Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows blockiert! Runterladen und Installieren

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 16.01.2012, 16:19   #1
tilman
 
Windows blockiert! Runterladen und Installieren - Standard

Windows blockiert! Runterladen und Installieren



Hallo Trojaner-Board,

vor ein paar Tagen hat es mich leider auch erwischt!
Da der Fall nicht unbekannt zu sein schien, habe ich bereits
versucht mit Hilfe anderer Threads ein paar der Schritte
nachzuempfinden. Leider spreche ich jedoch aus dem abgesicherten
Modus zu euch, was vermuten lässt, dass es ohne richtigen Custom-Fix,
bzw. etwaigem ComboFix wohl nicht gehen wird! Ich freue mich sehr
über Anleitung was in welchem Modus zu tun ist.

Helft mir bitte - die Daten und Zeit an liebevoller Konfiguration
der Programme bedeuten mir viel! Danke!

Malwarebytes-Log:

Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.60.0.1800
www.malwarebytes.org

Datenbank Version: v2012.01.13.05

Windows Vista Service Pack 2 x64 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 8.0.6001.19088
tilman :: TILMAN-SERVER [Administrator]

Schutz: Deaktiviert

16.01.2012 15:37:36
mbam-log-2012-01-16 (15-37-36).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 308291
Laufzeit: 27 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
OTL-Log:

Code:
ATTFilter
OTL logfile created on: 16.01.2012 16:05:49 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\tilman\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19088)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 6,56 Gb Available Physical Memory | 82,00% Memory free
16,14 Gb Paging File | 14,96 Gb Available in Paging File | 92,68% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 48,83 Gb Total Space | 6,17 Gb Free Space | 12,64% Space Free | Partition Type: NTFS
Drive D: | 146,48 Gb Total Space | 87,57 Gb Free Space | 59,78% Space Free | Partition Type: NTFS
Drive E: | 400,86 Gb Total Space | 69,07 Gb Free Space | 17,23% Space Free | Partition Type: NTFS
 
