Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
BKA Virus (?)

BKA Virus (?)


Log-Analyse und Auswertung: BKA Virus (?)

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 15.03.2012, 20:10   #1
arminb
 
BKA Virus (?) - Standard

BKA Virus (?)


Hallo,

wenn ich Win7 hochfahren und mich in ein Benutzerkonto anmelde, kommt nur ein weißer Bildschirm auf dem steht "waiting for connection to be established".

Der OTL-Log:
Code:
ATTFilter
OTL logfile created on: 3/15/2012 11:02:22 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium  (Version = 6.1.7600) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files (x86)
Drive C: | 101.97 Mb Total Space | 77.67 Mb Free Space | 76.16% Space Free | Partition Type: NTFS
Drive D: | 582.07 Gb Total Space | 419.44 Gb Free Space | 72.06% Space Free | Partition Type: NTFS
Drive E: | 949.97 Mb Total Space | 948.68 Mb Free Space | 99.86% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2010/03/28 20:41:36 | 000,202,752 | ---- | M] (AMD) [Auto] -- D:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/02/05 14:23:06 | 000,865,824 | ---- | M] (Acer Incorporated) [Auto] -- D:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012/02/15 08:30:18 | 000,158,856 | R--- | M] (Skype Technologies) [Auto] -- D:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto] -- D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/07/07 11:53:53 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- D:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/04/27 12:42:25 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- D:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/03/12 09:32:19 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand] -- D:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011/02/28 13:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand] -- D:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 05:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010/10/26 11:05:24 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand] -- D:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2010/09/23 17:44:53 | 000,325,200 | ---- | M] (Dritek System Inc.) [Auto] -- D:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010/09/21 04:59:52 | 001,957,672 | ---- | M] (TeamViewer GmbH) [Auto] -- D:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2010/07/08 08:18:29 | 000,333,264 | ---- | M] () [Auto] -- D:\Program Files (x86)\3DataManager\WTGService.exe -- (WTGService)
SRV - [2010/03/18 08:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- D:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2006/06/05 07:59:18 | 000,174,080 | ---- | M] (Nokia.) [On_Demand] -- D:\Program Files (x86)\Common Files\PCSuite\Services\ServiceLayer.exe -- (ServiceLayer)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011/08/05 13:06:01 | 000,121,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV:64bit: - [2011/08/05 13:06:01 | 000,121,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV:64bit: - [2011/08/05 13:06:01 | 000,121,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV:64bit: - [2011/08/05 13:06:01 | 000,012,800 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand] -- D:\Windows\System32\drivers\massfilter.sys -- (massfilter)
DRV:64bit: - [2011/07/07 11:53:54 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011/07/07 11:53:54 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto] -- D:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011/03/12 07:28:17 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- D:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010/04/06 22:04:22 | 002,216,960 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\athrx.sys -- (athr)
DRV:64bit: - [2010/03/28 20:51:38 | 006,405,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\atipmdag.sys -- (amdkmdag)
DRV:64bit: - [2010/03/28 19:46:28 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010/03/20 14:59:08 | 000,321,064 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:64bit: - [2010/02/08 09:57:22 | 000,239,136 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2009/12/21 20:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand] -- D:\Windows\System32\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009/12/07 14:53:26 | 000,117,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:64bit: - [2009/10/26 10:54:22 | 000,032,768 | ---- | M] (HTC, Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009/10/12 10:23:22 | 000,114,304 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV:64bit: - [2009/08/23 05:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot] -- D:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009/07/13 20:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- D:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\system32\DRIVERS\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\system32\DRIVERS\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2006/05/29 02:27:12 | 000,162,304 | ---- | M] (Nokia) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nmwcdx64.sys -- (Nokia USB Phone Parent)
DRV:64bit: - [2006/05/29 02:27:12 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nmwcdcjx64.sys -- (Nokia USB Port)
DRV:64bit: - [2006/05/29 02:27:12 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nmwcdcmx64.sys -- (Nokia USB Modem)
DRV:64bit: - [2006/05/29 02:27:12 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nmwcdcx64.sys -- (Nokia USB Generic)
DRV - [2010/09/17 13:05:46 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- D:\Windows\SysWOW64\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009/09/10 09:31:56 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- D:\Windows\SysWOW64\drivers\ewusbmdm.sys -- (hwdatacard)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\admir-.-_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\admir-.-_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\admir-.-_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Gast_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\Gast_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\Gast_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\johnnyb_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\johnnyb_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?AF=108988&babsrc=HP_ss&mntrId=40e0887c00000000000078e400837e8e
IE - HKU\johnnyb_ON_D\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Reg Error: Key error. File not found
IE - HKU\johnnyb_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\johnnyb_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\Mirela_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\Mirela_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_5551g&r=27360910y415l0494z1i5t4622l040
IE - HKU\Mirela_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550
FF - prefs.js..extensions.enabledItems: {33e0daa6-3af3-d8b5-6752-10e949c61516}:1.1
FF - prefs.js..keyword.URL: "hxxp://search.babylon.com/?AF=108988&babsrc=adbartrp&mntrId=40e0887c00000000000078e400837e8e&q="
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: D:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.4: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: D:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,version=1.0: D:\Users\johnnyb\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: D:\Users\johnnyb\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Users\johnnyb\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Users\johnnyb\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 10.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 10.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.14\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.14\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.20\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.20\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.21\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.21\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.22\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.22\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.23\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.23\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.26\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 10:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 3.6.26\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/09 19:55:41 | 000,000,000 | ---D | M]
 
