Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Bundespolizei

Bundespolizei


Plagegeister aller Art und deren Bekämpfung: Bundespolizei

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 06.10.2012, 14:45   #1
Dimi08
 
Bundespolizei - Standard

Bundespolizei


Hallo Trojaner-Board !

Mir wurde bereits vor einem Jahr sehr gut geholfen, aber leider kenne ich meinen alten Username nicht und meine alte E-Mail Adresse benutze ich nicht mehr btw. sie ist deaktiviert. Daher habe ich mir einen neuen Account gemacht. Ich hoffe, dass das soweit in Ordnung ist. Nun zu meinem Problem :

Wie schon bereits erwähnt habe ich den Bundespolizei Trojaner/Virus. Ich habe auch keinen Schimmer woher der gekommen ist. Meine Freundin war am PC und hat nur bei Facebook ein bisschen gespielt / gechatted und schon war er da. Ich benutze Windows 7 mit 64 Bit und alle Updates sollten drauf sein. Ich habe als erstes das Problem selbst in die Hand zu nehmen und den Abgesicherten Modus mit Netzwerktreibern gestartet und probiert eine Systemwiederherstellung durchzuführen, leider ohne Erfolg. Angeblich wurde kein Systemwiederherstellungspunkt erstellt. Falls ich was im Folgendem vergesse, dann erinnert mich bitte dran. Danke im Vorraus !

1. Step : Done
2. Step : Eine Extra.txt ist nicht aufgetaucht und die OTL.txt ist zu groß um sie anzuhängen, also kopiere ich sie hier rein :

OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 06.10.2012 15:26:23 - Run 4
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\User\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 7,19 Gb Available Physical Memory | 90,08% Memory free
15,95 Gb Paging File | 15,19 Gb Available in Paging File | 95,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,09 Gb Total Space | 33,55 Gb Free Space | 17,20% Space Free | Partition Type: NTFS
Drive D: | 48,83 Gb Total Space | 43,71 Gb Free Space | 89,53% Space Free | Partition Type: NTFS
Drive E: | 345,57 Gb Total Space | 5,15 Gb Free Space | 1,49% Space Free | Partition Type: NTFS
Drive S: | 48,83 Gb Total Space | 30,22 Gb Free Space | 61,89% Space Free | Partition Type: NTFS
 
Computer Name: USER-PC | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.10.06 15:25:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2011.03.30 19:45:38 | 000,036,160 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2010.08.12 15:00:20 | 000,133,800 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\IPROSetMonitor.exe -- (Intel® PROSet Monitoring Service)
SRV - [2012.10.04 17:22:50 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.08.28 16:07:37 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.17 15:14:44 | 002,292,480 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2012.07.03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.05.27 17:54:26 | 000,076,888 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.05.08 22:39:06 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.05.08 22:39:06 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.04.03 19:18:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.04.03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011.11.25 18:08:10 | 000,747,880 | ---- | M] (Tunngle.net GmbH) [Disabled | Stopped] -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2011.08.12 18:13:26 | 000,087,040 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011.03.30 19:49:42 | 002,026,304 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.03.30 19:45:32 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2010.12.02 04:15:14 | 000,915,584 | R--- | M] () [Auto | Stopped] -- C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe -- (asHmComSvc)
SRV - [2010.11.03 11:30:14 | 000,918,144 | R--- | M] () [Auto | Stopped] -- C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe -- (asComSvc)
SRV - [2010.10.21 11:52:26 | 000,586,880 | R--- | M] () [Auto | Stopped] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe -- (AsSysCtrlService)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.05.08 22:39:06 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.05.08 22:39:06 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.04.25 12:11:36 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.01.17 14:45:56 | 000,188,224 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.12.10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2011.09.16 16:08:07 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.05.14 12:07:30 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.10.19 16:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010.09.30 07:00:06 | 000,180,736 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.09.30 07:00:06 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2010.09.21 08:34:18 | 000,313,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1c62x64.sys -- (e1cexpress)
DRV:64bit: - [2010.08.27 19:53:22 | 000,297,000 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mv91xx.sys -- (mv91xx)
DRV:64bit: - [2010.08.17 19:28:32 | 000,026,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT)
DRV:64bit: - [2010.08.10 11:29:16 | 000,120,920 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2010.06.25 17:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010.01.27 04:09:02 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (npf)
DRV:64bit: - [2009.11.02 19:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009.10.05 16:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009.09.16 07:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t)
DRV:64bit: - [2009.07.14 15:36:28 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:64bit: - [2009.07.14 02:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2009.07.01 11:54:54 | 000,030,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGPBTDD.sys -- (LGPBTDD)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.03.18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2009.02.12 15:11:26 | 000,026,024 | ---- | M] (EldoS Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\rsdrvx64.sys -- (ElRawDisk)
DRV:64bit: - [2009.01.09 15:02:08 | 000,031,744 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort)
DRV:64bit: - [2008.05.20 18:33:36 | 000,028,416 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV - [2011.02.10 11:22:58 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.avg.com/?cid={7527AF12-3DFB-4735-AED8-7A118B5D4B18}&mid=0b97e9ddf44f47d09c166de7839caead-4f65bc6976e52802886db0ff44f0927ad6107947&lang=en&ds=ft011&pr=sa&d=2012-06-29 23:54:00&v=11.1.0.12&sap=hp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B1 8D 65 BE 9D F4 CB 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={7527AF12-3DFB-4735-AED8-7A118B5D4B18}&mid=0b97e9ddf44f47d09c166de7839caead-4f65bc6976e52802886db0ff44f0927ad6107947&lang=en&ds=ft011&pr=sa&d=2012-06-29 23:54:00&v=11.1.0.12&sap=dsp&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3503.0728: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.17 15:13:29 | 000,000,000 | ---D | M]
 
