Security Shield durch Maillink eingefangen!

Yasmin · 16.11.2011, 20:52

OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 16.11.2011 20:40:12 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Yasmin\Downloads
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 1,21 Gb Available Physical Memory | 60,95% Memory free
3,98 Gb Paging File | 2,83 Gb Available in Paging File | 70,98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 111,69 Gb Total Space | 33,65 Gb Free Space | 30,13% Space Free | Partition Type: NTFS
 
Computer Name: YASMIN-LAPTOP | User Name: Yasmin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Yasmin\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software)
PRC - C:\Programme\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
PRC - C:\Programme\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\ProgramData\Badoo\Badoo Desktop\1.6.38.1042\Badoo.Desktop.exe (Badoo)
PRC - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\FsUsbExService.Exe (Teruten)
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\Programme\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Yasmin\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\adc6081b96ada807b858bd7dd6c44b08\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\3c0633ebbeacf2d66ef3952b50568479\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b8f8841931a97c3ab2b652f13cfeb295\System.Xaml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9db16bf8a565eaa6bbb182dcd147cfb6\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\945868a5fd952dcfe3fa4904cbab936a\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\1020c111f6b4ffeafa3055475e8df7de\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2250dfa714756e8a58db82433c1ae275\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\11a64ded5d210891688bdef1c54c26e4\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\7306f4ac763fc6264804397bc22226e8\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\968981974b267a245b7b78393836df5a\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\18ec39f6cef17c8576736b60e0be5131\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\34b8c9534065b074e4e5228f40310e13\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\404a37992b5c2de07993795fb48dfc65\mscorlib.ni.dll ()
MOD - C:\Programme\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (NitroReaderDriverReadSpool2) -- C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (FsUsbExService) -- C:\Windows\System32\FsUsbExService.Exe (Teruten)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (NAUpdate) -- C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (ssadmdm) -- C:\Windows\System32\drivers\ssadmdm.sys (MCCI Corporation)
DRV - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) -- C:\Windows\System32\drivers\ssadbus.sys (MCCI Corporation)
DRV - (ssadmdfl) SAMSUNG Android USB Modem (Filter) -- C:\Windows\System32\drivers\ssadmdfl.sys (MCCI Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (vmbus) -- C:\Windows\system32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (VX3000) -- C:\Windows\System32\drivers\VX3000.sys (Microsoft Corporation)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (bcm4sbxp) -- C:\Windows\System32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (ESDCR) -- C:\Windows\System32\drivers\ESD7SK.sys (ENE Technology Inc.)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (ESMCR) -- C:\Windows\System32\drivers\ESM7SK.sys (ENE Technology Inc.)
DRV - (EMSCR) -- C:\Windows\System32\drivers\EMS7SK.sys (ENE Technology Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2F 8F 01 C3 CF A3 CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.11.3.15590
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.0.900
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.0.900
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.05.17 20:57:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.05.17 20:57:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.11.09 00:25:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.10.27 23:33:38 | 000,000,000 | ---D | M]
 