[2011/02/02 16:11:35 | 000,000,000 | ---D | M] (No name found) -- D:\Users\johnnyb\AppData\Roaming\Mozilla\Extensions
[2012/03/06 15:57:29 | 000,000,000 | ---D | M] (No name found) -- D:\Users\johnnyb\AppData\Roaming\Mozilla\Firefox\Profiles\nfxknt8e.default\extensions
[2011/12/21 12:39:21 | 000,000,000 | ---D | M] (Complitly - Speed up your search with your personal search suggestions tool) -- D:\Users\johnnyb\AppData\Roaming\Mozilla\Firefox\Profiles\nfxknt8e.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
[2012/03/06 15:57:29 | 000,000,000 | ---D | M] (Softonic-Eng7 Community Toolbar) -- D:\Users\johnnyb\AppData\Roaming\Mozilla\Firefox\Profiles\nfxknt8e.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
[2011/03/13 10:12:23 | 000,000,000 | ---D | M] (Conduit Engine) -- D:\Users\johnnyb\AppData\Roaming\Mozilla\Firefox\Profiles\nfxknt8e.default\extensions\engine@conduit.com
[2012/02/08 18:20:29 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files (x86)\Mozilla Firefox\extensions
[2012/03/05 06:55:13 | 000,000,000 | ---D | M] (Skype Click to Call) -- D:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
File not found (No name found) -- 
[2012/02/21 10:00:32 | 000,134,104 | ---- | M] (Mozilla Foundation) -- D:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/11/12 09:10:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012/02/08 18:20:24 | 000,001,392 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011/12/21 12:39:28 | 000,002,310 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012/02/08 18:20:24 | 000,002,252 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/02/08 18:20:24 | 000,001,153 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011/03/28 12:46:31 | 000,002,047 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml
[2012/02/08 18:20:24 | 000,006,805 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/02/08 18:20:24 | 000,001,178 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/02/08 18:20:24 | 000,001,105 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
O2:64bit: - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - D:\Users\johnnyb\AppData\Roaming\Complitly\64\Complitly64.dll (SimplyGen)
O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - D:\Users\johnnyb\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - D:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - D:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\Gast_ON_D\..\Toolbar\WebBrowser: (no name) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - No CLSID value found.
O3 - HKU\johnnyb_ON_D\..\Toolbar\WebBrowser: (no name) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - No CLSID value found.
O3 - HKU\johnnyb_ON_D\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Acer ePower Management] D:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [mwlDaemon]  File not found
O4:64bit: - HKLM..\Run: [PLFSetI] D:\Windows\PLFSetI.exe ()
O4 - HKLM..\Run: [avgnt] D:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DataCardMonitor] D:\Program Files (x86)\tele.ring Verbindungsmanager\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [DivXUpdate] D:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [K3aRyluP6SiCkoR] D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe (Microsoft Corp., Veritas Software)
O4 - HKLM..\Run: [LManager] D:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [PCSuiteTrayApplication] D:\Program Files (x86)\Nokia\Nokia PC Suite 6\LaunchApplication.exe (Nokia)
O4 - HKLM..\Run: [PDFPrint] D:\Program Files (x86)\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [StartCCC] D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\admir-.-_ON_D..\Run: [HW_OPENEYE_OUC_tele.ring Verbindungsmanager] D:\Program Files (x86)\tele.ring Verbindungsmanager\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKU\Gast_ON_D..\Run: [HW_OPENEYE_OUC_] D:\Program Files (x86)\tele.ring Verbindungsmanager\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKU\LocalService_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\johnnyb_ON_D..\Run: [DAEMON Tools Lite] D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\johnnyb_ON_D..\Run: [Facebook Update] D:\Users\johnnyb\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\johnnyb_ON_D..\Run: [HW_OPENEYE_OUC_] D:\Program Files (x86)\tele.ring Verbindungsmanager\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKU\johnnyb_ON_D..\Run: [K3aRyluP6SiCkoR] D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe (Microsoft Corp., Veritas Software)
O4 - HKU\johnnyb_ON_D..\Run: [Octoshape Streaming Services] D:\Users\johnnyb\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Octoshape ApS)
O4 - HKU\johnnyb_ON_D..\Run: [Sony Ericsson PC Companion] D:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
O4 - HKU\NetworkService_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4:64bit: - HKLM..\RunOnce: [*WerKernelReporting] D:\Windows\System32\WerFault.exe (Microsoft Corporation)
O4 - HKU\Gast_ON_D..\RunOnce: [FlashPlayerUpdate]  File not found
O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin]  File not found
O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin]  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\johnnyb_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\johnnyb_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\johnnyb_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\johnnyb_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - D:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - D:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13:64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (C:\Users\johnnyb\AppData\Roaming\flint4ytw.exe) - D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe (Microsoft Corp., Veritas Software)
O20 - HKLM Winlogon: UserInit - (C:\Users\johnnyb\AppData\Roaming\flint4ytw.exe) - D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe (Microsoft Corp., Veritas Software)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKU\johnnyb_ON_D Winlogon: Shell - (C:\Users\johnnyb\AppData\Roaming\flint4ytw.exe) - D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe (Microsoft Corp., Veritas Software)
