![]() |
|
Log-Analyse und Auswertung: Windows blockiert! Runterladen und InstallierenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows blockiert! Runterladen und Installieren Hallo Trojaner-Board, vor ein paar Tagen hat es mich leider auch erwischt! Da der Fall nicht unbekannt zu sein schien, habe ich bereits versucht mit Hilfe anderer Threads ein paar der Schritte nachzuempfinden. Leider spreche ich jedoch aus dem abgesicherten Modus zu euch, was vermuten lässt, dass es ohne richtigen Custom-Fix, bzw. etwaigem ComboFix wohl nicht gehen wird! Ich freue mich sehr über Anleitung was in welchem Modus zu tun ist. Helft mir bitte - die Daten und Zeit an liebevoller Konfiguration der Programme bedeuten mir viel! Danke! Malwarebytes-Log: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.60.0.1800 www.malwarebytes.org Datenbank Version: v2012.01.13.05 Windows Vista Service Pack 2 x64 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 8.0.6001.19088 tilman :: TILMAN-SERVER [Administrator] Schutz: Deaktiviert 16.01.2012 15:37:36 mbam-log-2012-01-16 (15-37-36).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 308291 Laufzeit: 27 Minute(n), 19 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter OTL logfile created on: 16.01.2012 16:05:49 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\tilman\Desktop 64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19088) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 8,00 Gb Total Physical Memory | 6,56 Gb Available Physical Memory | 82,00% Memory free 16,14 Gb Paging File | 14,96 Gb Available in Paging File | 92,68% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 6,17 Gb Free Space | 12,64% Space Free | Partition Type: NTFS Drive D: | 146,48 Gb Total Space | 87,57 Gb Free Space | 59,78% Space Free | Partition Type: NTFS Drive E: | 400,86 Gb Total Space | 69,07 Gb Free Space | 17,23% Space Free | Partition Type: NTFS Computer Name: TILMAN-SERVER | User Name: tilman | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.01.09 20:25:30 | 000,924,632 | ---- | M] (Mozilla Corporation) -- D:\Firefox\firefox.exe PRC - [2011.10.16 14:22:40 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\tilman\Desktop\OTL.exe ========== Modules (No Company Name) ========== MOD - [2012.01.09 20:25:30 | 002,124,760 | ---- | M] () -- D:\Firefox\mozjs.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2009.04.13 18:24:38 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV - [2011.12.24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- D:\Malwarebytes\mbamservice.exe -- (MBAMService) SRV - [2011.07.15 17:37:34 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- D:\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.06.20 20:33:29 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011.04.29 16:53:03 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- D:\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011.03.28 14:41:12 | 002,111,368 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- D:\Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2010.11.15 11:08:10 | 005,716,848 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Programme\Tablet\Wacom\Wacom_Tablet.exe -- (TabletServiceWacom) SRV - [2009.07.17 14:31:34 | 004,948,992 | ---- | M] (Native Instruments GmbH) [Auto | Stopped] -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService) SRV - [2009.06.02 01:06:00 | 002,805,084 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc) SRV - [2009.04.10 20:46:13 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009.03.30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009.03.26 18:59:50 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2008.12.29 18:27:38 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Stopped] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008.10.20 21:18:26 | 000,071,096 | ---- | M] () [Auto | Stopped] -- D:\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU) SRV - [2008.09.08 11:11:02 | 000,726,016 | ---- | M] () [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM) SRV - [2008.09.08 11:09:52 | 000,221,696 | ---- | M] () [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.12.10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2011.07.15 17:37:34 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb) DRV:64bit: - [2011.07.15 17:37:34 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt) DRV:64bit: - [2010.11.02 16:07:54 | 000,013,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wacmoumonitor.sys -- (wacmoumonitor) DRV:64bit: - [2009.10.01 01:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:64bit: - [2009.09.23 