[2010.12.28 16:04:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Yasmin\AppData\Roaming\mozilla\Extensions
[2011.11.16 20:38:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Yasmin\AppData\Roaming\mozilla\Firefox\Profiles\zcqwj0dp.default\extensions
[2011.06.27 14:14:33 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Yasmin\AppData\Roaming\mozilla\Firefox\Profiles\zcqwj0dp.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.11.11 20:46:09 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Yasmin\AppData\Roaming\mozilla\Firefox\Profiles\zcqwj0dp.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.11.01 23:28:43 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Yasmin\AppData\Roaming\mozilla\Firefox\Profiles\zcqwj0dp.default\extensions\foxyproxy@eric.h.jung
[2011.11.09 00:25:01 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.10.27 22:13:08 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.10.24 21:40:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011.11.05 08:10:35 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.11.05 04:38:54 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.11.05 04:32:18 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.11.05 04:38:54 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.11.05 04:38:54 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.11.05 04:38:54 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.11.05 04:38:54 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.11.15 21:57:56 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Badoo Desktop] C:\ProgramData\Badoo\Badoo Desktop\1.6.38.1042\Badoo.Desktop.exe (Badoo)
O4 - HKCU..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Programme\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] C:\Programme\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Free YouTube Download - C:\Users\Yasmin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Yasmin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{399EEDD0-53C7-4BBE-A2DD-0EA90752B05A}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F9409E1A-9082-428E-8A50-60C07BE96587}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.11.16 20:25:38 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.11.16 18:12:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011.11.16 18:12:14 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011.11.16 16:28:39 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Roaming\Malwarebytes
[2011.11.16 16:28:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.11.16 16:28:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.11.16 16:28:11 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.11.16 16:28:11 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.11.16 16:02:42 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{B7869F11-F5A4-4888-94E0-0BE19A03E141}
[2011.11.16 16:02:17 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{AFCF0E60-482E-41F2-970A-6DFE6B1496C4}
[2011.11.15 22:06:05 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011.11.15 21:58:04 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2011.11.15 21:55:57 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\temp
[2011.11.15 21:45:26 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.11.15 21:45:26 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.11.15 21:45:26 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.11.15 21:45:19 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.11.15 21:45:14 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.11.15 21:15:03 | 000,000,000 | ---D | C] -- C:\_OTL
[2011.11.15 20:42:03 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{28725DB6-D932-4B0E-8C7A-7CEC1AFC72BC}
[2011.11.15 20:41:34 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{43C72884-C11A-4B50-A3E6-9992177549A4}
[2011.11.15 08:40:19 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{D9923919-E27A-45AA-A09D-DE99822A49DD}
[2011.11.15 08:40:04 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{82C61277-ECF5-4434-BA92-0773FC8737CA}
[2011.11.14 23:32:12 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2011.11.14 21:21:42 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\.widelands
[2011.11.13 19:50:22 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Roaming\GlarySoft
[2011.11.13 15:22:12 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\.gimp-2.6
[2011.11.13 15:22:10 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\Documents\gegl-0.0
[2011.11.13 15:12:06 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{28B6B963-9D38-4795-AC65-61594BA551E6}
[2011.11.12 10:21:37 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{45BFD6B9-7878-40E6-A371-E343A7EBDDDB}
[2011.11.12 10:20:48 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{FBFBF729-46D7-44D6-ADD3-2C88537FD61A}
[2011.11.11 20:44:21 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{1B89CD0E-141C-487F-AF24-36C01B149E41}
[2011.11.09 22:03:45 | 002,341,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.11.09 21:59:50 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{D72D5CE5-6E09-4EB0-8E49-72680F345CE9}
[2011.11.09 21:59:38 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{F2B04E13-F77D-49A8-B2EF-4312C47B8A31}
[2011.11.09 01:01:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities
[2011.11.09 01:01:02 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities
[2011.11.09 01:00:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Widelands
[2011.11.09 00:44:16 | 000,000,000 | ---D | C] -- C:\Program Files\Widelands
[2011.11.09 00:43:09 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Roaming\Auslogics
[2011.11.09 00:42:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[2011.11.09 00:42:14 | 000,000,000 | ---D | C] -- C:\Program Files\Auslogics