O20 - HKU\johnnyb_ON_D Winlogon: UserInit - (C:\Users\johnnyb\AppData\Roaming\flint4ytw.exe) - D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe (Microsoft Corp., Veritas Software)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{02ea940d-c123-11df-9b54-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{02ea940d-c123-11df-9b54-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{0b8731a0-d918-11df-ad4f-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{0b8731a0-d918-11df-ad4f-705ab6f617eb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{161d5780-0ab7-11e1-a8ef-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{161d5780-0ab7-11e1-a8ef-78e400837e8e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{161d5783-0ab7-11e1-a8ef-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{161d5783-0ab7-11e1-a8ef-78e400837e8e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{161d57a6-0ab7-11e1-a8ef-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{161d57a6-0ab7-11e1-a8ef-78e400837e8e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{16ee6197-d9d9-11df-9812-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{16ee6197-d9d9-11df-9812-705ab6f617eb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{16ee619e-d9d9-11df-9812-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{16ee619e-d9d9-11df-9812-705ab6f617eb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{1b0ca50a-94f3-11e0-87a1-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{1b0ca50a-94f3-11e0-87a1-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{20337582-c27d-11df-b571-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{20337582-c27d-11df-b571-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{3974ed00-c1bd-11df-8a35-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{3974ed00-c1bd-11df-8a35-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{4b097bd7-c119-11df-8d57-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{4b097bd7-c119-11df-8d57-78e400837e8e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{721c9648-c25c-11df-b78a-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{721c9648-c25c-11df-b78a-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{9ceee390-a30b-11e0-82ce-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{9ceee390-a30b-11e0-82ce-78e400837e8e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{9ceee396-a30b-11e0-82ce-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{9ceee396-a30b-11e0-82ce-78e400837e8e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{b6b192e9-24d8-11e1-a0c3-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{b6b192e9-24d8-11e1-a0c3-705ab6f617eb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{b6b19307-24d8-11e1-a0c3-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{b6b19307-24d8-11e1-a0c3-705ab6f617eb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{b6b1930a-24d8-11e1-a0c3-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{b6b1930a-24d8-11e1-a0c3-705ab6f617eb}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{baee6e7e-12a1-11e1-b115-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{baee6e7e-12a1-11e1-b115-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{c9b9917d-c1c5-11df-8d24-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{c9b9917d-c1c5-11df-8d24-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{cd989abb-c121-11df-9a89-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{cd989abb-c121-11df-9a89-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{cf48b3a6-148a-11e1-afc2-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{cf48b3a6-148a-11e1-afc2-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{dcbff681-c118-11df-917f-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{dcbff681-c118-11df-917f-78e400837e8e}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{f258c3ea-bf82-11e0-8134-705ab6f617eb}\Shell - "" = AutoRun
O33 - MountPoints2\{f258c3ea-bf82-11e0-8134-705ab6f617eb}\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{f9d186cc-da08-11df-9421-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{f9d186cc-da08-11df-9421-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f9d186e0-da08-11df-9421-78e400837e8e}\Shell - "" = AutoRun
O33 - MountPoints2\{f9d186e0-da08-11df-9421-78e400837e8e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\.\Autorun.exe AUTORUN=1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/03/13 15:54:43 | 000,000,000 | ---D | C] -- D:\Users\admir-.-\AppData\Roaming\Avira
[2012/03/13 03:49:45 | 000,307,200 | ---- | C] (Microsoft Corp., Veritas Software) -- D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe
[2012/03/05 06:54:55 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012/03/05 06:54:54 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\Common Files\Skype
[2012/02/23 15:36:39 | 000,000,000 | ---D | C] -- D:\Users\johnnyb\Desktop\Google-Dateien
[2012/02/23 12:53:49 | 000,161,792 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msls31.dll
[2012/02/23 12:53:49 | 000,074,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012/02/23 12:53:48 | 001,798,656 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript9.dll
[2012/02/23 12:53:48 | 000,716,800 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript.dll
[2012/02/23 12:53:48 | 000,176,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieui.dll
[2012/02/23 12:53:48 | 000,162,304 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msrating.dll
[2012/02/23 12:53:48 | 000,130,560 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieakeng.dll
[2012/02/23 12:53:48 | 000,118,784 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iepeers.dll
[2012/02/23 12:53:48 | 000,110,592 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\IEAdvpack.dll
[2012/02/23 12:53:48 | 000,086,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iesysprep.dll
[2012/02/23 12:53:48 | 000,076,800 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\SetIEInstalledDate.exe
[2012/02/23 12:53:48 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmler.dll
[2012/02/23 12:53:48 | 000,010,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeedssync.exe
[2012/02/23 12:53:47 | 003,695,416 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dat
[2012/02/23 12:53:47 | 002,308,096 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
[2012/02/23 12:53:47 | 001,427,456 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inetcpl.cpl
[2012/02/23 12:53:47 | 000,818,688 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
[2012/02/23 12:53:47 | 000,580,608 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeeds.dll
[2012/02/23 12:53:47 | 000,448,512 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\html.iec
[2012/02/23 12:53:47 | 000,434,176 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dll
[2012/02/23 12:53:47 | 000,367,104 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\html.iec
[2012/02/23 12:53:47 | 000,353,792 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtmsft.dll
[2012/02/23 12:53:47 | 000,282,112 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxtrans.dll
[2012/02/23 12:53:47 | 000,267,776 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieaksie.dll
[2012/02/23 12:53:47 | 000,248,320 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