Computer Name: TILMAN-SERVER | User Name: tilman | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.01.09 20:25:30 | 000,924,632 | ---- | M] (Mozilla Corporation) -- D:\Firefox\firefox.exe
PRC - [2011.10.16 14:22:40 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\tilman\Desktop\OTL.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.01.09 20:25:30 | 002,124,760 | ---- | M] () -- D:\Firefox\mozjs.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2009.04.13 18:24:38 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV - [2011.12.24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- D:\Malwarebytes\mbamservice.exe -- (MBAMService)
SRV - [2011.07.15 17:37:34 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- D:\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.06.20 20:33:29 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.04.29 16:53:03 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- D:\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.03.28 14:41:12 | 002,111,368 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- D:\Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2010.11.15 11:08:10 | 005,716,848 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Programme\Tablet\Wacom\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2009.07.17 14:31:34 | 004,948,992 | ---- | M] (Native Instruments GmbH) [Auto | Stopped] -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
SRV - [2009.06.02 01:06:00 | 002,805,084 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc)
SRV - [2009.04.10 20:46:13 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009.03.30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.03.26 18:59:50 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2008.12.29 18:27:38 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Stopped] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2008.10.20 21:18:26 | 000,071,096 | ---- | M] () [Auto | Stopped] -- D:\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2008.09.08 11:11:02 | 000,726,016 | ---- | M] () [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM)
SRV - [2008.09.08 11:09:52 | 000,221,696 | ---- | M] () [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.12.10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2011.07.15 17:37:34 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)
DRV:64bit: - [2011.07.15 17:37:34 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2010.11.02 16:07:54 | 000,013,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wacmoumonitor.sys -- (wacmoumonitor)
DRV:64bit: - [2009.10.01 01:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009.09.23 10:41:40 | 000,287,240 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\MAudioProFire.sys -- (MAFWPROFIRE)
DRV:64bit: - [2009.09.22 00:29:22 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wacomvhid.sys -- (wacomvhid)
DRV:64bit: - [2009.08.28 18:42:52 | 000,049,152 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2009.06.26 14:36:32 | 000,030,352 | ---- | M] (Steinberg Media Technologies GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\SynUSB64.sys -- (SynUSB64)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.04.23 17:04:17 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.10.08 01:22:36 | 001,561,112 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k)
DRV:64bit: - [2008.10.08 01:22:30 | 000,118,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia)
DRV:64bit: - [2008.10.08 01:22:28 | 000,213,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV:64bit: - [2008.10.08 01:22:26 | 000,015,896 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV:64bit: - [2008.10.08 01:22:24 | 000,179,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv)
DRV:64bit: - [2008.10.08 01:22:22 | 000,684,312 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV:64bit: - [2008.10.08 01:22:18 | 000,580,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k)
DRV:64bit: - [2008.10.08 01:22:14 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS)
DRV:64bit: - [2008.10.08 01:22:14 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX)
DRV:64bit: - [2008.10.08 01:22:10 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS)
DRV:64bit: - [2008.10.08 01:22:10 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT)
DRV:64bit: - [2008.10.08 01:22:08 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT.SYS)
DRV:64bit: - [2008.10.08 01:22:08 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT)
DRV:64bit: - [2008.08.05 05:29:26 | 000,056,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2008.06.27 06:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs)
DRV:64bit: - [2007.12.06 08:51:00 | 000,391,680 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV:64bit: - [2007.02.16 20:12:36 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wacommousefilter.sys -- (wacommousefilter)
DRV:64bit: - [2006.11.01 00:23:42 | 000,015,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ASACPI.sys -- (MTsensor)
DRV - [2008.08.14 06:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)
DRV - [2005.01.05 04:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 6A 66 D2 2F 22 CF CC 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.3: C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: D:\Firefox\components [2012.01.09 20:25:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: D:\Firefox\plugins [2011.08.13 01:31:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: D:\Thunderbird\components [2011.11.19 15:56:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: D:\Thunderbird\plugins
 
[2010.08.20 16:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\tilman\AppData\Roaming\mozilla\Extensions
[2010.08.20 16:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\tilman\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.01.08 21:01:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\tilman\AppData\Roaming\mozilla\Firefox\Profiles\p6dyj3tp.default\extensions
[2010.04.28 20:19:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\tilman\AppData\Roaming\mozilla\Firefox\Profiles\p6dyj3tp.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.12.11 00:50:52 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Users\tilman\AppData\Roaming\mozilla\Firefox\Profiles\p6dyj3tp.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
 