[2011.11.09 00:40:14 | 000,026,408 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll
[2011.11.09 00:40:14 | 000,017,704 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll
[2011.11.09 00:39:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF
[2011.11.09 00:39:31 | 000,000,000 | ---D | C] -- C:\Program Files\Nitro PDF
[2011.11.09 00:39:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF
[2011.11.09 00:37:22 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Roaming\Downloaded Installations
[2011.11.09 00:16:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
[2011.11.09 00:13:44 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0
[2011.11.08 23:40:26 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{09BC3EB7-8FF0-450F-9B5F-E47272C110A7}
[2011.11.08 23:40:10 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{8CB72E96-E2F4-43A8-96B7-BA7C2545C9FA}
[2011.11.07 01:44:53 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{E0A9A437-AB01-45C1-87A6-C8EEE58A7DBE}
[2011.11.06 02:24:34 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{EAC04218-5275-4838-B60E-E857FABDD1A8}
[2011.11.06 02:24:21 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{3C267BEF-805A-448F-BD59-FB88F5BF87FB}
[2011.11.03 16:53:24 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{8396744F-8C46-457D-95DD-FB4E72AC9855}
[2011.11.03 16:53:02 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{6B67746F-042F-48EA-B013-60E352188417}
[2011.11.01 22:29:58 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{E5F7470A-DB8B-4784-9620-78D0DB45CC78}
[2011.11.01 22:29:46 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{5739A0E8-C370-453A-940A-C323F71FAA09}
[2011.10.31 12:13:23 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{2C6B679E-A650-4174-8F70-2E1543F027EA}
[2011.10.31 12:13:05 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{CCC76930-11D8-4FBD-B586-48422951B662}
[2011.10.31 00:23:51 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{CFDEE39F-15D8-4D3F-B512-6C9B31DD096A}
[2011.10.31 00:23:40 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{ECD6433E-C9EF-4193-8D92-93BBE39C2400}
[2011.10.29 08:54:40 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{2D311157-AD14-4404-8FFD-7D3BA512CAE8}
[2011.10.29 08:54:17 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{2800E545-AEAA-41D5-8164-D72EB800EDE6}
[2011.10.28 20:44:07 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{F3F7CFF0-A510-4EEF-866F-6DC2C17CE39D}
[2011.10.28 07:37:19 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{AFD6AD38-E2C9-4556-84DF-07A75B83EA12}
[2011.10.28 07:37:04 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{DD65C528-6FCF-409B-B036-402CB0F7C130}
[2011.10.28 07:36:24 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Roaming\Apple Computer
[2011.10.27 23:33:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011.10.27 23:32:50 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2011.10.27 23:32:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2011.10.27 22:12:57 | 000,000,000 | ---D | C] -- C:\Temp
[2011.10.27 13:52:07 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{6D019BAE-8C22-4FAF-BC56-4823B861F41F}
[2011.10.27 13:51:01 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{7BA56048-CA29-4083-864A-4700C28B557A}
[2011.10.26 13:17:05 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{A62BA51B-E3C7-4058-A0E1-7A5A3C323EF1}
[2011.10.26 07:17:26 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{D5E90797-D4C4-42B9-9490-8A12688947D8}
[2011.10.25 12:32:02 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{0527C41B-13E7-4BE4-A077-E121CCA580D3}
[2011.10.25 12:31:48 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{1FBB4F63-F7D8-46A2-8CE3-BB29A50493C8}
[2011.10.24 21:41:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011.10.24 21:40:33 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011.10.24 21:40:33 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011.10.24 21:40:33 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011.10.24 21:34:56 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{2EC8AF40-AD24-4EF7-928E-320A8A564072}
[2011.10.24 21:34:31 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{B42FA9E7-87C5-4DE2-B051-C44FBD2BFA4B}
[2011.10.24 13:29:02 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2011.10.24 13:29:02 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2011.10.24 09:01:52 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{05C7A2EB-44F4-45A4-B2FE-CB1E4F5D6B4E}
[2011.10.24 09:01:34 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{3B5115CE-EBDB-4C26-BAB8-03D85AD2B562}
[2011.10.22 13:21:54 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{360C2E55-AA19-4A5F-8C86-A16BE4F0B442}
[2011.10.22 13:21:31 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{639E63A8-19C4-4BB5-A3C3-C0C09A2CAA81}
[2011.10.22 09:14:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Badoo
[2011.10.21 23:52:33 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{262C5049-B4A4-494A-98E3-4B98B78858DD}
[2011.10.21 11:51:53 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{B56FDB0D-37D2-4E72-8EB8-79BD858601C7}
[2011.10.21 11:51:36 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{782A2428-2AE3-4AD9-AFAB-558700B41D28}
[2011.10.19 12:59:08 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{867AEA63-F708-4CF3-82AA-6438E867B59E}
[2011.10.18 17:10:18 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{E2269986-862A-4364-B8D1-FD4F9EE10658}
[2011.10.18 17:09:07 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{F043BE4C-C693-44DD-BD44-B1953693C78D}
[2011.10.18 14:55:59 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{0BF2709F-07D6-4159-8253-DC85442AE9DD}
[2011.10.18 08:56:03 | 000,000,000 | ---D | C] -- C:\Users\Yasmin\AppData\Local\{E94D4C3C-6B4F-43C5-8377-231A589011AB}
 