 
========== Chrome  ==========
 
CHR - homepage: hxxp://www.google.com/
CHR - homepage: hxxp://www.google.com/
CHR - Extension: YouTube = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Wajam = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: Google Mail = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2012.04.20 15:04:09 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [TortoiseHgOverlayIconServer] C:\Programme\TortoiseHg\TortoiseHgOverlayServer.exe ()
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [mknzrbjsgufapse] C:\ProgramData\mknzrbjs.exe ()
O4 - Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html File not found
O8:64bit: - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8:64bit: - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html File not found
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 193.189.244.194 193.189.244.202
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4171DEF7-FBA6-4264-9EEF-734BF2F5FFDD}: DhcpNameServer = 7.254.254.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6D8541E8-BD6D-41CE-A8D8-8526E055B0AA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6DA9DAF6-C5FB-4C26-B197-9EC72F985A96}: DhcpNameServer = 192.168.1.1 193.189.244.194 193.189.244.202
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5CDD55E-8198-4853-A419-D2629917E9AE}: DhcpNameServer = 192.168.42.129
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.10.06 15:25:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2012.10.06 14:41:19 | 000,000,000 | ---D | C] -- C:\ProgramData\dpbzjshkgpybgkv
[2012.10.02 02:52:14 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\10 WBC
[2012.09.30 14:55:45 | 000,000,000 | ---D | C] -- C:\Windows\de
[2012.09.30 14:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2012.09.30 14:52:13 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Windows Live
[2012.09.28 12:13:43 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\VDownloader
[2012.09.28 12:13:43 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\VDownloader
[2012.09.28 12:13:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VDownloader
[2012.09.27 16:48:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
[2012.09.27 16:27:48 | 000,000,000 | ---D | C] -- C:\Frapss
[2012.09.27 16:27:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
[2012.09.07 22:41:28 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\DOSBox
[2012.09.07 22:41:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
[2012.09.07 22:41:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DOSBox-0.74
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.10.06 15:25:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2012.10.06 15:14:47 | 000,050,477 | ---- | M] () -- C:\Users\User\Desktop\Defogger.exe
[2012.10.06 15:09:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.10.06 15:09:20 | 2129,395,711 | -HS- | M] () -- C:\hiberfil.sys
[2012.10.06 14:45:00 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.10.06 14:41:18 | 000,076,359 | ---- | M] () -- C:\ProgramData\whdesljxyanojfn
[2012.10.06 14:41:15 | 000,101,376 | ---- | M] () -- C:\ProgramData\mknzrbjs.exe
[2012.10.06 14:41:15 | 000,101,376 | ---- | M] () -- C:\Users\User\0.8358818168774483.exe
[2012.10.06 14:14:26 | 000,014,800 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.10.06 14:14:26 | 000,014,800 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.10.06 14:12:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.10.06 02:03:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.09.30 11:19:12 | 001,507,342 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.09.30 11:19:12 | 000,657,660 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.30 11:19:12 | 000,618,936 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.09.30 11:19:12 | 000,131,032 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.30 11:19:12 | 000,107,256 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.10.06 15:14:47 | 000,050,477 | ---- | C] () -- C:\Users\User\Desktop\Defogger.exe
[2012.10.06 14:41:18 | 000,101,376 | ---- | C] () -- C:\ProgramData\mknzrbjs.exe
[2012.10.06 14:41:15 | 000,076,359 | ---- | C] () -- C:\ProgramData\whdesljxyanojfn
[2012.10.06 14:41:14 | 000,101,376 | ---- | C] () -- C:\Users\User\0.8358818168774483.exe
[2012.09.30 14:55:37 | 000,001,309 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
[2012.09.30 14:55:32 | 000,001,378 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
[2012.09.28 12:13:35 | 000,444,283 | ---- | C] () -- C:\Program Files (x86)\Common Files\WinPcapNmap.exe
[2012.06.09 14:36:27 | 000,000,036 | ---- | C] () -- C:\Users\User\.org.eclipse.epp.usagedata.recording.userId
[2012.04.21 19:39:16 | 002,580,552 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012.04.20 14:58:10 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.04.20 14:58:10 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.04.20 14:58:10 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.04.20 14:58:10 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.04.20 14:58:10 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.04.19 20:34:56 | 000,000,000 | ---- | C] () -- C:\Users\User\defogger_reenable
[2012.04.03 07:16:04 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012.03.29 20:15:20 | 000,000,023 | ---- | C] () -- C:\Users\User\AppData\Roaming\82D437.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zzmbkjttcv.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zyadeizbstq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zvxuplfqaiv.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zmulmsalvp.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zmpm.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zlvlgaoro.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zhbezzk.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zgtn.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\zbu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yztg.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ywcotf.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yruogei.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yqwnxmuqkr.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ynbpico.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yft.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yfguqg.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yfddtyco.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\yeqc.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ybcwdcj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xrjmwls.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xratz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xnrwoffi.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xkiazoygsu.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xitroqxj.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\xibfo.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xhxj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xhliavnncf.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xhi.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xhepiahgu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xei.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xdu.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xbwudob.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xbeumyws.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\xabxrnwognq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wztapis.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wvpmojcpagc.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wvmaql.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wuienx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wtkvqxla.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wmcwjfwebcg.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wmaeoulj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wjjkwjxof.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wjd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\wgfzxqxc.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vwx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vwvpxtf.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vuzy.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vtccpjjxhbl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vpymgh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vky.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vhgdwwy.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vexcv.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\vekhfmquvd.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\uvhkeoo.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\uuknvmo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\upqsk.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ujupkolaxz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\uilhoi.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\uhgxcxne.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ugh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\udixx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ubomomrwsdk.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\uaqqwmjt.