O1 HOSTS File: ([2012.01.14 01:21:47 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4:64bit: - HKLM..\Run: [MAFWDITaskbarApp] C:\Windows\SysWOW64\MAFWDITray.exe (Avid Technology, Inc.)
O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Malwarebytes\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [M-Audio Taskbar Icon] C:\Windows\SysWOW64\MAFWDITray.exe (Avid Technology, Inc.)
O4 - HKLM..\Run: [WinampAgent] D:\Winamp\winampa.exe ()
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [Firefox helper] C:\Users\tilman\AppData\Roaming\Mozilla\Firefox\firefox.exe ()
O4 - Startup: C:\Users\tilman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\tilman\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - D:\Microsoft Office 2003\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - D:\Microsoft Office 2003\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Microsoft Office 2003\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000017 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15107/CTPID.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{937B2AF5-8EDC-48BA-BB57-69918627DA58}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\tilman\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\tilman\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.01.06 20:12:37 | 000,000,000 | ---D | M] - D:\Autodesk -- [ NTFS ]
O33 - MountPoints2\{2fd761bb-520e-11df-ba65-00248c5a8413}\Shell - "" = AutoRun
O33 - MountPoints2\{2fd761bb-520e-11df-ba65-00248c5a8413}\Shell\AutoRun\command - "" = G:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.01.14 01:21:28 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.01.14 00:08:46 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\Malwarebytes
[2012.01.14 00:08:40 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.01.14 00:08:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.14 00:08:14 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\tilman\Desktop\OTL.exe
[2012.01.14 00:08:13 | 010,847,608 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\tilman\Desktop\mbam-setup-1.60.0.1800.exe
[2012.01.14 00:08:13 | 001,972,528 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\tilman\Desktop\TDSSKiller.exe
[2012.01.13 02:10:49 | 009,027,648 | ---- | C] (McAfee Inc.) -- C:\Users\tilman\Desktop\stinger.exe
[2012.01.13 02:06:48 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2012.01.13 02:06:46 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2012.01.13 02:06:46 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2012.01.13 01:46:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\75A80
[2012.01.13 01:45:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\72161
[2012.01.13 01:45:56 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\D8475
[2012.01.13 01:45:25 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\FAE72
[2012.01.13 01:45:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LP
[2012.01.12 14:14:28 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\mIRC
[2012.01.08 20:54:50 | 000,000,000 | ---D | C] -- C:\Users\tilman\Desktop\Juristische Methodenlehre
[2011.12.31 12:55:00 | 000,000,000 | ---D | C] -- C:\Users\tilman\Desktop\Noten_in_Reihenfolge
[2011.12.29 01:36:39 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D1E50F38-400B-4231-8140-FB47E150B777}
[2011.12.29 01:36:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Native Instruments
[2011.12.29 01:36:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
[2011.12.23 12:42:21 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2011.12.23 12:42:21 | 000,735,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll
[2011.12.23 12:42:21 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll
[2011.12.23 12:42:21 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2011.12.23 12:42:21 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleaccrc.dll
[2011.12.23 12:42:21 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaccrc.dll
[2011.12.23 12:42:09 | 000,559,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011.12.23 12:42:09 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011.12.23 12:42:06 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2011.12.23 12:40:43 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2011.12.23 12:40:43 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2011.12.23 12:40:43 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2011.12.23 12:40:43 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2011.12.23 12:40:43 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2011.12.23 12:40:43 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2011.12.23 12:40:43 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2011.12.23 12:40:43 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2008.10.07 23:42:42 | 000,060,928 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll
[2008.10.07 23:23:46 | 000,012,800 | ---- | C] ( ) -- C:\Windows\SysWow64\killapps.exe
 
