Hier die Combofix.txt:
Combofix Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 12-02-29.01 - Administrator 01.03.2012 1:01.3.2 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.3.1252.49.1031.18.1919.1099 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Administrator\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\dokumente und einstellungen\Administrator\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\hosts.ics
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-02-01 bis 2012-03-01 ))))))))))))))))))))))))))))))
.
.
2012-02-27 06:50 . 2012-02-27 06:50 -------- d-----r- c:\dokumente und einstellungen\LocalService\Eigene Dateien
2012-02-26 23:54 . 2012-02-26 23:54 -------- d-----r- c:\dokumente und einstellungen\LocalService\Favoriten
2012-02-26 22:33 . 2012-02-26 22:33 -------- d-----w- c:\programme\ESET
2012-02-26 21:56 . 2012-02-26 21:56 -------- d-----w- c:\programme\7-Zip
2012-02-26 21:17 . 2012-02-26 21:17 -------- d-----w- c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Malwarebytes
2012-02-26 21:17 . 2012-02-26 21:17 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2012-02-26 21:17 . 2011-12-10 14:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-02-26 21:17 . 2012-02-26 21:17 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware
2012-02-16 17:50 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\iacenc.dll
2012-02-16 17:50 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\dllcache\iacenc.dll
2012-02-10 18:36 . 2012-02-10 18:36 -------- d-----w- c:\programme\OnlineControl
2012-02-09 22:40 . 2012-02-09 22:40 -------- d-----w- C:\FOUND.000
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-27 23:38 . 2011-09-04 23:18 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-27 23:14 . 2010-12-05 00:15 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-02-27 23:14 . 2008-06-05 18:30 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-02-17 00:35 . 2009-05-12 19:51 4542 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2012-01-12 17:20 . 2006-08-17 16:42 1860096 ----a-w- c:\windows\system32\win32k.sys
2011-12-19 08:08 . 2006-08-17 16:42 832512 ----a-w- c:\windows\system32\wininet.dll
2011-12-19 08:08 . 2006-08-17 16:42 1830912 ------w- c:\windows\system32\inetcpl.cpl
2011-12-19 08:08 . 2006-08-17 16:42 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-12-19 08:08 . 2006-08-17 16:42 17408 ------w- c:\windows\system32\corpol.dll
2011-10-18 22:30 . 2011-10-18 22:30 38958968 ----a-w- c:\programme\QuickTimeInstaller.exe
2011-10-01 22:57 . 2011-10-01 22:57 7886336 ----a-w- c:\programme\Microsoft_ActiveSync_4.5.msi
2011-10-01 22:55 . 2011-10-01 22:55 28895326 ----a-w- c:\programme\Phone_Software_Update-Windows_Mobile_IF1.exe
2007-03-12 17:59 . 2007-03-12 17:59 299008 ----a-w- c:\programme\navigram_register.exe
2012-02-19 08:58 . 2012-02-15 04:47 134104 ----a-w- c:\programme\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\qoobox\quarantine ----
.
2012-02-27 18:08 . 2012-02-29 17:17 374 ----a-w- c:\qoobox\quarantine\C\WINDOWS\system32\drivers\etc\hosts.ics.vir
2012-02-27 18:01 . 2012-03-01 00:01 0 ----a-w- c:\qoobox\quarantine\catchme.txt
2012-02-27 14:21 . 2012-02-27 14:21 532 ----a-w- c:\qoobox\quarantine\Registry_backups\AddRemove-Microsoft Interactive Training.reg.dat
2012-02-27 14:21 . 2012-02-27 14:21 518 ----a-w- c:\qoobox\quarantine\Registry_backups\AddRemove-Easy-WebPrint.reg.dat
2012-02-27 14:21 . 2012-02-27 14:21 1724 ----a-w- c:\qoobox\quarantine\Registry_backups\AddRemove-Adobe Photoshop 7.0.reg.dat
2012-02-27 14:21 . 2012-02-27 14:21 210 ----a-w- c:\qoobox\quarantine\Registry_backups\HKLM_ActiveSetup-ccc-core-static.reg.dat
2012-02-27 14:20 . 2012-02-27 14:20 186 ----a-w- c:\qoobox\quarantine\Registry_backups\HKLM-Run-qmbMTuLOUQqEwqQ.exe.reg.dat
2012-02-27 14:15 . 2012-02-27 14:15 684698 ----a-w- c:\qoobox\quarantine\C\WINDOWS\_WindowsUpdate_.log.zip
2012-02-27 14:13 . 2012-03-01 00:07 12183 ----a-w- c:\qoobox\quarantine\Registry_backups\tcpip.reg
2012-02-27 14:12 . 2012-02-26 17:01 767 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\System Check.lnk
2012-02-27 14:12 . 2010-04-01 23:55 1554 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Mozilla Thunderbird.lnk
2012-02-27 14:12 . 2011-09-05 21:00 1659 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Google Chrome.lnk
2012-02-27 14:12 . 2008-10-01 12:09 597 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\VNC Viewer 4.lnk
2012-02-27 14:12 . 2011-12-26 10:11 618 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Mozilla Firefox.lnk
2012-02-27 14:12 . 2010-03-19 08:21 699 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Internet Explorer Browser starten.lnk
2012-02-27 14:12 . 2008-06-27 23:41 688 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Windows Media Player.lnk
2012-02-27 14:12 . 2008-05-14 22:36 2277 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Nero StartSmart Essentials.lnk
2012-02-27 14:12 . 2008-06-06 00:05 124 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\desktop.ini
2012-02-27 14:12 . 2008-05-14 22:19 79 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\2\Desktop anzeigen.scf
2012-02-27 14:12 . 2012-01-03 15:04 1643 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\StarMoney 8.0 S-Edition.lnk
2012-02-27 14:12 . 2012-02-26 21:17 660 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\ Malwarebytes Anti-Malware .lnk
2012-02-27 14:12 . 2012-01-28 21:46 2339 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Steuer 2010.lnk
2012-02-27 14:12 . 2011-12-06 15:11 758 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\ElsterFormular.lnk
2012-02-27 14:12 . 2011-11-21 07:29 1791 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Google Earth.lnk
2012-02-27 14:12 . 2011-12-06 15:00 751 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\ElsterFormular 2008-2009.lnk
2012-02-27 14:12 . 2011-10-01 22:56 753 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Samsung Phone Software Updater - Windows Mobile.lnk
2012-02-27 14:12 . 2011-09-25 16:26 820 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\NAVIGON Fresh.lnk