[2012/02/23 12:53:47 | 000,231,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\url.dll
[2012/02/23 12:53:47 | 000,227,840 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieaksie.dll
[2012/02/23 12:53:47 | 000,223,232 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtrans.dll
[2012/02/23 12:53:47 | 000,222,208 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msls31.dll
[2012/02/23 12:53:47 | 000,197,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msrating.dll
[2012/02/23 12:53:47 | 000,173,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
[2012/02/23 12:53:47 | 000,163,840 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieakui.dll
[2012/02/23 12:53:47 | 000,163,840 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieakui.dll
[2012/02/23 12:53:47 | 000,160,256 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieakeng.dll
[2012/02/23 12:53:47 | 000,152,064 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\wextract.exe
[2012/02/23 12:53:47 | 000,150,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iexpress.exe
[2012/02/23 12:53:47 | 000,149,504 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\occache.dll
[2012/02/23 12:53:47 | 000,145,920 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iepeers.dll
[2012/02/23 12:53:47 | 000,142,848 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieUnatt.exe
[2012/02/23 12:53:47 | 000,135,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\IEAdvpack.dll
[2012/02/23 12:53:47 | 000,123,392 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\occache.dll
[2012/02/23 12:53:47 | 000,114,176 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\admparse.dll
[2012/02/23 12:53:47 | 000,111,616 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iesysprep.dll
[2012/02/23 12:53:47 | 000,101,888 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\admparse.dll
[2012/02/23 12:53:47 | 000,091,648 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\SetIEInstalledDate.exe
[2012/02/23 12:53:47 | 000,089,088 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\RegisterIEPKEYs.exe
[2012/02/23 12:53:47 | 000,078,848 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inseng.dll
[2012/02/23 12:53:47 | 000,076,800 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\tdc.ocx
[2012/02/23 12:53:47 | 000,074,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iesetup.dll
[2012/02/23 12:53:47 | 000,074,240 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ie4uinit.exe
[2012/02/23 12:53:47 | 000,072,704 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmled.dll
[2012/02/23 12:53:47 | 000,066,048 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\icardie.dll
[2012/02/23 12:53:47 | 000,065,024 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\pngfilt.dll
[2012/02/23 12:53:47 | 000,063,488 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\tdc.ocx
[2012/02/23 12:53:47 | 000,054,272 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\pngfilt.dll
[2012/02/23 12:53:47 | 000,049,664 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\imgutil.dll
[2012/02/23 12:53:47 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmler.dll
[2012/02/23 12:53:47 | 000,035,840 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\imgutil.dll
[2012/02/23 12:53:47 | 000,031,744 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iernonce.dll
[2012/02/23 12:53:47 | 000,023,552 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\licmgr10.dll
[2012/02/23 12:53:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshta.exe
[2012/02/23 12:53:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeedssync.exe
[2012/02/23 12:53:46 | 003,695,416 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dat
[2012/02/23 12:53:46 | 001,493,504 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
[2012/02/23 12:53:46 | 000,697,344 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
[2012/02/23 12:53:46 | 000,603,648 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
[2012/02/23 12:53:46 | 000,534,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dll
[2012/02/23 12:53:46 | 000,452,608 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxtmsft.dll
[2012/02/23 12:53:46 | 000,237,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\url.dll
[2012/02/23 12:53:46 | 000,165,888 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iexpress.exe
[2012/02/23 12:53:46 | 000,160,256 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wextract.exe
[2012/02/23 12:53:46 | 000,103,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inseng.dll
[2012/02/23 12:53:46 | 000,096,256 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmled.dll
[2012/02/23 12:53:46 | 000,089,088 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ie4uinit.exe
[2012/02/23 12:53:46 | 000,085,504 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iesetup.dll
[2012/02/23 12:53:46 | 000,082,432 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\icardie.dll
[2012/02/23 12:53:46 | 000,039,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iernonce.dll
[2012/02/23 12:53:46 | 000,030,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\licmgr10.dll
[2012/02/16 06:23:19 | 000,509,952 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ntshrui.dll
[2012/02/16 06:23:08 | 000,515,584 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\timedate.cpl
[2012/02/16 06:23:08 | 000,478,208 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\timedate.cpl
[2012/02/16 06:23:05 | 000,634,368 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msvcrt.dll
[2010/06/01 06:29:51 | 000,049,464 | ---- | C] ( ) -- D:\Windows\AutosetFrequency.exe
[1 D:\Windows\SysWow64\*.tmp files -> D:\Windows\SysWow64\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/03/15 14:15:46 | 000,001,106 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/15 14:00:23 | 000,009,920 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/15 14:00:23 | 000,009,920 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/15 13:52:31 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat
[2012/03/15 13:52:28 | 3217,211,392 | -HS- | M] () -- D:\hiberfil.sys
[2012/03/13 03:55:57 | 000,001,437 | ---- | M] () -- D:\Users\admir-.-\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/03/13 03:51:09 | 000,001,110 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/13 03:49:43 | 000,307,200 | ---- | M] (Microsoft Corp., Veritas Software) -- D:\Users\johnnyb\AppData\Roaming\flint4ytw.exe
[2012/03/13 01:49:18 | 000,000,936 | ---- | M] () -- D:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2055930287-1511982587-453485174-1000UA.job