========== Files - Modified Within 30 Days ==========
 
[2012.01.16 15:42:23 | 001,418,806 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.01.16 15:42:23 | 000,617,456 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.01.16 15:42:23 | 000,586,568 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.01.16 15:42:23 | 000,122,258 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.01.16 15:42:23 | 000,100,640 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.01.16 15:35:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.14 02:40:55 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012.01.14 02:39:12 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012.01.14 02:37:17 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.14 02:37:17 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.14 01:58:21 | 000,001,460 | ---- | M] () -- C:\Users\tilman\AppData\Local\d3d9caps64.dat
[2012.01.14 01:30:13 | 000,000,048 | RH-- | M] () -- C:\Users\tilman\Desktop\stinger.opt
[2012.01.14 01:22:34 | 000,062,764 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000001-00000000-00000008-00001102-00000005-00311102}.rfx
[2012.01.14 01:22:34 | 000,062,764 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000001-00000000-00000008-00001102-00000005-00311102}.rfx
[2012.01.14 01:22:34 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000001-00000000-00000008-00001102-00000005-00311102}.rfx
[2012.01.13 15:24:32 | 001,972,528 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\tilman\Desktop\TDSSKiller.exe
[2012.01.13 03:03:21 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm
[2012.01.13 03:03:21 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settings.sfm
[2012.01.13 02:11:18 | 009,027,648 | ---- | M] (McAfee Inc.) -- C:\Users\tilman\Desktop\stinger.exe
[2012.01.12 23:36:56 | 000,000,016 | ---- | M] () -- C:\Windows\SysWow64\w3data.vss
[2012.01.12 23:36:56 | 000,000,016 | ---- | M] () -- C:\Windows\SysWow64\msvcsv60.dll
[2012.01.12 23:36:56 | 000,000,016 | ---- | M] () -- C:\Windows\msocreg32.dat
[2012.01.12 20:20:44 | 000,078,848 | ---- | M] () -- C:\Users\tilman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.01.12 19:41:54 | 007,874,388 | ---- | M] () -- C:\Users\tilman\Desktop\Ingrid Peters_Es trommelt_006_Ingrid Peters_Schwester.mp3
[2012.01.12 18:54:39 | 002,947,766 | ---- | M] () -- C:\Users\tilman\Desktop\Ingrid Peters - Schwester 2009.mp3
[2012.01.12 14:26:18 | 003,693,554 | ---- | M] () -- C:\Windows\SysWow64\TmpA4469506
[2012.01.12 14:15:22 | 000,128,512 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2012.01.10 16:25:41 | 171,558,463 | ---- | M] () -- C:\Users\tilman\Desktop\hollywood-strings-legato-tutorial-1.mov
[2012.01.10 00:49:50 | 000,093,696 | ---- | M] () -- C:\Users\tilman\Desktop\airforce.fla
[2012.01.08 20:54:45 | 001,845,753 | ---- | M] () -- C:\Users\tilman\Desktop\Juristische Methodenlehre.zip
[2011.12.31 12:57:10 | 002,298,239 | ---- | M] () -- C:\Users\tilman\Desktop\The devil you know (Playback).m4a
[2011.12.31 12:57:01 | 005,029,895 | ---- | M] () -- C:\Users\tilman\Desktop\Jessie.mp3
[2011.12.31 12:56:34 | 002,495,126 | ---- | M] () -- C:\Users\tilman\Desktop\Ain't that a kick in the head.mp3
[2011.12.31 12:56:23 | 002,627,131 | ---- | M] () -- C:\Users\tilman\Desktop\06 Straighten Up And Fly Right.mp3
[2011.12.31 12:50:02 | 004,466,636 | ---- | M] () -- C:\Users\tilman\Desktop\40 Beyond The Sea.m4a
[2011.12.28 02:02:02 | 010,847,608 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\tilman\Desktop\mbam-setup-1.60.0.1800.exe
[2011.12.24 11:51:17 | 003,104,712 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.12.23 02:49:47 | 131,907,024 | ---- | M] () -- C:\Users\tilman\Desktop\ArtistFriendlyHairShading.mov
[2011.12.23 02:45:04 | 029,342,205 | ---- | M] () -- C:\Users\tilman\Desktop\elasticSkinning-movie.mov
 