10:41:40 | 000,287,240 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\MAudioProFire.sys -- (MAFWPROFIRE) DRV:64bit: - [2009.09.22 00:29:22 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wacomvhid.sys -- (wacomvhid) DRV:64bit: - [2009.08.28 18:42:52 | 000,049,152 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2009.06.26 14:36:32 | 000,030,352 | ---- | M] (Steinberg Media Technologies GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\SynUSB64.sys -- (SynUSB64) DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2009.04.23 17:04:17 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\hamachi.sys -- (hamachi) DRV:64bit: - [2008.10.08 01:22:36 | 001,561,112 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k) DRV:64bit: - [2008.10.08 01:22:30 | 000,118,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:64bit: - [2008.10.08 01:22:28 | 000,213,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:64bit: - [2008.10.08 01:22:26 | 000,015,896 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:64bit: - [2008.10.08 01:22:24 | 000,179,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:64bit: - [2008.10.08 01:22:22 | 000,684,312 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV:64bit: - [2008.10.08 01:22:18 | 000,580,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:64bit: - [2008.10.08 01:22:14 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV:64bit: - [2008.10.08 01:22:14 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX) DRV:64bit: - [2008.10.08 01:22:10 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV:64bit: - [2008.10.08 01:22:10 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT) DRV:64bit: - [2008.10.08 01:22:08 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV:64bit: - [2008.10.08 01:22:08 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT) DRV:64bit: - [2008.08.05 05:29:26 | 000,056,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:64bit: - [2008.06.27 06:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs) DRV:64bit: - [2007.12.06 08:51:00 | 000,391,680 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64) DRV:64bit: - [2007.02.16 20:12:36 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wacommousefilter.sys -- (wacommousefilter) DRV:64bit: - [2006.11.01 00:23:42 | 000,015,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ASACPI.sys -- (MTsensor) DRV - [2008.08.14 06:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs) DRV - [2005.01.05 04:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 6A 66 D2 2F 22 CF CC 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.3: C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: D:\Firefox\components [2012.01.09 20:25:31 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: D:\Firefox\plugins [2011.08.13 01:31:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: D:\Thunderbird\components [2011.11.19 15:56:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: D:\Thunderbird\plugins [2010.08.20 16:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\tilman\AppData\Roaming\mozilla\Extensions [2010.08.20 16:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\tilman\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2012.01.08 21:01:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\tilman\AppData\Roaming\mozilla\Firefox\Profiles\p6dyj3tp.default\extensions [2010.04.28 20:19:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\tilman\AppData\Roaming\mozilla\Firefox\Profiles\p6dyj3tp.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.12.11 00:50:52 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Users\tilman\AppData\Roaming\mozilla\Firefox\Profiles\p6dyj3tp.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} O1 HOSTS File: ([2012.01.14 01:21:47 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4:64bit: - HKLM..\Run: [MAFWDITaskbarApp] C:\Windows\SysWOW64\MAFWDITray.exe (Avid Technology, Inc.) O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Malwarebytes\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [M-Audio Taskbar Icon] C:\Windows\SysWOW64\MAFWDITray.exe (Avid Technology, Inc.) O4 - HKLM..\Run: [WinampAgent] D:\Winamp\winampa.exe () O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [Firefox helper] C:\Users\tilman\AppData\Roaming\Mozilla\Firefox\firefox.exe () O4 - Startup: C:\Users\tilman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\tilman\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - D:\Microsoft Office 2003\OFFICE11\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Nach Microsoft &Excel exportieren - D:\Microsoft Office 2003\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Microsoft Office 2003\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000017 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15107/CTPID.