[2012/03/12 20:20:00 | 000,000,916 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2055930287-1511982587-453485174-1000UA.job
[2012/03/12 19:21:29 | 000,002,413 | ---- | M] () -- D:\Users\johnnyb\Desktop\Google Chrome.lnk
[2012/03/12 16:49:00 | 000,000,914 | ---- | M] () -- D:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2055930287-1511982587-453485174-1000Core.job
[2012/03/11 19:40:31 | 011,143,566 | ---- | M] () -- D:\Windows\System32\perfh007.dat
[2012/03/11 19:40:31 | 003,802,098 | ---- | M] () -- D:\Windows\System32\perfh009.dat
[2012/03/11 19:40:31 | 003,509,814 | ---- | M] () -- D:\Windows\System32\perfc007.dat
[2012/03/11 19:40:31 | 003,156,734 | ---- | M] () -- D:\Windows\System32\perfc009.dat
[2012/03/10 07:10:56 | 000,035,184 | ---- | M] () -- D:\Users\johnnyb\Desktop\tarik.jpg
[2012/03/09 14:09:48 | 000,064,548 | ---- | M] () -- D:\Users\johnnyb\Desktop\11-cheese-nachos.jpg
[2012/03/08 19:34:13 | 000,129,542 | ---- | M] () -- D:\Users\johnnyb\Desktop\milionerry4.gif
[2012/03/08 19:34:08 | 000,006,129 | ---- | M] () -- D:\Users\johnnyb\Desktop\images.jpg
[2012/03/08 19:31:51 | 000,010,536 | ---- | M] () -- D:\Users\johnnyb\Desktop\804.jpg
[2012/03/08 19:26:14 | 000,046,476 | ---- | M] () -- D:\Users\johnnyb\Desktop\amöööla.jpg
[2012/03/08 19:24:43 | 000,038,232 | ---- | M] () -- D:\Users\johnnyb\Desktop\black-bear.jpg
[2012/03/08 19:18:47 | 000,018,481 | ---- | M] () -- D:\Users\johnnyb\Desktop\super_funny_cute images_b0fcfb9caa9eb51ce22c5dc2e9eae1ad.jpg
[2012/03/08 19:13:39 | 000,019,322 | ---- | M] () -- D:\Users\johnnyb\Desktop\pooh_bear_and_obama-12688.jpg
[2012/03/08 19:11:26 | 000,097,958 | ---- | M] () -- D:\Users\johnnyb\Desktop\Funny_Polar_Bear.jpg
[2012/03/08 19:05:40 | 000,032,315 | ---- | M] () -- D:\Users\johnnyb\Desktop\karate-bears.jpg
[2012/03/08 19:01:22 | 000,014,988 | ---- | M] () -- D:\Users\johnnyb\Desktop\index.jpg
[2012/03/08 19:00:09 | 000,099,340 | ---- | M] () -- D:\Users\johnnyb\Desktop\sudsnbuds.JPG
[2012/03/08 18:57:31 | 000,055,676 | ---- | M] () -- D:\Users\johnnyb\Desktop\beardriving.jpg
[2012/03/08 18:49:04 | 000,038,614 | ---- | M] () -- D:\Users\johnnyb\Desktop\amäla.jpg
[2012/03/08 18:42:28 | 000,047,202 | ---- | M] () -- D:\Users\johnnyb\Desktop\bears.jpg
[2012/03/08 18:20:00 | 000,000,864 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2055930287-1511982587-453485174-1000Core.job
[2012/03/08 18:18:34 | 000,038,866 | ---- | M] () -- D:\Users\johnnyb\Desktop\j588RKkQ.htm.part.htm
[2012/03/08 18:09:27 | 000,286,643 | ---- | M] () -- D:\Users\johnnyb\Desktop\amelaaaaa.png
[2012/03/08 02:34:09 | 000,001,741 | ---- | M] () -- D:\Users\johnnyb\Desktop\41798_21785951839_7708601_q.jpg
[2012/03/07 07:33:41 | 000,071,569 | ---- | M] () -- D:\Users\johnnyb\Desktop\debeeeela.jpg
[2012/03/07 06:31:43 | 000,002,677 | ---- | M] () -- D:\Users\johnnyb\Desktop\157659_100001073984936_2099272921_q.jpg
[2012/03/05 19:25:19 | 000,002,038 | ---- | M] () -- D:\Users\johnnyb\Desktop\safe_image.php.jpg
[2012/03/05 06:54:55 | 000,002,517 | ---- | M] () -- D:\Users\Public\Desktop\Skype.lnk
[2012/03/05 06:54:55 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012/03/04 14:04:59 | 000,013,575 | ---- | M] () -- D:\Users\johnnyb\Desktop\14883698,pd=2,h=250,mxh=600,mxw=800,w=300.jpg
[2012/03/01 20:32:37 | 000,009,564 | ---- | M] () -- D:\Users\johnnyb\Documents\nanic.rtf
[2012/02/29 18:20:36 | 000,117,248 | ---- | M] () -- D:\Users\johnnyb\Desktop\Portfolio johnnyb Becic WS 2011-2012
[2012/02/29 10:26:52 | 000,002,469 | ---- | M] () -- D:\Users\johnnyb\Desktop\161265_1072911554_275630079_q.jpg
[2012/02/27 15:16:11 | 000,049,043 | ---- | M] () -- D:\Users\johnnyb\Desktop\laboooom 222.jpg
[2012/02/27 15:13:35 | 000,024,140 | ---- | M] () -- D:\Users\johnnyb\Desktop\laboooom.php
[2012/02/27 03:43:53 | 000,006,524 | ---- | M] () -- D:\Users\johnnyb\Desktop\13293833461147754467_1_298be847.jpg
[2012/02/26 11:17:50 | 000,006,884 | ---- | M] () -- D:\Users\johnnyb\Desktop\424252_340745855963551_129135490457923_939834_945649327_n.jpg
[2012/02/25 14:41:32 | 000,104,749 | ---- | M] () -- D:\Users\johnnyb\Desktop\164567_178599735513999_172839382756701_387456_6611727_n.jpg
[2012/02/25 11:15:56 | 000,004,797 | ---- | M] () -- D:\Users\johnnyb\Desktop\default.jpg
[2012/02/23 13:08:54 | 000,001,437 | ---- | M] () -- D:\Users\johnnyb\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/02/23 12:53:49 | 000,161,792 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msls31.dll
[2012/02/23 12:53:49 | 000,074,752 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012/02/23 12:53:48 | 001,798,656 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript9.dll
[2012/02/23 12:53:48 | 000,716,800 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript.dll
[2012/02/23 12:53:48 | 000,176,640 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieui.dll
[2012/02/23 12:53:48 | 000,162,304 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msrating.dll
[2012/02/23 12:53:48 | 000,130,560 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieakeng.dll
[2012/02/23 12:53:48 | 000,118,784 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iepeers.dll
[2012/02/23 12:53:48 | 000,110,592 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\IEAdvpack.dll
[2012/02/23 12:53:48 | 000,086,528 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iesysprep.dll
[2012/02/23 12:53:48 | 000,076,800 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\SetIEInstalledDate.exe
[2012/02/23 12:53:48 | 000,048,640 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmler.dll
[2012/02/23 12:53:48 | 000,010,752 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeedssync.exe
[2012/02/23 12:53:47 | 003,695,416 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dat
[2012/02/23 12:53:47 | 002,308,096 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
[2012/02/23 12:53:47 | 001,427,456 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\inetcpl.cpl
[2012/02/23 12:53:47 | 000,818,688 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
[2012/02/23 12:53:47 | 000,580,608 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeeds.dll
[2012/02/23 12:53:47 | 000,452,608 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\dxtmsft.dll
[2012/02/23 12:53:47 | 000,448,512 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\html.iec
[2012/02/23 12:53:47 | 000,434,176 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dll
[2012/02/23 12:53:47 | 000,367,104 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\html.iec
[2012/02/23 12:53:47 | 000,353,792 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtmsft.dll
[2012/02/23 12:53:47 | 000,282,112 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\dxtrans.dll