2012-02-27 14:12 . 2012-02-17 20:40 1681 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Google Chrome.lnk
2012-02-27 14:12 . 2010-12-05 13:40 1575 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Avira AntiVir Control Center.lnk
2012-02-27 14:12 . 2010-04-01 23:55 1536 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Mozilla Thunderbird.lnk
2012-02-27 14:12 . 2011-12-26 10:11 600 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\Mozilla Firefox.lnk
2012-02-27 14:12 . 2009-10-05 16:12 1616 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\4\LANCOM Advanced VPN Client.lnk
2012-02-27 14:12 . 2012-02-26 21:57 526 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\7-Zip\7-Zip Help.lnk
2012-02-27 14:12 . 2012-02-26 21:17 823 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk
2012-02-27 14:12 . 2012-02-26 21:57 521 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\7-Zip\7-Zip File Manager.lnk
2012-02-27 14:12 . 2012-02-26 21:17 672 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk
2012-02-27 14:12 . 2012-02-26 21:17 696 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware entfernen.lnk
2012-02-27 14:12 . 2012-02-10 18:36 606 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OnlineControl\Bedienungsanleitung OnlineControl.lnk
2012-02-27 14:12 . 2012-02-10 18:36 551 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OnlineControl\Liesmich.lnk
2012-02-27 14:12 . 2012-02-10 18:36 551 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OnlineControl\OnlineControl.lnk
2012-02-27 14:12 . 2012-02-26 21:17 672 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Malwarebytes' Anti-Malware\ Malwarebytes Anti-Malware .lnk
2012-02-27 14:12 . 2012-02-10 18:36 551 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OnlineControl\ OnlineControl entfernen.lnk
2012-02-27 14:12 . 2012-01-03 15:04 1814 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\Wartung.lnk
2012-02-27 14:12 . 2012-01-03 15:04 170 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\StarMoney-Homepage.url
2012-02-27 14:12 . 2012-01-03 15:04 737 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\Konverter für Fremddaten.lnk
2012-02-27 14:12 . 2012-01-03 15:04 770 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\NetViewer.lnk
2012-02-27 14:12 . 2012-01-03 15:04 1705 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\Zu Ihren StarMoney-Daten.lnk
2012-02-27 14:12 . 2012-01-03 15:04 754 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\Chipkartenleser Setup.lnk
2012-02-27 14:12 . 2012-01-03 15:04 667 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\Aktuelle Informationen.lnk
2012-02-27 14:12 . 2012-01-03 15:04 1655 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\StarMoney 8.0 S-Edition\StarMoney 8.0 S-Edition.lnk
2012-02-27 14:12 . 2011-12-26 12:35 1771 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Lexware\Lexware Zubehör\Systeminformationen.lnk
2012-02-27 14:12 . 2011-12-26 12:35 1783 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Lexware\Lexware Zubehör\Lexware Ereignisabfolge.lnk
2012-02-27 14:12 . 2011-12-26 12:31 1884 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Lexware\Lexware Zubehör\Lexware Info Service.lnk
2012-02-27 14:12 . 2011-12-26 12:35 720 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Steuer 2010\KONZ - 1000 Legale Steuertricks.lnk
2012-02-27 14:12 . 2011-12-26 12:35 2593 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Steuer 2010\Steuer 2010.lnk
2012-02-27 14:12 . 2011-12-06 14:59 564 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\Inhalte auf CD-ROM\Gewerbesteuergesetz.lnk
2012-02-27 14:12 . 2011-12-06 14:59 217 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\Inhalte auf CD-ROM\CD durchsuchen.lnk
2012-02-27 14:12 . 2011-12-06 14:59 552 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\Inhalte auf CD-ROM\Umsatzsteuergesetz.lnk
2012-02-27 14:12 . 2011-12-06 14:59 552 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\Inhalte auf CD-ROM\Einkommensteuergesetz.lnk
2012-02-27 14:12 . 2011-12-06 14:59 847 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\ElsterFormular 2008-2009 deinstallieren.lnk
2012-02-27 14:12 . 2011-12-06 14:58 567 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\ElsterFormular 2008 Hilfe.lnk
2012-02-27 14:12 . 2011-12-06 14:58 124 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\weitere Vordrucke.url
2012-02-27 14:12 . 2011-12-06 14:58 677 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\ElsterFormular 2008-2009.lnk
2012-02-27 14:12 . 2011-12-07 07:45 169 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\www.elsterformular.de.url
2012-02-27 14:12 . 2011-12-06 14:58 789 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\2008-2009\Integritätsprüfer.lnk
2012-02-27 14:12 . 2011-12-06 15:11 877 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular - Hilfe.lnk
2012-02-27 14:12 . 2011-12-06 15:11 877 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular - Integritätsprüfer.lnk
2012-02-27 14:12 . 2011-12-06 15:11 853 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular - Hotline.lnk
2012-02-27 14:12 . 2011-12-06 15:11 901 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular - Installationsverwaltung.lnk
2012-02-27 14:12 . 2011-12-06 15:11 758 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular.lnk
2012-02-27 14:12 . 2011-12-06 15:11 786 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular - Screenreadermodus.lnk
2012-02-27 14:12 . 2011-12-06 15:11 1147 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ElsterFormular\ElsterFormular - Uninstall.lnk
2012-02-27 14:12 . 2011-11-21 07:29 1611 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Google Earth\Google Earth deinstallieren.lnk
2012-02-27 14:12 . 2011-11-21 07:29 1737 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Google Earth\Google Earth im DirectX-Modus starten.lnk
2012-02-27 14:12 . 2011-11-21 07:29 1741 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Google Earth\Google Earth im OpenGL-Modus starten.lnk
2012-02-27 14:12 . 2011-11-21 07:29 1801 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Google Earth\Google Earth.lnk