========== Files - Modified Within 30 Days ==========
 
[2011.11.16 18:12:16 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.11.16 16:50:44 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.11.16 16:50:44 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.11.16 16:28:17 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.16 16:00:06 | 000,000,316 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
[2011.11.16 15:59:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.11.16 15:59:36 | 1602,838,528 | -HS- | M] () -- C:\hiberfil.sys
[2011.11.15 21:57:56 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011.11.15 08:40:01 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011.11.14 23:32:05 | 000,001,197 | ---- | M] () -- C:\Users\Yasmin\Desktop\Auslogics BoostSpeed.lnk
[2011.11.11 21:52:52 | 000,409,384 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.11.09 01:01:20 | 000,001,024 | ---- | M] () -- C:\Users\Yasmin\Desktop\Glary Utilities.lnk
[2011.11.09 01:00:16 | 000,001,941 | ---- | M] () -- C:\Users\Yasmin\Desktop\Widelands - Mapeditor.lnk
[2011.11.09 01:00:16 | 000,001,847 | ---- | M] () -- C:\Users\Yasmin\Desktop\Widelands.lnk
[2011.11.09 00:42:24 | 000,001,204 | ---- | M] () -- C:\Users\Yasmin\Desktop\Auslogics Disk Defrag.lnk
[2011.11.09 00:40:07 | 000,001,993 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Reader.lnk
[2011.11.09 00:25:03 | 000,001,092 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.11.09 00:16:07 | 000,001,065 | ---- | M] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2011.11.06 02:26:24 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.11.06 02:26:24 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.11.06 02:26:24 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.11.06 02:26:24 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.10.27 23:33:19 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011.10.27 23:13:36 | 001,046,659 | ---- | M] () -- C:\Users\Yasmin\Desktop\Unbenannt (13).wma
[2011.10.27 23:05:05 | 002,878,579 | ---- | M] () -- C:\Users\Yasmin\Desktop\Unbenannt (12).wma
[2011.10.27 22:49:46 | 001,742,609 | ---- | M] () -- C:\Users\Yasmin\Desktop\Unbenannt (10).wma
[2011.10.27 22:04:27 | 000,098,619 | ---- | M] () -- C:\Users\Yasmin\Desktop\Wohnzimmer_fertig.png
[2011.10.27 15:27:52 | 000,232,774 | ---- | M] () -- C:\Users\Yasmin\Desktop\Wohnzimmer2.png
[2011.10.27 15:05:07 | 000,129,674 | ---- | M] () -- C:\Users\Yasmin\Desktop\Wohnzimmer_decke2.png
[2011.10.27 14:47:27 | 000,128,541 | ---- | M] () -- C:\Users\Yasmin\Desktop\Wohnzimmer_decke.png
[2011.10.27 14:39:33 | 000,128,033 | ---- | M] () -- C:\Users\Yasmin\Desktop\Wohnzimmer.png
[2011.10.25 16:13:44 | 000,017,704 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll
[2011.10.25 16:13:42 | 000,026,408 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll
[2011.10.24 13:29:02 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2011.10.24 13:29:02 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2011.10.22 09:14:15 | 000,000,984 | ---- | M] () -- C:\Users\Yasmin\Desktop\Badoo.Desktop.lnk
 