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tubh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tttpgilubhz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tmksiwyo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tjerrruiu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tixbprzs.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tgysztaa.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tgp.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\tcu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\szanch.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\swrosmstc.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\swmx.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\svh.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\surl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\sthnpbr.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\srt.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\sqrvkkbktxz.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\sntlrnm.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\slfzi.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\skjqlknoa.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\skcx.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\sjzadmi.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\sfsz.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rzuc.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rvitifkhda.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ruwy.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rumiqlhw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rtsquze.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rpz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\rnni.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rnaxcorvnpm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rmkgnn.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\riffaw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rifbww.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rhw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rfbddh.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\refyhravcw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rckntimj.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\rbou.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qzegqoobxiy.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qxbus.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qttwzyei.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qsopsnklrnj.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qrpcq.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qqqt.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qqqewpfdl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qpghwlpi.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qnretzig.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qheefqe.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\qgqkumwr.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\qbdvroefxtf.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\pxluctu.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pvsbacopgo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\puxozpwjj.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ptfcgaof.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\psxulyb.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\psuezqksw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pqognjycvt.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pqjjgvrcrr.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pplmagu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pjtdqi.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\phcioojd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pefaimbebk.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pedcjlq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pcpmvigyknw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pclkwlz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\pathdekgnl.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\oxxpcqneqfk.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ousspnt.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\otvbczqzr.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\otorwgb.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\oofzxmm.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\oofsbkfk.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ooaomuyhvz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\onuhfaqdr.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\olhdsirhbjm.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\olcfhmx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\okbzdweogsf.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\oicryjbsxhd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ogn.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ogknbwh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ocduhsoaeky.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ntpp.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\npuailglpt.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\netcd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ndpxrjvfik.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\narceunvfsr.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mxdvmytw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mwzhlh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mwuwz.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mvhxlyyr.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mpuqpwyjjoe.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mlfml.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\minowwpnhw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mhymnl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mhefcltipun.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mflohpswrxl.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mcrrrdylbyb.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mbufohzbd.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\mbpbf.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\maynwlp.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lxjydaq.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lwcnbd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lvzw.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lvjfqnrfy.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lqya.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lnm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lmkwvtfa.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\liif.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lhlcj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\lffhqjpt.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ldna.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ktkvvqws.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\kragnbr.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kppamcnflm.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kokjkgnayl.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\knk.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kkrk.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kjvzwobzke.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kgqeevfnt.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kfkegdfzsmf.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kblu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\kaddzumq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\jxqxva.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\jvpytddxshm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\jvanbm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\jscxtijpp.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\jecbuzopv.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\jazdltqdat.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ixrmyzmuf.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ivz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\itshnv.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ithugwck.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\isnvgwxvzx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\imisiwl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ilppyukvb.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ikvd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ifvbafbi.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\iduxw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ict.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ibqvywo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hxpuo.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hxokmtz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hulemjbpzih.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\htzs.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\htubwk.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hrfumedgw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hqwxnfwmq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hoboh.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hmzimwaq.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hiushfclfla.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hhxjfatux.