2012-02-27 14:12 . 2011-10-18 22:31 1812 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\QuickTime\PictureViewer.lnk
2012-02-27 14:12 . 2011-10-18 22:31 1802 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\QuickTime\QuickTime - Bitte lesen.lnk
2012-02-27 14:12 . 2011-10-18 22:31 1543 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\QuickTime\QuickTime deinstallieren.lnk
2012-02-27 14:12 . 2011-10-18 22:31 1802 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\QuickTime\QuickTime Player.lnk
2012-02-27 14:12 . 2011-10-01 22:57 2034 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Phone Software Update - Windows Mobile\Uninstall Phone Software Update - Windows Mobile.lnk
2012-02-27 14:12 . 2011-10-01 22:57 1901 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Phone Software Update - Windows Mobile\User Guide.lnk
2012-02-27 14:12 . 2011-10-01 22:56 765 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Samsung Phone Software Updater - Windows Mobile\Samsung Phone Software Updater - Windows Mobile.lnk
2012-02-27 14:12 . 2011-09-25 16:26 760 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\NAVIGON\NAVIGON Fresh\NAVIGON Fresh.lnk
2012-02-27 14:12 . 2011-09-25 16:26 699 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\NAVIGON\NAVIGON Fresh\Deinstallieren.lnk
2012-02-27 14:12 . 2012-02-17 20:40 1693 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Google Chrome\Google Chrome.lnk
2012-02-27 14:12 . 2012-02-17 20:40 1920 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Google Chrome\Google Chrome deinstallieren.lnk
2012-02-27 14:12 . 2011-09-04 20:12 1605 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Presto! PageManager 6\Presto! PageManager 6.01.lnk
2012-02-27 14:12 . 2011-09-04 20:12 1596 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Presto! PageManager 6\Daten der älteren Version importieren.lnk
2012-02-27 14:12 . 2011-09-04 20:12 749 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Presto! PageManager 6\Readme.lnk
2012-02-27 14:12 . 2011-09-04 20:12 1739 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Presto! PageManager 6\Deinstallieren.lnk
2012-02-27 14:12 . 2011-09-04 20:12 761 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Presto! PageManager 6\Presto! PageManager 6.01 Benutzerhandbuch.lnk
2012-02-27 14:12 . 2011-10-01 14:45 2549 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ScanSoft OmniPage SE 2.0\Scannerassistent.lnk
2012-02-27 14:12 . 2011-09-04 20:12 761 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Presto! PageManager 6\Presto! PageManager 6.01 Help.lnk
2012-02-27 14:12 . 2011-09-04 20:13 2409 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ScanSoft OmniPage SE 2.0\OmniPage SE.lnk
2012-02-27 14:12 . 2011-09-04 20:06 753 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\CD-LabelPrint\Deinstallieren.lnk
2012-02-27 14:12 . 2011-09-04 20:06 709 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\CD-LabelPrint\Hilfe.lnk
2012-02-27 14:12 . 2011-09-04 20:06 751 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\CD-LabelPrint\Handbuch.lnk
2012-02-27 14:12 . 2011-09-04 20:06 677 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\CD-LabelPrint\Bitte Lesen.lnk
2012-02-27 14:12 . 2011-09-04 20:06 709 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\CD-LabelPrint\CD-LabelPrint.lnk
2012-02-27 14:12 . 2011-09-04 20:06 759 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon Utilities\Easy-PhotoPrint\Easy-PhotoPrint deinstallieren.lnk
2012-02-27 14:12 . 2011-09-04 20:06 702 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon Utilities\Easy-PhotoPrint\Easy-PhotoPrint.lnk
2012-02-27 14:12 . 2011-09-04 20:06 697 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon Utilities\Easy-PhotoPrint\Easy-PhotoPrint - Readme.lnk
2012-02-27 14:12 . 2011-09-04 20:02 1486 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon\MP Navigator 1.0\MP Navigator Liesmich.lnk
2012-02-27 14:12 . 2011-09-04 20:02 1491 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon\MP Navigator 1.0\MP Navigator 1.0.lnk
2012-02-27 14:12 . 2011-09-04 20:02 849 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon\MP Navigator 1.0\MP Navigator - Deinstallation.lnk
2012-02-27 14:12 . 2011-09-04 20:02 568 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon\ScanGear Starter\ScanGear Starter.lnk
2012-02-27 14:12 . 2011-09-04 20:02 1382 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon\MP Drivers 6.0\MP Liesmich.lnk
2012-02-27 14:12 . 2011-09-04 20:02 922 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon\ScanGear Starter\ScanGear Starter deinstallieren.lnk
2012-02-27 14:12 . 2011-09-04 20:01 1602 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon PIXMA MP780,750 Manual\MP780,750 Software-Handbuch.lnk
2012-02-27 14:12 . 2011-09-04 20:01 524 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon PIXMA MP780,750 Manual\Uninstall.lnk
2012-02-27 14:12 . 2011-09-04 20:01 1607 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon PIXMA MP780,750 Manual\MP780,750 Handbuch zu Fotoanwendungen.lnk
2012-02-27 14:12 . 2011-09-04 20:01 1614 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Canon PIXMA MP780,750 Manual\MP780,750 Benutzerhandbuch.lnk
2012-02-27 14:12 . 2011-08-15 19:37 1408 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Tinypic\TinyPic.exe.lnk
2012-02-27 14:12 . 2011-08-15 19:37 519 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Tinypic\Uninstall Tinypic.lnk
2012-02-27 14:12 . 2011-08-15 19:37 601 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Tinypic\Anleitung zu Tinypic.lnk
2012-02-27 14:12 . 2011-05-15 21:59 885 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org Writer.lnk
2012-02-27 14:12 . 2011-05-15 22:00 110 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\Desktop.ini
2012-02-27 14:12 . 2011-05-15 21:59 849 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org Calc.lnk
2012-02-27 14:12 . 2011-05-15 21:59 847 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org Draw.lnk
2012-02-27 14:12 . 2011-05-15 21:59 891 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org Impress.lnk
2012-02-27 14:12 . 2011-05-15 21:59 785 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org Math.lnk