========== Files Created - No Company Name ==========
 
[2012.01.13 02:59:56 | 000,000,048 | RH-- | C] () -- C:\Users\tilman\Desktop\stinger.opt
[2012.01.12 19:41:34 | 007,874,388 | ---- | C] () -- C:\Users\tilman\Desktop\Ingrid Peters_Es trommelt_006_Ingrid Peters_Schwester.mp3
[2012.01.12 18:54:34 | 002,947,766 | ---- | C] () -- C:\Users\tilman\Desktop\Ingrid Peters - Schwester 2009.mp3
[2012.01.12 14:26:18 | 003,693,554 | ---- | C] () -- C:\Windows\SysWow64\TmpA4469506
[2012.01.12 14:15:22 | 000,128,512 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2012.01.10 16:10:32 | 171,558,463 | ---- | C] () -- C:\Users\tilman\Desktop\hollywood-strings-legato-tutorial-1.mov
[2012.01.10 00:49:50 | 000,093,696 | ---- | C] () -- C:\Users\tilman\Desktop\airforce.fla
[2012.01.08 20:54:44 | 001,845,753 | ---- | C] () -- C:\Users\tilman\Desktop\Juristische Methodenlehre.zip
[2011.12.31 12:57:01 | 002,298,239 | ---- | C] () -- C:\Users\tilman\Desktop\The devil you know (Playback).m4a
[2011.12.31 12:56:40 | 005,029,895 | ---- | C] () -- C:\Users\tilman\Desktop\Jessie.mp3
[2011.12.31 12:56:33 | 002,495,126 | ---- | C] () -- C:\Users\tilman\Desktop\Ain't that a kick in the head.mp3
[2011.12.31 12:56:12 | 002,627,131 | ---- | C] () -- C:\Users\tilman\Desktop\06 Straighten Up And Fly Right.mp3
[2011.12.31 12:50:00 | 004,466,636 | ---- | C] () -- C:\Users\tilman\Desktop\40 Beyond The Sea.m4a
[2011.12.23 02:42:25 | 131,907,024 | ---- | C] () -- C:\Users\tilman\Desktop\ArtistFriendlyHairShading.mov
[2011.12.23 02:42:12 | 029,342,205 | ---- | C] () -- C:\Users\tilman\Desktop\elasticSkinning-movie.mov
[2011.07.29 16:51:21 | 000,000,162 | ---- | C] () -- C:\Windows\msmmdx9.ini
[2011.06.29 23:59:43 | 000,017,857 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall-dBpowerAMP Music Converter.dat
[2010.12.08 22:38:13 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat
[2010.11.14 23:11:58 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010.05.25 23:07:40 | 000,002,892 | ---- | C] () -- C:\Windows\SysWow64\audcon.sys
[2010.05.25 23:06:51 | 000,000,051 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe.cfg
[2009.12.03 22:37:15 | 000,167,936 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe
[2009.09.23 10:41:42 | 001,305,608 | ---- | C] () -- C:\Windows\SysWow64\M-AudioProFireControlPanel.exe
[2009.09.07 21:35:02 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2009.08.04 16:34:31 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.08.04 16:34:19 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.06.12 23:24:27 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009.06.12 23:24:04 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009.06.12 23:23:46 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.04.23 17:06:35 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\msvcsv60.dll
[2009.04.23 17:06:35 | 000,000,016 | ---- | C] () -- C:\Windows\msocreg32.dat
[2009.04.23 16:33:33 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe
[2009.04.03 13:57:52 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009.03.28 02:12:30 | 000,078,848 | ---- | C] () -- C:\Users\tilman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.03.26 22:17:06 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.03.26 19:25:39 | 000,003,072 | ---- | C] () -- C:\Windows\SysWow64\CTXFIGER.DLL
[2009.03.26 18:46:02 | 000,028,616 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2009.03.26 18:45:33 | 000,028,307 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2009.03.26 18:43:32 | 000,001,460 | ---- | C] () -- C:\Users\tilman\AppData\Local\d3d9caps64.dat
[2009.03.26 18:06:30 | 000,144,896 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2009.03.26 18:06:30 | 000,071,168 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2008.12.03 08:39:45 | 000,007,718 | ---- | C] () -- C:\Windows\cadx2.ini
[2008.10.08 00:08:38 | 000,020,936 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini
[2008.10.07 23:41:40 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CtxfiRes.dll
[2008.10.07 23:31:14 | 000,321,512 | ---- | C] () -- C:\Windows\SysWow64\ctdlang.dat
[2008.10.07 23:31:14 | 000,056,509 | ---- | C] () -- C:\Windows\SysWow64\ctdnlstr.dat
[2008.10.07 23:23:50 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\enlocstr.exe
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2008.09.12 21:22:40 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2008.08.19 18:39:18 | 000,000,321 | ---- | C] () -- C:\Windows\SysWow64\kill.ini
[2008.06.05 08:58:26 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2008.01.21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2007.12.28 08:22:02 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2006.12.08 13:58:14 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\FxShared.dll
[2006.12.08 02:52:50 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\com.fxpansion.fxshared.dll
[2006.11.02 16:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006.11.02 13:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006.11.02 13:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.11.02 10:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin