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hgu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hgdxppghmnp.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hfaptb.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\hbqnkzjqm.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gzswrdxw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gxveh.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gxiglgpq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gwegf.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gswxesatox.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gksspjwk.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gjrxn.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\giemuzl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ghdvcccqxcv.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ggjxmqh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gecrm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gcgii.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\gbx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fzzu.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fyvyvw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fqat.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fnyj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fnxe.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fmlgoxxnn.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fkuuzbgv.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\fhagevihj.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\fas.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ezafudvoiyt.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\err.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\epuzw.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ehe.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\egskehx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\eewo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\eesejbzog.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\edsljcdivuy.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\ecisfvuhpa.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dxrnzku.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dqajfj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dmuuqmc.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dmtlsnues.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dkfd.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\djzobvavx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dgppwo.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dgckkqqq.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\dfswulgomz.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\detwvkklv.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\defhdp.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ctxnogspj.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\cqbt.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\cntaml.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\civwzqm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\cfclssx.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\cdntf.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\cbqynozbpo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\cbgvboorrjj.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\bzyz.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\byoqvakieh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\bxqecmpfn.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\bulcyfilrrd.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\bsxkwl.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\bsmobir.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\blxcchdo.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\betjex.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\baxqskha.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\azuxhafgo.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ayyyufnvi.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\auemdu.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\aso.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\arembuqqlhl.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\apluecjxljh.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\akjgqsepny.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ajnzyssdz.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\ajfm.ini
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\aesvs.dat
[2012.03.20 17:13:27 | 000,000,024 | ---- | C] () -- C:\Windows\SysWow64\aclcvmx.ini
[2012.02.10 00:27:47 | 000,006,360 | ---- | C] () -- C:\Users\User\stoogeSort.html
[2012.01.28 22:57:27 | 000,000,600 | ---- | C] () -- C:\Users\User\AppData\Roaming\winscp.rnd
[2012.01.11 19:40:29 | 000,005,509 | ---- | C] () -- C:\Users\User\mumie9.html
[2012.01.10 20:30:39 | 000,004,857 | ---- | C] () -- C:\Users\User\Playground.html
[2012.01.06 19:19:53 | 000,015,068 | ---- | C] () -- C:\Users\User\mumie10.html
[2011.11.30 20:06:11 | 000,000,119 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2011.11.16 01:27:38 | 001,526,060 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.10.24 21:11:24 | 000,000,155 | ---- | C] () -- C:\Users\User\.appletviewer
[2011.10.16 23:19:26 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll
[2011.10.14 21:17:01 | 000,149,596 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.08.17 12:23:10 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.07.09 15:48:57 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\{C4EFB0A6-05CF-4A08-8B9D-4588F1127291}
[2011.07.04 22:41:42 | 000,051,270 | ---- | C] () -- C:\Users\User\AppData\Roaming\room_v3.dat
[2011.05.21 13:16:41 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.05.21 13:16:40 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.05.15 20:05:58 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2011.04.14 17:24:27 | 000,001,443 | ---- | C] () -- C:\Users\User\gsview32.ini
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.04.07 01:39:07 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2011.04.07 00:55:11 | 000,046,742 | ---- | C] () -- C:\Users\User\AppData\Roaming\room.dat
[2011.04.06 23:56:30 | 000,088,895 | ---- | C] () -- C:\Windows\War3Unin.dat
[2011.04.05 17:28:14 | 000,000,306 | ---- | C] () -- C:\Windows\lgfwup.ini
[2011.04.05 17:02:31 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2011.04.05 17:02:26 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2011.04.05 16:44:18 | 000,025,717 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2011.04.05 16:43:37 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2011.04.05 16:43:31 | 000,023,227 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2011.05.15 01:15:26 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\2K Sports
[2011.11.30 20:05:41 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\BidomaAlertXL
[2012.06.26 16:23:12 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012.06.25 23:29:23 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.03.30 16:39:22 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\DAEMON Tools Lite
[2012.10.06 14:45:29 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Dropbox
[2011.11.17 14:56:04 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\EPSON
[2011.05.14 13:37:43 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\FAH
[2011.07.07 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\GetRightToGo
[2011.05.30 00:08:17 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\go
[2011.05.14 12:54:53 | 000,000,000 | RHSD | M] -- C:\Users\User\AppData\Roaming\install
[2011.11.30 20:06:10 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\IsolatedStorage
[2011.04.08 19:14:04 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\LolClient
[2012.06.26 22:35:10 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\LolClient2
[2012.01.23 21:29:58 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\LyX2.0
[2012.06.26 20:50:42 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Notepad++
[2012.03.31 18:04:57 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Opera
[2012.03.02 17:55:16 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Origin
[2012.06.26 15:57:55 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\PDAppFlex
[2011.10.12 20:56:17 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\PhotoFiltre
[2011.07.18 14:22:22 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Research In Motion
[2012.06.26 15:59:06 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011.10.24 20:11:22 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Subversion
[2012.06.06 03:35:06 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\TeamViewer
[2011.12.30 15:38:59 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\TIPP10
[2012.08.04 13:02:17 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\TS3Client
[2012.02.13 17:52:41 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\TuneUp Software
[2011.11.27 18:28:56 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Tunngle
[2011.05.03 19:32:12 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Zylom
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:63238B95