2012-02-27 14:12 . 2011-05-15 21:59 873 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org.lnk
2012-02-27 14:12 . 2011-05-15 21:59 811 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\OpenOffice.org 3.3\OpenOffice.org Base.lnk
2012-02-27 14:12 . 2010-12-05 13:40 1593 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Avira\AntiVir Desktop\AntiVir starten.lnk
2012-02-27 14:12 . 2010-12-05 13:40 1570 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Avira\AntiVir Desktop\AntiVir Hilfe.lnk
2012-02-27 14:12 . 2010-12-05 13:40 1586 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Avira\AntiVir Desktop\AntiVir im Internet.lnk
2012-02-27 14:12 . 2010-12-05 13:40 723 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Avira\AntiVir Desktop\Readme anzeigen.lnk
2012-02-27 14:12 . 2009-12-17 22:17 141 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ICQ6.5\icq.com.url
2012-02-27 14:12 . 2009-12-17 22:17 1810 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ICQ6.5\Uninstall.lnk
2012-02-27 14:12 . 2009-10-05 16:12 1634 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LANCOM\LANCOM Advanced VPN Client Popup.lnk
2012-02-27 14:12 . 2009-10-05 16:12 1625 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LANCOM\LANCOM Advanced VPN Client Tracer.lnk
2012-02-27 14:12 . 2009-10-05 16:12 1618 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LANCOM\Uninstall.lnk
2012-02-27 14:12 . 2009-12-17 22:17 1367 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ICQ6.5\ICQ6.5.lnk
2012-02-27 14:12 . 2009-10-05 16:12 1618 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LANCOM\LANCOM Advanced VPN Client.lnk
2012-02-27 14:12 . 2008-11-25 19:41 701 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\go1984 Desktop Client\go1984 Desktop Client PDF (english).lnk
2012-02-27 14:12 . 2008-11-25 19:41 591 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\go1984 Desktop Client\go1984 Desktop Client entfernen.lnk
2012-02-27 14:12 . 2008-11-25 19:41 651 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\go1984 Desktop Client\go1984 Desktop Client PDF (german).lnk
2012-02-27 14:12 . 2008-11-25 19:41 646 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\go1984 Desktop Client\go1984 Desktop Client.lnk
2012-02-27 14:12 . 2008-10-01 12:09 613 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Viewer 4\Run Listening VNC Viewer.lnk
2012-02-27 14:12 . 2008-10-01 12:09 597 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Viewer 4\Run VNC Viewer.lnk
2012-02-27 14:12 . 2008-10-01 12:09 621 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (Service-Mode)\Start VNC Service.lnk
2012-02-27 14:12 . 2008-10-01 12:09 619 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (Service-Mode)\Stop VNC Service.lnk
2012-02-27 14:12 . 2008-10-01 12:09 637 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (Service-Mode)\Configure VNC Service.lnk
2012-02-27 14:12 . 2008-10-01 12:09 631 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (Service-Mode)\Unregister VNC Service.lnk
2012-02-27 14:12 . 2008-10-01 12:09 609 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (User-Mode)\Configure User-Mode Settings.lnk
2012-02-27 14:12 . 2008-10-01 12:09 627 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (Service-Mode)\Register VNC Service.lnk
2012-02-27 14:12 . 2008-10-01 12:09 607 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\RealVNC\VNC Server 4 (User-Mode)\Run VNC Server.lnk
2012-02-27 14:12 . 2008-06-05 18:40 2569 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk
2012-02-27 14:12 . 2008-06-05 18:40 2443 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Spracheinstellungen.lnk
2012-02-27 14:12 . 2008-06-05 18:40 2547 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Tools\Microsoft Office-Diagnose.lnk
2012-02-27 14:12 . 2008-06-05 18:40 2605 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Tools\Digitales Zertifikat für VBA-Projekte.lnk
2012-02-27 14:12 . 2008-06-05 18:40 2587 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk
2012-02-27 14:12 . 2009-11-24 07:34 2557 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office PowerPoint 2007.lnk
2012-02-27 14:12 . 2012-02-21 08:01 2515 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Word 2007.lnk
2012-02-27 14:12 . 2008-06-05 18:40 2583 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office OneNote 2007.lnk
2012-02-27 14:12 . 2012-01-10 23:28 2517 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft Office\Microsoft Office Excel 2007.lnk
2012-02-27 14:12 . 2008-06-05 18:32 47 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Acronis\Acronis*True*Image*Home\Acronis im Internet.url
2012-02-27 14:12 . 2008-06-05 18:32 844 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Acronis\Acronis*True*Image*Home\Acronis*True*Image*Home.lnk
2012-02-27 14:12 . 2008-06-05 18:32 1133 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Acronis\Acronis*True*Image*Home\Rescue Media Builder.lnk
2012-02-27 14:12 . 2008-06-05 18:31 575 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\WinRAR\Anleitung für RAR Konsolenversionen.lnk
2012-02-27 14:12 . 2008-06-05 18:31 594 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\WinRAR\WinRAR Hilfe.lnk
2012-02-27 14:12 . 2008-06-05 18:31 594 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\WinRAR\WinRAR.lnk
2012-02-27 14:12 . 2008-05-14 23:22 685 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Bluetooth\Benutzerhandbuch.lnk
2012-02-27 14:12 . 2008-05-14 23:22 705 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Bluetooth\Drahtlose Dateiübertragung.lnk
2012-02-27 14:12 . 2008-05-14 23:22 690 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Bluetooth\Bluetooth-Einstellungen.lnk
2012-02-27 14:12 . 2008-05-14 23:22 695 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Bluetooth\Bluetooth-Informationsaustausch.lnk
2012-02-27 14:12 . 2008-05-14 23:22 700 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Bluetooth\Remotekamera.lnk
2012-02-27 14:12 . 2008-05-14 23:19 413 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Atheros\Atheros Client Utility.lnk