[2012/02/23 12:53:47 | 000,267,776 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieaksie.dll
[2012/02/23 12:53:47 | 000,248,320 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
[2012/02/23 12:53:47 | 000,231,936 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\url.dll
[2012/02/23 12:53:47 | 000,227,840 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieaksie.dll
[2012/02/23 12:53:47 | 000,223,232 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtrans.dll
[2012/02/23 12:53:47 | 000,222,208 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msls31.dll
[2012/02/23 12:53:47 | 000,197,120 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msrating.dll
[2012/02/23 12:53:47 | 000,173,056 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
[2012/02/23 12:53:47 | 000,163,840 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieakui.dll
[2012/02/23 12:53:47 | 000,163,840 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieakui.dll
[2012/02/23 12:53:47 | 000,160,256 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieakeng.dll
[2012/02/23 12:53:47 | 000,152,064 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\wextract.exe
[2012/02/23 12:53:47 | 000,150,528 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iexpress.exe
[2012/02/23 12:53:47 | 000,149,504 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\occache.dll
[2012/02/23 12:53:47 | 000,145,920 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iepeers.dll
[2012/02/23 12:53:47 | 000,142,848 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieUnatt.exe
[2012/02/23 12:53:47 | 000,135,168 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\IEAdvpack.dll
[2012/02/23 12:53:47 | 000,123,392 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\occache.dll
[2012/02/23 12:53:47 | 000,114,176 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\admparse.dll
[2012/02/23 12:53:47 | 000,111,616 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iesysprep.dll
[2012/02/23 12:53:47 | 000,101,888 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\admparse.dll
[2012/02/23 12:53:47 | 000,091,648 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\SetIEInstalledDate.exe
[2012/02/23 12:53:47 | 000,089,088 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\RegisterIEPKEYs.exe
[2012/02/23 12:53:47 | 000,078,848 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\inseng.dll
[2012/02/23 12:53:47 | 000,076,800 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\tdc.ocx
[2012/02/23 12:53:47 | 000,074,752 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iesetup.dll
[2012/02/23 12:53:47 | 000,074,240 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ie4uinit.exe
[2012/02/23 12:53:47 | 000,072,822 | ---- | M] () -- D:\Windows\SysWow64\ieuinit.inf
[2012/02/23 12:53:47 | 000,072,704 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmled.dll
[2012/02/23 12:53:47 | 000,066,048 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\icardie.dll
[2012/02/23 12:53:47 | 000,065,024 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\pngfilt.dll
[2012/02/23 12:53:47 | 000,063,488 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\tdc.ocx
[2012/02/23 12:53:47 | 000,054,272 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\pngfilt.dll
[2012/02/23 12:53:47 | 000,049,664 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\imgutil.dll
[2012/02/23 12:53:47 | 000,048,640 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshtmler.dll
[2012/02/23 12:53:47 | 000,035,840 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\imgutil.dll
[2012/02/23 12:53:47 | 000,031,744 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iernonce.dll
[2012/02/23 12:53:47 | 000,023,552 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\licmgr10.dll
[2012/02/23 12:53:47 | 000,012,288 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshta.exe
[2012/02/23 12:53:47 | 000,010,752 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msfeedssync.exe
[2012/02/23 12:53:46 | 003,695,416 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dat
[2012/02/23 12:53:46 | 001,493,504 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
[2012/02/23 12:53:46 | 000,697,344 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
[2012/02/23 12:53:46 | 000,603,648 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
[2012/02/23 12:53:46 | 000,534,528 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dll
[2012/02/23 12:53:46 | 000,237,056 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\url.dll
[2012/02/23 12:53:46 | 000,165,888 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iexpress.exe
[2012/02/23 12:53:46 | 000,160,256 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\wextract.exe
[2012/02/23 12:53:46 | 000,103,936 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\inseng.dll
[2012/02/23 12:53:46 | 000,096,256 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshtmled.dll
[2012/02/23 12:53:46 | 000,089,088 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ie4uinit.exe
[2012/02/23 12:53:46 | 000,085,504 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iesetup.dll
[2012/02/23 12:53:46 | 000,082,432 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\icardie.dll
[2012/02/23 12:53:46 | 000,072,822 | ---- | M] () -- D:\Windows\System32\ieuinit.inf
[2012/02/23 12:53:46 | 000,039,936 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iernonce.dll
[2012/02/23 12:53:46 | 000,030,720 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\licmgr10.dll
[2012/02/23 12:48:44 | 000,023,190 | ---- | M] () -- D:\Users\johnnyb\Desktop\430056_371078422910229_163498050334935_1379985_133488973_n.jpg
[2012/02/23 11:09:48 | 000,002,646 | ---- | M] () -- D:\Users\johnnyb\Desktop\371192_100002055407265_1791696626_q.jpg
[2012/02/22 17:18:37 | 000,011,556 | ---- | M] () -- D:\Users\johnnyb\Desktop\13295229961243966191_1_e26e2dc7.jpg
[2012/02/21 20:35:08 | 000,726,492 | ---- | M] () -- D:\Users\johnnyb\Desktop\debela i cigo.png
[2012/02/21 19:15:52 | 000,005,950 | ---- | M] () -- D:\Users\johnnyb\Desktop\13267083562055324656_1_f590f5b6.jpg
[2012/02/21 09:15:47 | 000,038,490 | ---- | M] () -- D:\Users\johnnyb\Desktop\sammelzeugnis.pdf
[2012/02/21 09:15:22 | 000,038,490 | ---- | M] () -- D:\Users\johnnyb\Desktop\studienblatt.pdf
[2012/02/21 09:15:03 | 000,038,490 | ---- | M] () -- D:\Users\johnnyb\Desktop\studienbestätigung.pdf
[2012/02/21 08:47:16 | 000,567,709 | ---- | M] () -- D:\Users\johnnyb\Desktop\einkommenssteuernachweis 2011 becic.jpg
[2012/02/19 17:40:20 | 000,018,989 | ---- | M] () -- D:\Users\johnnyb\Desktop\431170_327583947288241_100001099140133_948191_1882973629_n.jpg
[2012/02/18 21:29:20 | 000,024,091 | ---- | M] () -- D:\Users\johnnyb\Desktop\Melanie-Gruber-e448421.jpg