< End of report >
--- --- ---


3. Step : Hab 64 Bit.

Danke für's Lesen und Danke wieder im Vorraus !

Mit freundlichen Grüßen
Dimi
Geändert von Dimi08 (06.10.2012 um 15:05 Uhr)

 

Themen zu Bundespolizei
antivir, autorun, avira, bho, bonjour, browser, cid, document, e-mail, error, firefox, flash player, helper, home, homepage, launch, logfile, monitor.exe, netzwerk, nodrives, nvidia update, plug-in, problem, realtek, registry, scan, senden, server, software, trojaner-board, updates, wajam, windows


« Der Verschlüsselungstrojaner mal wieder - Dateien wiederherstellen | wgsdgsdgdsgsd.exe eingefangen, GVU-Trojaner? »


Ähnliche Themen: Bundespolizei


  1. Bundespolizei
    Plagegeister aller Art und deren Bekämpfung - 09.10.2013 (5)
  2. Bundespolizei
    Plagegeister aller Art und deren Bekämpfung - 30.09.2013 (29)
  3. Bundespolizei....
    Plagegeister aller Art und deren Bekämpfung - 24.04.2013 (2)
  4. Bundespolizei
    Plagegeister aller Art und deren Bekämpfung - 16.12.2012 (4)
  5. Bundespolizei Trojaner
    Plagegeister aller Art und deren Bekämpfung - 19.09.2012 (1)
  6. Bundespolizei Pop-up
    Log-Analyse und Auswertung - 29.07.2012 (11)
  7. Bundespolizei
    Log-Analyse und Auswertung - 11.07.2012 (2)
  8. Bundespolizei Trojaner
    Log-Analyse und Auswertung - 09.07.2012 (11)
  9. GVU - Trojaner - Bundespolizei
    Log-Analyse und Auswertung - 29.06.2012 (1)
  10. Bundespolizei-Trojaner
    Plagegeister aller Art und deren Bekämpfung - 29.06.2012 (1)
  11. Bundespolizei
    Plagegeister aller Art und deren Bekämpfung - 13.04.2012 (1)
  12. Bundespolizei 100€
    Log-Analyse und Auswertung - 06.04.2012 (14)
  13. Bundespolizei...
    Plagegeister aller Art und deren Bekämpfung - 10.03.2012 (1)
  14. Bundespolizei Virus
    Plagegeister aller Art und deren Bekämpfung - 25.11.2011 (9)
  15. Nochmal Bundespolizei
    Alles rund um Windows - 22.11.2011 (4)
  16. Bundespolizei XP
    Log-Analyse und Auswertung - 11.10.2011 (4)
  17. Bundespolizei
    Plagegeister aller Art und deren Bekämpfung - 12.08.2011 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Bundespolizei - Hallo Trojaner-Board ! Mir wurde bereits vor einem Jahr sehr gut geholfen, aber leider kenne ich meinen alten Username nicht und meine alte E-Mail Adresse benutze ich nicht mehr btw. - Bundespolizei...
Archiv
Du betrachtest: Bundespolizei auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131