2012-02-27 14:12 . 2008-08-02 22:19 1851 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Catalyst Control Center\Restart Runtime.lnk
2012-02-27 14:12 . 2008-08-02 22:19 1867 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Catalyst Control Center\CCC - Advanced.lnk
2012-02-27 14:12 . 2008-08-02 22:19 1861 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Catalyst Control Center\CCC - Wizard.lnk
2012-02-27 14:12 . 2008-08-02 22:19 1767 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Catalyst Control Center\Help.lnk
2012-02-27 14:12 . 2008-08-02 22:19 1855 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Catalyst Control Center\CCC.lnk
2012-02-27 14:12 . 2008-05-14 23:04 1888 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Realtek USB 2.0 Card Reader Software\UnInstall Realtek USB 2.0 Card Reader Software.lnk
2012-02-27 14:12 . 2008-05-14 22:36 72 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LightScribe Direct Disc Labeling\Quick Demo.url
2012-02-27 14:12 . 2008-05-14 22:36 53 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LightScribe Direct Disc Labeling\LightScribe Website.url
2012-02-27 14:12 . 2008-05-14 22:36 1704 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LightScribe Direct Disc Labeling\Getting Started.lnk
2012-02-27 14:12 . 2008-05-14 22:36 1765 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\LightScribe Direct Disc Labeling\LightScribe Control Panel.lnk
2012-02-27 14:12 . 2008-05-14 22:36 1690 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Handbücher\Nero BurnRights [Deutsche Hilfe].lnk
2012-02-27 14:12 . 2008-05-14 22:36 1773 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Handbücher\Nero Adobe Premiere Plug-In [Deutsch].lnk
2012-02-27 14:12 . 2008-05-14 22:36 1733 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Handbücher\Nero StartSmart Essentials [Deutsche Hilfe].lnk
2012-02-27 14:12 . 2008-05-14 22:36 1645 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Handbücher\Nero CD-DVD Speed [Deutsche Hilfe].lnk
2012-02-27 14:12 . 2008-05-14 22:36 1781 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Handbücher\Nero CoverDesigner Essentials [Deutsche Hilfe].lnk
2012-02-27 14:12 . 2008-05-14 22:36 1625 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Handbücher\Nero Express Essentials [Deutsche Hilfe].lnk
2012-02-27 14:12 . 2008-05-14 22:36 2218 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Werkzeuge\Nero InfoTool.lnk
2012-02-27 14:12 . 2008-05-14 22:36 2098 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Werkzeuge\Nero BurnRights.lnk
2012-02-27 14:12 . 2008-05-14 22:36 1967 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Werkzeuge\Nero CD-DVD Speed.lnk
2012-02-27 14:12 . 2008-05-14 22:36 2130 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Werkzeuge\Nero DriveSpeed.lnk
2012-02-27 14:12 . 2008-05-14 22:36 2272 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Beschriftung\Nero CoverDesigner Essentials.lnk
2012-02-27 14:12 . 2008-05-14 22:36 1976 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Audio\Nero Express Essentials.lnk
2012-02-27 14:12 . 2008-05-14 22:36 1976 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Daten\Nero Express Essentials.lnk
2012-02-27 14:12 . 2008-05-14 22:36 2009 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Nero ProductSetup.lnk
2012-02-27 14:12 . 2008-05-14 22:36 1815 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Nero Online-Upgrade.lnk
2012-02-27 14:12 . 2008-05-14 22:36 2271 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Nero 7 Essentials\Nero StartSmart Essentials.lnk
2012-02-27 14:12 . 2008-05-14 22:32 513 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS\ASUS Splendid Utility\Splendid Utility.lnk
2012-02-27 14:12 . 2008-05-14 22:32 513 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS\ASUS Splendid Utility\Splendid Compatibility Tool.lnk
2012-02-27 14:12 . 2008-05-14 22:31 513 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS Utility\Winflash\Winflash V2.22.lnk
2012-02-27 14:12 . 2008-05-14 23:15 541 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS Utility\Power4 Gear\Power4 Gear.lnk
2012-02-27 14:12 . 2008-05-14 23:15 527 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS Utility\Power4 Gear\PMode Config.lnk
2012-02-27 14:12 . 2008-05-14 22:30 1471 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS Utility\ASUS Live Update\ASUS Live Update.lnk
2012-02-27 14:12 . 2008-05-14 23:17 635 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS Utility\InstantFun.lnk
2012-02-27 14:12 . 2008-05-14 21:59 789 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Internet-Backgammon.lnk
2012-02-27 14:12 . 2008-05-14 23:14 505 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\ASUS Utility\NB Probe.lnk
2012-02-27 14:12 . 2008-05-14 21:59 789 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Internet-Spades.lnk
2012-02-27 14:12 . 2008-05-14 21:59 789 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Internet-Dame.lnk
2012-02-27 14:12 . 2008-05-14 21:59 789 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Internet-Reversi.lnk
2012-02-27 14:12 . 2008-05-14 21:59 789 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Internet-Hearts.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1395 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Solitär.lnk
2012-02-27 14:12 . 2011-12-26 14:06 1406 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Spider Solitär.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1419 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Minesweeper.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1426 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Freecell.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1424 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Hearts.lnk
2012-02-27 14:12 . 2008-05-14 21:59 790 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\desktop.ini
2012-02-27 14:12 . 2008-05-14 21:59 761 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Spiele\Pinball.lnk
2012-02-27 14:12 . 2008-05-14 22:13 1011 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Microsoft .NET Framework 1.1 Configuration.lnk