< End of report >
         

 

Themen zu Windows blockiert! Runterladen und Installieren
0x00000001, adobe, antivir, autorun, avira, bho, blockiert, bonjour, browser, cdburnerxp, combofix, dateisystem, error, excel, excel.exe, explorer, firefox, format, helper, heuristiks/extra, heuristiks/shuriken, home, kaspersky, langs, logfile, mbamservice.exe, microsoft office 2003, mozilla, mozilla thunderbird, plug-in, registry, scan, software, tablet, trojaner-board, version=1.0, vista, windows




Ähnliche Themen: Windows blockiert! Runterladen und Installieren


  1. Windows 7: Gruppenrichtlinie blockiert Avira und andere Versuche Virenscanner zu installieren
    Log-Analyse und Auswertung - 20.08.2014 (9)
  2. Windowssystem blockiert - bezahlen und runterladen - schwarzer Bildschirm
    Plagegeister aller Art und deren Bekämpfung - 30.03.2012 (11)
  3. Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert - Bezahlen und runterladen
    Log-Analyse und Auswertung - 29.03.2012 (7)
  4. Virus - "Windows aus Sicherheitsgründen blockiert, bezahlen und runterladen"
    Log-Analyse und Auswertung - 27.03.2012 (16)
  5. Windowssystem blockiert - bezahlen und runterladen
    Log-Analyse und Auswertung - 08.03.2012 (14)
  6. Bezahlen und runterladen! Ihr Windowssystem wurde aus Sicherheitsgründen blockiert!
    Plagegeister aller Art und deren Bekämpfung - 07.03.2012 (6)
  7. "Bezahlen und runterladen" 50 Euro, Windows blockiert
    Log-Analyse und Auswertung - 06.03.2012 (5)
  8. Windows System blockiert. Bezahlen und Runterladen
    Log-Analyse und Auswertung - 17.02.2012 (19)
  9. Windows 7: "bezahlen und runterladen"-virus _ aus sicherheitsgründen wird...blockiert.etc
    Plagegeister aller Art und deren Bekämpfung - 16.02.2012 (1)
  10. Windows blockiert - "Windows wurde gesperrt. ..... runterladen und bezahlen"
    Plagegeister aller Art und deren Bekämpfung - 14.02.2012 (6)
  11. Bezahlen und runterladen! Ihr Windowssystem wurde aus Sicherheitsgründen blockiert!
    Plagegeister aller Art und deren Bekämpfung - 12.02.2012 (26)
  12. Windows System blockiert - Bezahlen und runterladen
    Plagegeister aller Art und deren Bekämpfung - 09.02.2012 (3)
  13. Windowssystem blockiert (bezahlen und runterladen)
    Log-Analyse und Auswertung - 09.02.2012 (1)
  14. Windows blockiert, Geld zahlen und runterladen
    Plagegeister aller Art und deren Bekämpfung - 14.01.2012 (8)
  15. #Betriebssystem blockiert,50€ zahlen zum runterladen!
    Plagegeister aller Art und deren Bekämpfung - 07.01.2012 (9)
  16. achtung windowssyset wurde blockiert - bezahlen und runterladen
    Plagegeister aller Art und deren Bekämpfung - 29.12.2011 (10)
  17. Windows blockiert (Bundestrojaner) - Wie soll ich OTL installieren, da kein Zugriff!
    Log-Analyse und Auswertung - 20.12.2011 (23)

Zum Thema Windows blockiert! Runterladen und Installieren - Hallo Trojaner-Board, vor ein paar Tagen hat es mich leider auch erwischt! Da der Fall nicht unbekannt zu sein schien, habe ich bereits versucht mit Hilfe anderer Threads ein paar - Windows blockiert! Runterladen und Installieren...
Archiv
Du betrachtest: Windows blockiert! Runterladen und Installieren auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.