[2012/02/16 10:25:26 | 002,334,304 | ---- | M] () -- D:\Windows\System32\FNTCACHE.DAT
[2012/02/16 09:51:47 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[1 D:\Windows\SysWow64\*.tmp files -> D:\Windows\SysWow64\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/03/10 07:10:54 | 000,035,184 | ---- | C] () -- D:\Users\johnnyb\Desktop\tarik.jpg
[2012/03/09 14:09:44 | 000,064,548 | ---- | C] () -- D:\Users\johnnyb\Desktop\11-cheese-nachos.jpg
[2012/03/08 19:34:12 | 000,129,542 | ---- | C] () -- D:\Users\johnnyb\Desktop\milionerry4.gif
[2012/03/08 19:31:49 | 000,010,536 | ---- | C] () -- D:\Users\johnnyb\Desktop\804.jpg
[2012/03/08 19:26:13 | 000,046,476 | ---- | C] () -- D:\Users\johnnyb\Desktop\amöööla.jpg
[2012/03/08 19:24:41 | 000,038,232 | ---- | C] () -- D:\Users\johnnyb\Desktop\black-bear.jpg
[2012/03/08 19:18:45 | 000,018,481 | ---- | C] () -- D:\Users\johnnyb\Desktop\super_funny_cute images_b0fcfb9caa9eb51ce22c5dc2e9eae1ad.jpg
[2012/03/08 19:13:37 | 000,019,322 | ---- | C] () -- D:\Users\johnnyb\Desktop\pooh_bear_and_obama-12688.jpg
[2012/03/08 19:11:25 | 000,097,958 | ---- | C] () -- D:\Users\johnnyb\Desktop\Funny_Polar_Bear.jpg
[2012/03/08 19:05:38 | 000,032,315 | ---- | C] () -- D:\Users\johnnyb\Desktop\karate-bears.jpg
[2012/03/08 19:01:21 | 000,014,988 | ---- | C] () -- D:\Users\johnnyb\Desktop\index.jpg
[2012/03/08 19:00:08 | 000,099,340 | ---- | C] () -- D:\Users\johnnyb\Desktop\sudsnbuds.JPG
[2012/03/08 18:57:26 | 000,055,676 | ---- | C] () -- D:\Users\johnnyb\Desktop\beardriving.jpg
[2012/03/08 18:49:03 | 000,038,614 | ---- | C] () -- D:\Users\johnnyb\Desktop\amäla.jpg
[2012/03/08 18:42:26 | 000,047,202 | ---- | C] () -- D:\Users\johnnyb\Desktop\bears.jpg
[2012/03/08 18:18:33 | 000,038,866 | ---- | C] () -- D:\Users\johnnyb\Desktop\j588RKkQ.htm.part.htm
[2012/03/08 18:09:27 | 000,286,643 | ---- | C] () -- D:\Users\johnnyb\Desktop\amelaaaaa.png
[2012/03/08 02:34:08 | 000,001,741 | ---- | C] () -- D:\Users\johnnyb\Desktop\41798_21785951839_7708601_q.jpg
[2012/03/07 07:33:40 | 000,071,569 | ---- | C] () -- D:\Users\johnnyb\Desktop\debeeeela.jpg
[2012/03/07 06:31:41 | 000,002,677 | ---- | C] () -- D:\Users\johnnyb\Desktop\157659_100001073984936_2099272921_q.jpg
[2012/03/05 19:25:18 | 000,002,038 | ---- | C] () -- D:\Users\johnnyb\Desktop\safe_image.php.jpg
[2012/03/04 14:04:47 | 000,013,575 | ---- | C] () -- D:\Users\johnnyb\Desktop\14883698,pd=2,h=250,mxh=600,mxw=800,w=300.jpg
[2012/03/01 20:32:37 | 000,009,564 | ---- | C] () -- D:\Users\johnnyb\Documents\nanic.rtf
[2012/02/29 18:25:49 | 000,117,248 | ---- | C] () -- D:\Users\johnnyb\Desktop\Portfolio johnnyb Becic WS 2011-2012
[2012/02/27 15:16:11 | 000,049,043 | ---- | C] () -- D:\Users\johnnyb\Desktop\laboooom 222.jpg
[2012/02/27 15:13:34 | 000,024,140 | ---- | C] () -- D:\Users\johnnyb\Desktop\laboooom.php
[2012/02/27 03:43:51 | 000,006,524 | ---- | C] () -- D:\Users\johnnyb\Desktop\13293833461147754467_1_298be847.jpg
[2012/02/26 18:00:01 | 000,002,469 | ---- | C] () -- D:\Users\johnnyb\Desktop\161265_1072911554_275630079_q.jpg
[2012/02/26 11:17:48 | 000,006,884 | ---- | C] () -- D:\Users\johnnyb\Desktop\424252_340745855963551_129135490457923_939834_945649327_n.jpg
[2012/02/25 14:41:31 | 000,104,749 | ---- | C] () -- D:\Users\johnnyb\Desktop\164567_178599735513999_172839382756701_387456_6611727_n.jpg
[2012/02/24 18:45:52 | 000,004,797 | ---- | C] () -- D:\Users\johnnyb\Desktop\default.jpg
[2012/02/23 12:53:47 | 000,072,822 | ---- | C] () -- D:\Windows\SysWow64\ieuinit.inf
[2012/02/23 12:53:46 | 000,072,822 | ---- | C] () -- D:\Windows\System32\ieuinit.inf
[2012/02/23 12:48:41 | 000,023,190 | ---- | C] () -- D:\Users\johnnyb\Desktop\430056_371078422910229_163498050334935_1379985_133488973_n.jpg
[2012/02/23 11:09:45 | 000,002,646 | ---- | C] () -- D:\Users\johnnyb\Desktop\371192_100002055407265_1791696626_q.jpg
[2012/02/22 17:18:36 | 000,011,556 | ---- | C] () -- D:\Users\johnnyb\Desktop\13295229961243966191_1_e26e2dc7.jpg
[2012/02/21 20:35:08 | 000,726,492 | ---- | C] () -- D:\Users\johnnyb\Desktop\debela i cigo.png
[2012/02/21 19:15:51 | 000,005,950 | ---- | C] () -- D:\Users\johnnyb\Desktop\13267083562055324656_1_f590f5b6.jpg
[2012/02/21 09:19:49 | 000,567,709 | ---- | C] () -- D:\Users\johnnyb\Desktop\einkommenssteuernachweis 2011 becic.jpg
[2012/02/21 09:15:46 | 000,038,490 | ---- | C] () -- D:\Users\johnnyb\Desktop\sammelzeugnis.pdf
[2012/02/21 09:15:21 | 000,038,490 | ---- | C] () -- D:\Users\johnnyb\Desktop\studienblatt.pdf
[2012/02/21 09:15:02 | 000,038,490 | ---- | C] () -- D:\Users\johnnyb\Desktop\studienbestätigung.pdf
[2012/02/19 17:40:16 | 000,018,989 | ---- | C] () -- D:\Users\johnnyb\Desktop\431170_327583947288241_100001099140133_948191_1882973629_n.jpg
[2012/02/18 21:29:18 | 000,024,091 | ---- | C] () -- D:\Users\johnnyb\Desktop\Melanie-Gruber-e448421.jpg
[2011/10/11 15:19:44 | 000,004,096 | -H-- | C] () -- D:\Users\johnnyb\AppData\Local\keyfile3.drm
[2011/04/21 06:54:28 | 000,000,056 | -H-- | C] () -- D:\Windows\SysWow64\ezsidmv.dat
[2011/03/12 07:39:31 | 000,000,400 | ---- | C] () -- D:\Windows\ODBC.INI
[2010/11/11 08:44:18 | 000,014,328 | ---- | C] () -- D:\Users\johnnyb\AppData\Roaming\wklnhst.dat
[2010/09/18 12:56:55 | 000,000,000 | ---- | C] () -- D:\Windows\nsreg.dat
[2010/06/01 06:29:51 | 000,632,056 | ---- | C] () -- D:\Windows\Image.dll
[2010/06/01 06:29:51 | 000,206,208 | ---- | C] () -- D:\Windows\PLFSetI.exe
[2010/06/01 06:29:51 | 000,025,848 | ---- | C] () -- D:\Windows\USB_VIDEO_REG.exe
[2010/06/01 06:29:51 | 000,000,637 | ---- | C] () -- D:\Windows\AutoSetFrequency.ini
[2010/06/01 06:29:51 | 000,000,378 | ---- | C] () -- D:\Windows\PidList.ini
[2010/06/01 06:25:38 | 000,000,000 | ---- | C] () -- D:\Windows\ativpsrm.bin
[2010/04/11 23:58:00 | 000,002,093 | ---- | C] () -- D:\Windows\SysWow64\atipblag.dat
[2010/04/11 23:17:04 | 000,131,472 | ---- | C] () -- D:\ProgramData\FullRemove.exe
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- D:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- D:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin
[2009/07/13 20:02:54 | 000,245,248 | ---- | C] () -- D:\Windows\SysWow64\DShowRdpFilter.dll
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- D:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- D:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- D:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- D:\Windows\SysWow64\mlang.dat
[2008/11/21 20:20:19 | 000,007,725 | ---- | C] () -- D:\Program Files\Sims2 eXtreme uninstall.bat
[2005/12/07 06:31:00 | 000,202,752 | R--- | C] () -- D:\Windows\SysWow64\CddbCdda.dll
[2003/02/20 11:53:42 | 000,005,702 | ---- | C] () -- D:\Windows\SysWow64\OUTLPERF.INI
 