2012-02-27 14:12 . 2008-05-14 22:13 1062 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Microsoft .NET Framework 1.1 Wizards.lnk
2012-02-27 14:12 . 2008-05-14 22:01 1496 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Ereignisanzeige.lnk
2012-02-27 14:12 . 2008-05-14 22:01 1495 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Systemmonitor.lnk
2012-02-27 14:12 . 2008-05-14 22:01 1500 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Datenquellen (ODBC).lnk
2012-02-27 14:12 . 2008-05-14 22:01 1494 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Lokale Sicherheitsrichtlinie.lnk
2012-02-27 14:12 . 2008-05-14 22:01 1506 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Dienste.lnk
2012-02-27 14:12 . 2008-05-14 22:01 555 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\desktop.ini
2012-02-27 14:12 . 2008-05-14 22:01 1506 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Computerverwaltung.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1486 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Verwaltung\Komponentendienste.lnk
2012-02-27 14:12 . 2008-05-14 22:06 800 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Microsoft Interaktives Training\Microsoft Interaktives Training.lnk
2012-02-27 14:12 . 2008-05-14 22:06 707 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Microsoft Interaktives Training\Hilfe für Microsoft Interaktives Training.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1424 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Eingabehilfen\Eingabehilfen-Assistent.lnk
2012-02-27 14:12 . 2008-05-14 21:59 93 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Eingabehilfen\desktop.ini
2012-02-27 14:12 . 2008-05-14 21:59 1432 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Unterhaltungsmedien\Lautstärkeregelung.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1432 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Unterhaltungsmedien\Audiorecorder.lnk
2012-02-27 14:12 . 2008-05-14 21:59 149 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Unterhaltungsmedien\desktop.ini
2012-02-27 14:12 . 2008-05-14 22:01 1495 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Übertragen von Dateien und Einstellungen.lnk
2012-02-27 14:12 . 2008-05-14 22:00 1520 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Systemwiederherstellung.lnk
2012-02-27 14:12 . 2008-05-14 22:00 1436 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Datenträgerbereinigung.lnk
2012-02-27 14:12 . 2008-05-14 22:00 1657 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Geplante Tasks.lnk
2012-02-27 14:12 . 2008-05-14 22:01 1436 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Sicherung.lnk
2012-02-27 14:12 . 2008-05-14 22:00 988 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Systeminformationen.lnk
2012-02-27 14:12 . 2010-03-19 09:14 1476 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Defragmentierung.lnk
2012-02-27 14:12 . 2008-05-14 22:01 789 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\desktop.ini
2012-02-27 14:12 . 2008-05-14 21:59 1425 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Systemprogramme\Zeichentabelle.lnk
2012-02-27 14:12 . 2008-05-14 22:00 1544 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Kommunikation\Netzwerkinstallations-Assistent.lnk
2012-02-27 14:12 . 2011-12-26 12:00 1560 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Kommunikation\Drahtlosnetzwerkinstallation.lnk
2012-02-27 14:12 . 2008-05-14 21:59 670 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Kommunikation\HyperTerminal.lnk
2012-02-27 14:12 . 2008-05-14 21:58 1550 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Kommunikation\Assistent für neue Verbindungen.lnk
2012-02-27 14:12 . 2011-12-26 12:00 535 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Kommunikation\desktop.ini
2012-02-27 14:12 . 2008-05-14 21:58 1661 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Kommunikation\Netzwerkverbindungen.lnk
2012-02-27 14:12 . 2011-12-26 11:58 1585 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Remotedesktopverbindung.lnk
2012-02-27 14:12 . 2011-09-04 20:20 614 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Scanner and Camera Wizard.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1419 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Paint.lnk
2012-02-27 14:12 . 2011-09-04 20:20 252 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\desktop.ini
2012-02-27 14:12 . 2011-12-29 12:43 1402 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\Rechner.lnk
2012-02-27 14:12 . 2008-05-14 21:59 749 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Zubehör\WordPad.lnk
2012-02-27 14:12 . 2011-05-13 13:56 904 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Autostart\Adobe Gamma Loader.lnk
2012-02-27 14:12 . 2012-02-10 18:36 1419 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Autostart\OnlineControl.lnk
2012-02-27 14:12 . 2008-08-02 22:19 687 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Autostart\Bluetooth Manager.lnk
2012-02-27 14:12 . 2008-05-14 22:01 84 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Autostart\desktop.ini
2012-02-27 14:12 . 2008-05-14 22:20 1630 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Autostart\Adobe Reader Speed Launch.lnk
2012-02-27 14:12 . 2011-10-18 22:30 1830 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Apple Software Update.lnk
2012-02-27 14:12 . 2011-09-23 06:51 1542 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Mozilla Thunderbird.lnk
2012-02-27 14:12 . 2011-10-01 22:58 1808 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Microsoft ActiveSync.lnk
2012-02-27 14:12 . 2011-07-28 15:45 566 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Anti-Twin.lnk
2012-02-27 14:12 . 2011-05-13 13:56 690 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Adobe Photoshop 7.0.lnk
2012-02-27 14:12 . 2011-05-13 13:56 695 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Adobe ImageReady 7.0.lnk
2012-02-27 14:12 . 2011-12-26 10:11 606 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Mozilla Firefox.lnk
2012-02-27 14:12 . 2008-05-14 21:59 621 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Windows Messenger.lnk
