojaner, boote ueber CD aber komme nicht weiter
0x00000001, antivir, avira, avira rescue, avira rescue cd, bho, bonjour, browser, desktop, do search, download, error, explorer, firefox, format, google earth, helper, logfile, msvcrt, nvidia, object, reatogo, registry, rescue cd, scan, sched.exe, security, security scan, software, starten, trojaner, version=1.0, windows, windows xp, wlan



Ähnliche Themen: BKA Trojaner, boote ueber CD aber komme nicht weiter


  1. Windows7: GUV/Interpol-Trojaner mit Sperrbildschirm... Komme nicht weiter
    Log-Analyse und Auswertung - 05.02.2014 (6)
  2. win xp / verschlüsselung nach Trojaner , komme nicht weiter
    Diskussionsforum - 25.12.2013 (4)
  3. Hallo ich komme mit otlpe wieder an meinen Rechner, aber wie geht es weiter
    Log-Analyse und Auswertung - 17.06.2013 (5)
  4. "bprotector for windows" auch auf meinem PC, komme aber nicht weiter
    Plagegeister aller Art und deren Bekämpfung - 04.04.2013 (2)
  5. Auch ich habe den Trojaner mit dem weissen Bildschirm und komme nicht weiter.
    Log-Analyse und Auswertung - 29.10.2012 (16)
  6. Komme nicht weiter mit Entschlüsselung nach einem Trojaner-Befall
    Überwachung, Datenschutz und Spam - 14.07.2012 (1)
  7. Bundespolizei Trojaner / OTL.txt vorhanden komme nicht weiter und schnelle HILFE
    Log-Analyse und Auswertung - 12.07.2012 (2)
  8. Windows Verschlüsselungs Trojaner- Komme nicht weiter!
    Plagegeister aller Art und deren Bekämpfung - 07.06.2012 (5)
  9. bundespolizei trojaner komme nicht weiter
    Log-Analyse und Auswertung - 21.12.2011 (25)
  10. Ich komme nicht weiter
    Alles rund um Windows - 07.04.2011 (15)
  11. Volksbank Trojaner mit TAN-Eingabe Aufforderung - komme nicht weiter!
    Plagegeister aller Art und deren Bekämpfung - 15.09.2010 (4)
  12. Trojaner TR/Vundo (komme nicht weiter)
    Log-Analyse und Auswertung - 19.04.2008 (8)
  13. Ständig Werbung Trojaner komme nicht weiter
    Log-Analyse und Auswertung - 23.11.2007 (1)
  14. hab trojaner drauf und komme nicht weiter :S
    Log-Analyse und Auswertung - 17.12.2006 (11)
  15. Komme nicht weiter
    Plagegeister aller Art und deren Bekämpfung - 11.02.2006 (1)
  16. Trojaner in svchst.exe (?) - Komme nicht mehr weiter!
    Plagegeister aller Art und deren Bekämpfung - 31.07.2005 (3)
  17. Trojaner martfinder.com ? Komme nicht weiter
    Plagegeister aller Art und deren Bekämpfung - 03.11.2004 (1)

Zum Thema BKA Trojaner, boote ueber CD aber komme nicht weiter - Hallo allerseits!! Ich habe mir unerklaerlicherweise den BKA Trojaner eingefangen. Leider hat mir die AVIRA Rescue CD nicht weitergeholfen und auch nicht das Karpasky. Ich habe jetzt ueber OTLEnet.exe gebootet, - BKA Trojaner, boote ueber CD aber komme nicht weiter...
Archiv
Du betrachtest: BKA Trojaner, boote ueber CD aber komme nicht weiter auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.