========== LOP Check ==========
 
[2010/09/23 16:41:48 | 000,000,000 | ---D | M] -- D:\ProgramData\Acer
[2011/03/12 06:45:22 | 000,000,000 | ---D | M] -- D:\ProgramData\Alwil Software
[2010/09/15 17:10:45 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2010/09/17 10:46:25 | 000,000,000 | ---D | M] -- D:\ProgramData\Arcade Lab
[2011/12/21 12:39:23 | 000,000,000 | ---D | M] -- D:\ProgramData\Babylon
[2010/04/11 23:47:11 | 000,000,000 | ---D | M] -- D:\ProgramData\BackupManager
[2012/03/13 15:54:05 | 000,000,000 | ---D | M] -- D:\ProgramData\boost_interprocess
[2012/01/01 13:36:21 | 000,000,000 | ---D | M] -- D:\ProgramData\Boss Media
[2011/03/12 07:27:47 | 000,000,000 | ---D | M] -- D:\ProgramData\DAEMON Tools Lite
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2010/09/15 17:10:45 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente
[2010/09/16 16:30:56 | 000,000,000 | ---D | M] -- D:\ProgramData\Downloaded Installations
[2010/11/11 09:01:47 | 000,000,000 | ---D | M] -- D:\ProgramData\eSobi
[2010/09/16 15:28:45 | 000,000,000 | ---D | M] -- D:\ProgramData\FarmFrenzy2
[2010/09/15 17:10:45 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2010/11/11 12:32:29 | 000,000,000 | ---D | M] -- D:\ProgramData\Friends Games
[2011/08/12 13:44:11 | 000,000,000 | ---D | M] -- D:\ProgramData\Messenger Plus!
[2010/04/11 23:23:39 | 000,000,000 | ---D | M] -- D:\ProgramData\OberonGameConsole
[2010/09/15 17:13:29 | 000,000,000 | ---D | M] -- D:\ProgramData\OEM
[2010/09/23 17:26:41 | 000,000,000 | ---D | M] -- D:\ProgramData\Partner
[2010/09/16 16:33:32 | 000,000,000 | ---D | M] -- D:\ProgramData\PC Suite
[2010/09/16 15:11:03 | 000,000,000 | ---D | M] -- D:\ProgramData\Sandlot Games
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2010/09/15 17:10:45 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü
[2011/06/12 09:29:56 | 000,000,000 | ---D | M] -- D:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2010/09/15 17:10:45 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen
[2012/03/12 16:49:00 | 000,000,914 | ---- | M] () -- D:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2055930287-1511982587-453485174-1000Core.job
[2012/03/13 01:49:18 | 000,000,936 | ---- | M] () -- D:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2055930287-1511982587-453485174-1000UA.job
[2012/03/06 15:52:05 | 000,032,632 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Files - Unicode (All) ==========
[2012/02/29 14:06:18 | 000,054,272 | ---- | M] ()(D:\Users\johnnyb\Desktop\BECIC_johnnyb_?????.doc) -- D:\Users\johnnyb\Desktop\BECIC_johnnyb_Свеча.doc
[2012/02/29 14:06:18 | 000,054,272 | ---- | C] ()(D:\Users\johnnyb\Desktop\BECIC_johnnyb_?????.doc) -- D:\Users\johnnyb\Desktop\BECIC_johnnyb_Свеча.doc
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 151 bytes -> D:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 144 bytes -> D:\ProgramData\Temp:5D7E5A8F
@Alternate Data Stream - 142 bytes -> D:\ProgramData\Temp:93DE1838
@Alternate Data Stream - 141 bytes -> D:\ProgramData\Temp:93EB7685
@Alternate Data Stream - 140 bytes -> D:\ProgramData\Temp:E36F5B57
@Alternate Data Stream - 136 bytes -> D:\ProgramData\Temp:798A3728
@Alternate Data Stream - 134 bytes -> D:\ProgramData\Temp:E1F04E8D
@Alternate Data Stream - 131 bytes -> D:\ProgramData\Temp:4D066AD2
@Alternate Data Stream - 129 bytes -> D:\ProgramData\Temp:0B9176C0
< End of report >
Ich wüsste weiters gerne, wie man von diesen Logfiles auf den Fix kommt. Gibts dafür eventuell eine Beschreibung?

Vielen Dank.

Alt 16.03.2012, 18:17   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
BKA Virus (?) - Standard

BKA Virus (?)


Funktioniert noch der abgesicherte Modus mit Netzwerktreibern? Mit Internetverbindung?



Abgesicherter Modus zur Bereinigung
  • Windows mit F8-Taste beim Start in den abgesicherten Modus bringen.
  • Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern:

    Windows im abgesicherten Modusstarten
__________________

__________________
Antwort

Themen zu BKA Virus (?)
0x00000001, alternate, anhang, anmelde, benutzerkonto, beschreibung, bildschirm, bingbar, bka virus, conduit, connection, datei, disabletaskmgr, fix, hochfahren, launch, limited.com/facebook, logfiles, melde, otl-log, plug-in, search the web, super, virus, weißer, weißer bildschirm, win, win7, wüsste


« IEBHO.dll Virus ? | avira antivir zeigt virenfunde bei systemscan »

Ähnliche Themen: BKA Virus (?)


  1. Virus versenden; virus angriff; virus schützen; rache;
    Log-Analyse und Auswertung - 06.12.2010 (10)
  2. AVG Anti Virus free meldet Virus PSW.Generic7.BWMP, Virus läßt sich nicht beseitigen
    Plagegeister aller Art und deren Bekämpfung - 30.10.2010 (21)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema BKA Virus (?) - Hallo, wenn ich Win7 hochfahren und mich in ein Benutzerkonto anmelde, kommt nur ein weißer Bildschirm auf dem steht "waiting for connection to be established". Der OTL-Log: Code: Alles auswählen - BKA Virus (?)...
Archiv
Du betrachtest: BKA Virus (?) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129