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{937B2AF5-8EDC-48BA-BB57-69918627DA58}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Filter\text/xml - No CLSID value found O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\tilman\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\tilman\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011.01.06 20:12:37 | 000,000,000 | ---D | M] - D:\Autodesk -- [ NTFS ] O33 - MountPoints2\{2fd761bb-520e-11df-ba65-00248c5a8413}\Shell - "" = AutoRun O33 - MountPoints2\{2fd761bb-520e-11df-ba65-00248c5a8413}\Shell\AutoRun\command - "" = G:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012.01.14 01:21:28 | 000,000,000 | ---D | C] -- C:\_OTL [2012.01.14 00:08:46 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\Malwarebytes [2012.01.14 00:08:40 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012.01.14 00:08:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012.01.14 00:08:14 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\tilman\Desktop\OTL.exe [2012.01.14 00:08:13 | 010,847,608 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\tilman\Desktop\mbam-setup-1.60.0.1800.exe [2012.01.14 00:08:13 | 001,972,528 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\tilman\Desktop\TDSSKiller.exe [2012.01.13 02:10:49 | 009,027,648 | ---- | C] (McAfee Inc.) -- C:\Users\tilman\Desktop\stinger.exe [2012.01.13 02:06:48 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2012.01.13 02:06:46 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll [2012.01.13 02:06:46 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll [2012.01.13 01:46:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\75A80 [2012.01.13 01:45:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\72161 [2012.01.13 01:45:56 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\D8475 [2012.01.13 01:45:25 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\FAE72 [2012.01.13 01:45:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LP [2012.01.12 14:14:28 | 000,000,000 | ---D | C] -- C:\Users\tilman\AppData\Roaming\mIRC [2012.01.08 20:54:50 | 000,000,000 | ---D | C] -- C:\Users\tilman\Desktop\Juristische Methodenlehre [2011.12.31 12:55:00 | 000,000,000 | ---D | C] -- C:\Users\tilman\Desktop\Noten_in_Reihenfolge [2011.12.29 01:36:39 | 000,000,000 | -H-D | C] -- C:\ProgramData\{D1E50F38-400B-4231-8140-FB47E150B777} [2011.12.29 01:36:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Native Instruments [2011.12.29 01:36:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\{C78336EC-F2EB-4640-99A4-DFE96581B90B} [2011.12.23 12:42:21 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2011.12.23 12:42:21 | 000,735,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll [2011.12.23 12:42:21 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll [2011.12.23 12:42:21 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll [2011.12.23 12:42:21 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleaccrc.dll [2011.12.23 12:42:21 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaccrc.dll [2011.12.23 12:42:09 | 000,559,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll [2011.12.23 12:42:09 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll [2011.12.23 12:42:06 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll [2011.12.23 12:40:43 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2011.12.23 12:40:43 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2011.12.23 12:40:43 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax [2011.12.23 12:40:43 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax [2011.12.23 12:40:43 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax [2011.12.23 12:40:43 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax [2011.12.23 12:40:43 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax [2011.12.23 12:40:43 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax [2008.10.07 23:42:42 | 000,060,928 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll [2008.10.07 23:23:46 | 000,012,800 | ---- | C] ( ) -- C:\Windows\SysWow64\killapps.exe ========== Files - Modified Within 30 Days ========== [2012.01.16 15:42:23 | 001,418,806 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.01.16 15:42:23 | 000,617,456 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.01.16 15:42:23 | 000,586,568 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.01.16 15:42:23 | 000,122,258 