========== Files Created - No Company Name ==========
 
[2011.11.16 18:12:16 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.11.16 16:28:17 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.15 21:45:26 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011.11.15 21:45:26 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.11.15 21:45:26 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.11.15 21:45:26 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.11.15 21:45:26 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.11.14 23:32:05 | 000,001,197 | ---- | C] () -- C:\Users\Yasmin\Desktop\Auslogics BoostSpeed.lnk
[2011.11.09 01:01:29 | 000,000,316 | ---- | C] () -- C:\Windows\tasks\GlaryInitialize.job
[2011.11.09 01:01:20 | 000,001,024 | ---- | C] () -- C:\Users\Yasmin\Desktop\Glary Utilities.lnk
[2011.11.09 01:00:16 | 000,001,941 | ---- | C] () -- C:\Users\Yasmin\Desktop\Widelands - Mapeditor.lnk
[2011.11.09 01:00:16 | 000,001,847 | ---- | C] () -- C:\Users\Yasmin\Desktop\Widelands.lnk
[2011.11.09 00:42:24 | 000,001,204 | ---- | C] () -- C:\Users\Yasmin\Desktop\Auslogics Disk Defrag.lnk
[2011.11.09 00:40:07 | 000,002,495 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro PDF Reader 2.lnk
[2011.11.09 00:40:07 | 000,001,993 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Reader.lnk
[2011.11.09 00:16:07 | 000,001,065 | ---- | C] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2011.10.27 23:33:19 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011.10.27 23:13:35 | 001,046,659 | ---- | C] () -- C:\Users\Yasmin\Desktop\Unbenannt (13).wma
[2011.10.27 23:05:05 | 002,878,579 | ---- | C] () -- C:\Users\Yasmin\Desktop\Unbenannt (12).wma
[2011.10.27 22:49:46 | 001,742,609 | ---- | C] () -- C:\Users\Yasmin\Desktop\Unbenannt (10).wma
[2011.10.27 15:44:45 | 000,098,619 | ---- | C] () -- C:\Users\Yasmin\Desktop\Wohnzimmer_fertig.png
[2011.10.27 15:27:50 | 000,232,774 | ---- | C] () -- C:\Users\Yasmin\Desktop\Wohnzimmer2.png
[2011.10.27 15:05:05 | 000,129,674 | ---- | C] () -- C:\Users\Yasmin\Desktop\Wohnzimmer_decke2.png
[2011.10.27 14:47:26 | 000,128,541 | ---- | C] () -- C:\Users\Yasmin\Desktop\Wohnzimmer_decke.png
[2011.10.27 14:39:33 | 000,128,033 | ---- | C] () -- C:\Users\Yasmin\Desktop\Wohnzimmer.png
[2011.10.22 09:14:15 | 000,000,984 | ---- | C] () -- C:\Users\Yasmin\Desktop\Badoo.Desktop.lnk
[2011.10.22 09:14:14 | 000,001,138 | ---- | C] () -- C:\Users\Yasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Badoo Desktop.lnk
[2011.07.13 08:50:31 | 000,004,608 | ---- | C] () -- C:\Users\Yasmin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.06.27 16:08:53 | 000,007,605 | ---- | C] () -- C:\Users\Yasmin\AppData\Local\Resmon.ResmonCfg
[2011.05.08 04:03:33 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011.05.08 04:00:05 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.04.27 13:19:32 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011.04.27 13:19:30 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011.04.27 13:19:30 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011.04.27 13:19:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011.04.27 13:19:30 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2011.01.03 22:52:08 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011.01.03 22:52:08 | 000,036,640 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010.12.28 16:28:05 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010.12.28 16:22:38 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2010.12.28 15:50:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.07.14 09:47:43 | 000,654,166 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.07.14 09:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.07.14 09:47:43 | 000,130,006 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.07.14 09:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 000,409,384 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,616,008 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,106,388 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.26 16:21:02 | 000,015,498 | ---- | C] () -- C:\Windows\VX3000.ini
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:07BF512B

< End of report >

--- --- ---

brauchst du das extra auch wieder?

Security Shield durch Maillink eingefangen!

Log-Analyse und Auswertung: Security Shield durch Maillink eingefangen!

Security Shield durch Maillink eingefangen!

Ähnliche Themen: Security Shield durch Maillink eingefangen!