2012-02-27 14:12 . 2008-05-14 22:00 662 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Windows Movie Maker.lnk
2012-02-27 14:12 . 2012-01-11 18:05 2295 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\Adobe Reader 8.lnk
2012-02-27 14:12 . 2008-05-14 21:59 1908 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\MSN.lnk
2012-02-27 14:12 . 2008-05-14 22:00 150 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programme\desktop.ini
2012-02-27 14:12 . 2008-05-14 22:01 398 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Windows-Katalog.lnk
2012-02-27 14:12 . 2011-12-26 11:59 1467 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Programmzugriff und -standards.lnk
2012-02-27 14:12 . 2008-05-14 22:01 1411 ----a-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\Windows Update.lnk
2012-02-27 14:12 . 2011-12-26 11:59 273 --sha-w- c:\qoobox\quarantine\C\DOKUME~1\ADMINI~1\LOKALE~1\Temp\smtmp\1\desktop.ini
2012-02-27 14:05 . 2012-03-01 00:00 497 ----a-w- c:\qoobox\quarantine\catchme.log
2012-02-26 17:01 . 2012-02-26 17:01 208 ----a-w- c:\qoobox\quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\~r86bxgw7ITQOSSr.vir
2012-02-26 17:01 . 2012-02-26 17:01 304 ----a-w- c:\qoobox\quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\~r86bxgw7ITQOSS.vir
2012-02-26 17:01 . 2012-02-26 17:01 749 ----a-w- c:\qoobox\quarantine\C\Dokumente und Einstellungen\Administrator\Desktop\System Check.lnk.vir
2012-02-26 17:01 . 2012-02-26 17:03 456 ----a-w- c:\qoobox\quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\r86bxgw7ITQOSS.vir
2012-02-26 17:01 . 2012-02-26 17:01 355328 ----a-w- c:\qoobox\quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\r86bxgw7ITQOSS.exe.vir
2012-02-26 12:53 . 2012-02-26 12:49 450048 ----a-w- c:\qoobox\quarantine\C\Dokumente und Einstellungen\All Users\Anwendungsdaten\qmbMTuLOUQqEwqQ.exe.vir
2011-09-17 12:41 . 2011-09-17 12:41 286104 ----a-w- c:\qoobox\quarantine\C\Programme\SoftonicDownloader_fuer_photo-flash-maker.exe.vir
2008-05-14 22:05 . 1998-11-17 12:44 328704 ----a-w- c:\qoobox\quarantine\C\WINDOWS\IsUn0407.exe.vir
2008-05-14 22:00 . 2012-02-27 14:15 1226069 ----a-w- c:\qoobox\quarantine\C\WINDOWS\WindowsUpdate.log.vir
2004-08-03 21:59 . 2008-04-13 23:10 96512 ----a-w- c:\qoobox\quarantine\C\WINDOWS\system32\drivers\atapi.sys.vir
.
.
((((((((((((((((((((((((((((( SnapShot@2012-02-27_14.17.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-02-29 17:17 . 2012-02-29 17:17 16384 c:\windows\Temp\Perflib_Perfdata_588.dat
- 2008-05-14 22:04 . 2012-02-27 08:39 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2012-02-29 22:39 . 2012-02-29 22:39 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2012-02-27 23:38 . 2012-02-27 23:38 250016 c:\windows\system32\Macromed\Flash\FlashUtil11f_ActiveX.exe
+ 2012-02-27 23:38 . 2012-02-27 23:38 335520 c:\windows\system32\Macromed\Flash\FlashUtil11f_ActiveX.dll
+ 2012-02-27 23:14 . 2012-02-27 23:14 203776 c:\windows\Installer\ee8ecf.msi
+ 2012-02-27 23:14 . 2012-02-27 23:14 901120 c:\windows\Installer\ee8ebf.msi
+ 2012-02-27 23:37 . 2012-02-27 23:37 2310656 c:\windows\Installer\66933.msi
+ 2012-01-03 17:44 . 2012-01-03 17:44 15929344 c:\windows\Installer\66934.msp
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"LightScribe Control Panel"="c:\programme\Gemeinsame Dateien\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"swg"="c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-09 68856]
"H/PC Connection Agent"="c:\programme\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000]
"Facebook Update"="c:\dokumente und einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe" [2012-01-29 137536]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"="c:\programme\ATKOSD2\ATKOSD2.exe" [2007-10-17 7737344]
"ATKHOTKEY"="c:\programme\ATK Hotkey\Hcontrol.exe" [2007-07-12 225280]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-30 16269312]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ATKMEDIA"="c:\programme\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 61440]
"ASUS Live Update"="c:\programme\ASUS\ASUS Live Update\ALU.exe" [2007-11-30 51768]
"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2006-05-25 786521]
"ACMON"="c:\programme\ASUS\Splendid\ACMON.exe" [2007-07-10 851968]
"ABLKSR"="c:\windows\ABLKSR\ABLKSR.exe" [2006-01-02 61440]
"RemoteControl"="c:\programme\ASUSTek\ASUSDVD\PDVDServ.exe" [2007-01-08 68640]
"LanguageShortcut"="c:\programme\ASUSTek\ASUSDVD\Language\Language.exe" [2007-01-08 52256]
"NeroFilterCheck"="c:\programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SecurDisc"="c:\programme\Nero\Nero 7\InCD\NBHGui.exe" [2007-06-01 1629744]
"InCD"="c:\programme\Nero\Nero 7\InCD\InCD.exe" [2007-06-01 1057328]
"SMSERIAL"="c:\programme\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"Power_Gear"="c:\programme\ASUS\Power4 Gear\BatteryLife.exe" [2006-07-26 90112]
"Wireless Console 2"="c:\programme\Wireless Console 2\wcourier.exe" [2007-07-05 1040384]
"ASUSTPE"="c:\windows\system32\ASUSTPE.exe" [2007-01-16 106496]
"ASUS Camera ScreenSaver"="c:\windows\ASScrProlog.exe" [2008-05-14 37232]
"ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2008-05-14 33136]
"TrueImageMonitor.exe"="c:\programme\Acronis\TrueImageHome\TrueImageMonitor.exe" [2006-09-22 1176768]
"AcronisTimounterMonitor"="c:\programme\Acronis\TrueImageHome\TimounterMonitor.exe" [2006-09-22 1949912]
"Acronis Scheduler2 Service"="c:\programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe" [2006-09-22 82832]
"NcpBudgetGui"="c:\programme\LANCOM\Advanced VPN Client\NcpBudgetGui.exe" [2009-01-19 2625536]
"NcpPopup"="c:\programme\LANCOM\Advanced VPN Client\ncppopup.exe" [2008-09-25 618496]
"NcpRsuGui"="c:\programme\LANCOM\Advanced VPN Client\rwsrsu.exe" [2008-12-02 850432]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]
"OpwareSE2"="c:\programme\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2011-07-05 421888]
"LexwareInfoService"="c:\programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe" [2010-09-15 339312]
"Malwarebytes' Anti-Malware"="c:\programme\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\windows\system32\config\systemprofile\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
.