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.01.16 15:42:23 | 000,100,640 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.01.16 15:35:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.01.14 02:40:55 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.001 [2012.01.14 02:39:12 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.dat [2012.01.14 02:37:17 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012.01.14 02:37:17 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012.01.14 01:58:21 | 000,001,460 | ---- | M] () -- C:\Users\tilman\AppData\Local\d3d9caps64.dat [2012.01.14 01:30:13 | 000,000,048 | RH-- | M] () -- C:\Users\tilman\Desktop\stinger.opt [2012.01.14 01:22:34 | 000,062,764 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000001-00000000-00000008-00001102-00000005-00311102}.rfx [2012.01.14 01:22:34 | 000,062,764 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000001-00000000-00000008-00001102-00000005-00311102}.rfx [2012.01.14 01:22:34 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000001-00000000-00000008-00001102-00000005-00311102}.rfx [2012.01.13 15:24:32 | 001,972,528 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\tilman\Desktop\TDSSKiller.exe [2012.01.13 03:03:21 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm [2012.01.13 03:03:21 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settings.sfm [2012.01.13 02:11:18 | 009,027,648 | ---- | M] (McAfee Inc.) -- C:\Users\tilman\Desktop\stinger.exe [2012.01.12 23:36:56 | 000,000,016 | ---- | M] () -- C:\Windows\SysWow64\w3data.vss [2012.01.12 23:36:56 | 000,000,016 | ---- | M] () -- C:\Windows\SysWow64\msvcsv60.dll [2012.01.12 23:36:56 | 000,000,016 | ---- | M] () -- C:\Windows\msocreg32.dat [2012.01.12 20:20:44 | 000,078,848 | ---- | M] () -- C:\Users\tilman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012.01.12 19:41:54 | 007,874,388 | ---- | M] () -- C:\Users\tilman\Desktop\Ingrid Peters_Es trommelt_006_Ingrid Peters_Schwester.mp3 [2012.01.12 18:54:39 | 002,947,766 | ---- | M] () -- C:\Users\tilman\Desktop\Ingrid Peters - Schwester 2009.mp3 [2012.01.12 14:26:18 | 003,693,554 | ---- | M] () -- C:\Windows\SysWow64\TmpA4469506 [2012.01.12 14:15:22 | 000,128,512 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat [2012.01.10 16:25:41 | 171,558,463 | ---- | M] () -- C:\Users\tilman\Desktop\hollywood-strings-legato-tutorial-1.mov [2012.01.10 00:49:50 | 000,093,696 | ---- | M] () -- C:\Users\tilman\Desktop\airforce.fla [2012.01.08 20:54:45 | 001,845,753 | ---- | M] () -- C:\Users\tilman\Desktop\Juristische Methodenlehre.zip [2011.12.31 12:57:10 | 002,298,239 | ---- | M] () -- C:\Users\tilman\Desktop\The devil you know (Playback).m4a [2011.12.31 12:57:01 | 005,029,895 | ---- | M] () -- C:\Users\tilman\Desktop\Jessie.mp3 [2011.12.31 12:56:34 | 002,495,126 | ---- | M] () -- C:\Users\tilman\Desktop\Ain't that a kick in the head.mp3 [2011.12.31 12:56:23 | 002,627,131 | ---- | M] () -- C:\Users\tilman\Desktop\06 Straighten Up And Fly Right.mp3 [2011.12.31 12:50:02 | 004,466,636 | ---- | M] () -- C:\Users\tilman\Desktop\40 Beyond The Sea.m4a [2011.12.28 02:02:02 | 010,847,608 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\tilman\Desktop\mbam-setup-1.60.0.1800.exe [2011.12.24 11:51:17 | 003,104,712 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.12.23 02:49:47 | 131,907,024 | ---- | M] () -- C:\Users\tilman\Desktop\ArtistFriendlyHairShading.mov [2011.12.23 02:45:04 | 029,342,205 | ---- | M] () -- C:\Users\tilman\Desktop\elasticSkinning-movie.mov ========== Files Created - No Company Name ========== [2012.01.13 02:59:56 | 000,000,048 | RH-- | C] () -- C:\Users\tilman\Desktop\stinger.opt [2012.01.12 19:41:34 | 007,874,388 | ---- | C] () -- C:\Users\tilman\Desktop\Ingrid Peters_Es trommelt_006_Ingrid Peters_Schwester.mp3 [2012.01.12 18:54:34 | 002,947,766 | ---- | C] () -- C:\Users\tilman\Desktop\Ingrid Peters - Schwester 2009.mp3 [2012.01.12 14:26:18 | 003,693,554 | ---- | C] () -- C:\Windows\SysWow64\TmpA4469506 [2012.01.12 14:15:22 | 000,128,512 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2012.01.10 16:10:32 | 171,558,463 | ---- | C] () -- C:\Users\tilman\Desktop\hollywood-strings-legato-tutorial-1.mov [2012.01.10 00:49:50 | 000,093,696 | ---- | C] () -- C:\Users\tilman\Desktop\airforce.fla [2012.01.08 20:54:44 | 001,845,753 | ---- | C] () -- C:\Users\tilman\Desktop\Juristische Methodenlehre.zip [2011.12.31 12:57:01 | 002,298,239 | ---- | C] () -- C:\Users\tilman\Desktop\The devil you know (Playback).m4a [2011.12.31 12:56:40 | 005,029,895 | ---- | C] () -- C:\Users\tilman\Desktop\Jessie.mp3 [2011.12.31 12:56:33 | 002,495,126 | ---- | C] () -- C:\Users\tilman\Desktop\Ain't that a kick in the head.mp3 [2011.12.31 12:56:12 | 002,627,131 | ---- | C] () -- C:\Users\tilman\Desktop\06 Straighten Up And Fly Right.mp3 [2011.12.31 12:50:00 | 004,466,636 | ---- | C] () -- C:\Users\tilman\Desktop\40 Beyond The Sea.m4a [2011.12.23 02:42:25 | 131,907,024 | ---- | C] () -- C:\Users\tilman\Desktop\ArtistFriendlyHairShading.mov [2011.12.23 02:42:12 | 029,342,205 | ---- | C] () -- C:\Users\tilman\Desktop\elasticSkinning-movie.mov [2011.07.29 16:51:21 | 000,000,162 | ---- | C] () -- C:\Windows\msmmdx9.ini [2011.06.29 23:59:43 | 000,017,857 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall-dBpowerAMP Music Converter.dat [2010.12.08 22:38:13 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat [2010.11.14 23:11:58 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.05.25 23:07:40 | 000,002,892 | ---- | C] () -- C:\Windows\SysWow64\audcon.sys [2010.05.25 23:06:51 | 000,000,051 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe.cfg [2009.12.03 22:37:15 | 000,167,936 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe [2009.09.23 10:41:42 | 001,305,608 | ---- | C] () -- C:\Windows\SysWow64\M-AudioProFireControlPanel.exe [2009.09.07 21:35:02 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI [2009.08.04 16:34:31 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009.08.04 16:34:19 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.dat [2009.06.12 23:24:27 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll [2009.06.12 23:24:04 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin [2009.06.12 23:23:46 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.04.23 17:06:35 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\msvcsv60.dll [2009.04.23 17:06:35 | 000,000,016 | ---- | C] () -- C:\Windows\msocreg32.dat [2009.04.23 16:33:33 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe [2009.04.03 13:57:52 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin [2009.03.28 02:12:30 | 000,078,848 | ---- | C] () -- C:\Users\tilman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.03.26 22:17:06 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2009.03.26 19:25:39 | 000,003,072 | ---- | C] () -- C:\Windows\SysWow64\CTXFIGER.DLL [2009.03.26 18:46:02 | 000,028,616 | ---- | C] () -- C:\Windows\Ascd_log.ini [2009.03.26 18:45:33 | 000,028,307 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2009.03.26 18:43:32 | 000,001,460 | ---- | C] () -- C:\Users\tilman\AppData\Local\d3d9caps64.dat [2009.03.26 18:06:30 | 000,144,896 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2009.03.26 18:06:30 | 000,071,168 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2008.12.03 08:39:45 | 000,007,718 | ---- | C] () -- C:\Windows\cadx2.ini [2008.10.08 00:08:38 | 000,020,936 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini [2008.10.07 23:41:40 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CtxfiRes.dll [2008.10.07 23:31:14 | 000,321,512 | ---- | C] () -- C:\Windows\SysWow64\ctdlang.dat [2008.10.07 23:31:14 | 000,056,509 | ---- | C] () -- C:\Windows\SysWow64\ctdnlstr.dat [2008.10.07 23:23:50 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\enlocstr.exe [2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2008.09.12 21:22:40 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini [2008.08.19 18:39:18 | 000,000,321 | ---- | C] () -- C:\Windows\SysWow64\kill.ini [2008.06.05 08:58:26 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008.01.21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2007.12.28 08:22:02 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2006.12.08 13:58:14 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\FxShared.dll [2006.12.08 02:52:50 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\com.fxpansion.fxshared.dll [2006.11.02 16:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 13:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2006.11.02 13:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2006.11.02 13:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2006.11.02 10:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin < End of report > |
Themen zu Windows blockiert! Runterladen und Installieren |
0x00000001, adobe, antivir, autorun, avira, bho, blockiert, bonjour, browser, cdburnerxp, combofix, dateisystem, error, excel, excel.exe, explorer, firefox, format, helper, heuristiks/extra, heuristiks/shuriken, home, kaspersky, langs, logfile, mbamservice.exe, microsoft office 2003, mozilla, mozilla thunderbird, plug-in, registry, scan, software, tablet, trojaner-board, version=1.0, vista, windows |