c:\dokumente und einstellungen\Administrator\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\programme\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
OpenOffice.org 3.3.lnk - c:\programme\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\dokumente und einstellungen\CS\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
.
c:\dokumente und einstellungen\Administrator\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\programme\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
OpenOffice.org 3.3.lnk - c:\programme\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\windows\system32\config\systemprofile\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
.
c:\windows\system32\config\systemprofile\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
.
c:\dokumente und einstellungen\Default User\Startmenü\Programme\Autostart\
CCC.lnk - c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\persistentroutes]
"84.178.46.13,255.255.255.255,192.168.2.1,1"=""
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 relog_ap nwprovau
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programme\\Messenger\\MSMSGS.EXE"=
"c:\\Programme\\go1984 Desktop Client\\go1984DesktopClient.exe"=
"c:\\Programme\\LANCOM\\Advanced VPN Client\\NCPMON.exe"=
"c:\\Programme\\ICQ6.5\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Programme\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\programme\Microsoft ActiveSync\rapimgr.exe"= c:\programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\programme\Microsoft ActiveSync\wcescomm.exe"= c:\programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\programme\Microsoft ActiveSync\WCESMgr.exe"= c:\programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programme\\StarMoney 8.0 S-Edition\\ouservice\\StarMoneyOnlineUpdate.exe"=
"c:\\Programme\\StarMoney 8.0 S-Edition\\app\\StarMoney.exe"=
"c:\\Dokumente und Einstellungen\\Administrator\\Lokale Einstellungen\\Anwendungsdaten\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [05.12.2010 14:40 136360]
R2 ICQ Service;ICQ Service;c:\programme\ICQ6Toolbar\ICQ Service.exe [17.12.2009 23:09 222968]
R2 MBAMService;MBAMService;c:\programme\Malwarebytes' Anti-Malware\mbamservice.exe [26.02.2012 22:17 652360]
R2 ncpclcfg;ncpclcfg;c:\programme\LANCOM\Advanced VPN Client\ncpclcfg.exe [05.10.2009 17:12 86016]
R2 ncprwsnt;ncprwsnt;c:\programme\LANCOM\Advanced VPN Client\NCPRWSNT.EXE [05.10.2009 17:12 1078792]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [26.02.2012 22:17 20464]
R3 NcpFiltMP;NcpFiltMP;c:\windows\system32\drivers\ncpvaxp.sys [05.10.2009 17:12 79528]
S2 gupdate;Google Update Service (gupdate);c:\programme\Google\Update\GoogleUpdate.exe [01.04.2010 19:03 135664]
S2 NcpSec;NcpSec;c:\programme\LANCOM\Advanced VPN Client\NCPSEC.EXE [05.10.2009 17:12 32768]
S2 rwsrsu;RwsRsu;c:\programme\LANCOM\Advanced VPN Client\rwsrsu.exe [05.10.2009 17:12 850432]
S2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [03.01.2012 16:03 688648]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [01.04.2010 19:03 135664]
S3 NcpFilt;Ncp Filter Service;c:\windows\system32\drivers\ncpvaxp.sys [05.10.2009 17:12 79528]
S3 ncpvaxp;NCP Secure Client Virtual Adapter Driver;c:\windows\system32\drivers\ncpvaxp.sys [05.10.2009 17:12 79528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 11:47 451872 ----a-w- c:\programme\Gemeinsame Dateien\LightScribe\LSRunOnce.exe
.
Inhalt des "geplante Tasks" Ordners
.
2012-02-29 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-05-05 21:18]
.
2012-02-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-04-01 18:03]
.
2012-02-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-04-01 18:03]
.
2012-02-28 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1786809193-3580902552-3016979917-500Core.job
- c:\dokumente und einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe [2012-01-29 21:55]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.asus.com/
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Easy-WebPrint - Drucken - c:\programme\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint - Schnelldruck - c:\programme\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint - Vorschau - c:\programme\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint - Zu Druckliste hinzufügen - c:\programme\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://172.16.200.100/activex/AMC.cab
FF - ProfilePath - c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\py0mfi38.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SunJavaUpdateSched - c:\programme\Java\jre6\bin\jusched.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-03-01 01:09
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(872)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'lsass.exe'(932)
c:\windows\system32\relog_ap.dll
.
Zeit der Fertigstellung: 2012-03-01 01:10:49
ComboFix-quarantined-files.txt 2012-03-01 00:10
ComboFix2.txt 2012-02-27 18:12
ComboFix3.txt 2012-02-27 14:26
.
Vor Suchlauf: 14 Verzeichnis(se), 56.631.656.448 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 56.672.616.448 Bytes frei
.
- - End Of File - - 8723346C137C3491641284B0BE3CECD3
--- --- ---