Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
GVU Trojaner (Abgesicherter Modus funktioniert nicht)

GVU Trojaner (Abgesicherter Modus funktioniert nicht)


Plagegeister aller Art und deren Bekämpfung: GVU Trojaner (Abgesicherter Modus funktioniert nicht)

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 14.03.2013, 21:44   #1
Bushido_RH
 
GVU Trojaner (Abgesicherter Modus funktioniert nicht) - Standard

GVU Trojaner (Abgesicherter Modus funktioniert nicht)


Guten Abend.
Vorgestern habe ich mir den GVU Trojaner eingefangen.
Ich selber dachte natürlich ich entferne sie wie früher immer über den Systemstart und schmeiße sie dort raus (habe ich meistens mit unbefuggten gemacht die nichts aufm Rechner zu suchen haben)
Naja diesmal war er nicht zu finden so habe ich alle deaktiviert (ohne Erfolg)
Ich kam wie früher auch über Pc runterfahren und dan abbrechen rein bei mir.
Nunja dan hatte ich gelesen man könnte die Datei löschen was ich auch versuchte.
Ich habe zwar eine Datei gelöscht aber es brachte immernoch nichts.
Und so kam ich heute garnicht mehr in meinen Rechner.
Überall kam der Bildschirm.
Auch Systemwiederherstellung funktioniert nicht.
So bin ich auf diese Seite gestoßen und habe es mit OTLPE probiert wie ihr es hier ja immer macht.
Freue mich aufjedenfal über jede Hilfe.
Code:
ATTFilter
OTL logfile created on: 3/14/2013 10:16:34 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = J: | %SystemRoot% = J:\Windows | %ProgramFiles% = J:\Program Files (x86)
Drive C: | 100.00 Mb Total Space | 75.87 Mb Free Space | 75.87% Space Free | Partition Type: NTFS
Drive D: | 3.72 Gb Total Space | 3.58 Gb Free Space | 96.35% Space Free | Partition Type: FAT32
Drive J: | 456.45 Gb Total Space | 125.57 Gb Free Space | 27.51% Space Free | Partition Type: NTFS
Drive K: | 456.96 Gb Total Space | 456.85 Gb Free Space | 99.98% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011/04/22 12:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto] -- J:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Live Updater Service)
SRV:64bit: - [2010/09/22 21:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled] -- J:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto] -- J:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013/03/12 16:34:15 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- J:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/18 15:36:59 | 000,968,880 | ---- | M] () [Disabled] -- J:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe -- (vToolbarUpdater14.2.0)
SRV - [2013/01/08 07:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto] -- J:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/12/14 05:17:04 | 003,467,768 | ---- | M] (TeamViewer GmbH) [Auto] -- J:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2012/12/10 12:29:46 | 002,465,712 | ---- | M] (LogMeIn Inc.) [Auto] -- J:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/12/03 11:47:14 | 001,259,880 | ---- | M] (NVIDIA Corporation) [Auto] -- J:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/11/30 17:43:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) [Auto] -- J:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012/11/12 14:41:01 | 004,539,712 | ---- | M] () [Auto] -- J:\program files (x86)\common files\akamai/netsession_win_ce5ba24.dll -- (Akamai)
SRV - [2012/10/14 03:07:59 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand] -- J:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/07/27 08:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto] -- J:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/07/22 08:03:13 | 000,076,888 | ---- | M] () [Auto] -- J:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012/06/16 18:33:29 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand] -- J:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/05/08 11:27:51 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- J:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012/05/08 11:27:50 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- J:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/10/01 03:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand] -- J:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011/10/01 03:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto] -- J:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011/06/07 06:25:12 | 000,191,752 | ---- | M] (Microsoft Corporation.) [On_Demand] -- J:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/05/29 22:54:14 | 000,036,456 | ---- | M] (Acer Incorporated) [Auto] -- J:\Program Files (x86)\Acer\Registration\GREGsvc.exe -- (GREGService)
SRV - [2011/05/12 10:59:00 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto] -- J:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2011/04/02 17:09:38 | 000,173,424 | ---- | M] (Egis Technology Inc. ) [Auto] -- J:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service)
SRV - [2011/02/01 01:24:42 | 002,656,280 | ---- | M] (Intel Corporation) [Auto] -- J:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2011/02/01 01:24:40 | 000,326,168 | ---- | M] (Intel Corporation) [Auto] -- J:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010/11/05 17:54:22 | 000,013,336 | ---- | M] (Intel Corporation) [Auto] -- J:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2010/10/21 21:00:00 | 000,376,832 | ---- | M] (AVM Berlin) [Auto] -- J:\Program Files (x86)\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2010/10/12 13:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand] -- J:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/06/01 18:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto] -- J:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
SRV - [2010/05/04 15:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto] -- J:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2010/03/18 08:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- J:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 08:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- J:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/12/09 05:24:16 | 000,076,320 | ---- | M] () [Auto] -- J:\OEM\USBDECTION\USBS3S4Detection.exe -- (USBS3S4Detection)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- J:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/05/28 12:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto] -- J:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013/02/18 15:36:59 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System] -- J:\Windows\System32\drivers\avgtpx64.sys -- (avgtp)
DRV:64bit: - [2012/12/13 08:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/07/03 11:25:16 | 000,189,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012/05/26 15:17:03 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System] -- J:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012/05/08 11:27:51 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System] -- J:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012/05/08 11:27:51 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto] -- J:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012/01/14 06:10:54 | 000,868,848 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- J:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/12/15 10:00:00 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System] -- J:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011/10/01 03:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011/10/01 03:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011/10/01 03:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- J:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011/10/01 03:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011/07/11 04:00:01 | 000,062,776 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- J:\Windows\System32\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:64bit: - [2011/07/11 04:00:01 | 000,022,648 | ---- | M] (Egis Technology Inc.) [File_System | System] -- J:\Windows\System32\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:64bit: - [2011/07/11 04:00:01 | 000,020,520 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- J:\Windows\System32\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV:64bit: - [2011/06/30 02:03:04 | 000,054,784 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand] -- J:\Windows\System32\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2011/06/30 02:03:02 | 000,077,696 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand] -- J:\Windows\System32\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2011/05/16 10:55:28 | 000,533,096 | ---- | M] (Realtek                                            ) [Kernel | On_Demand] -- J:\Windows\System32\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/10/21 21:00:00 | 000,460,800 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- J:\Windows\System32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV:64bit: - [2010/10/21 21:00:00 | 000,014,120 | ---- | M] (AVM Berlin) [Kernel | On_Demand] -- J:\Windows\System32\drivers\avmeject.sys -- (avmeject)
DRV:64bit: - [2010/10/19 04:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010/02/24 06:20:40 | 000,191,616 | ---- | M] (Protect Software GmbH) [Kernel | Auto] -- J:\Windows\System32\drivers\acedrv11.sys -- (acedrv11)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- J:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- J:\Windows\system32\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- J:\Windows\system32\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/03/18 12:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2007/03/27 13:18:58 | 010,550,272 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
 
IE - HKU\Malte_ON_J\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
IE - HKU\Malte_ON_J\Software\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={C9F3B31F-689E-4EB8-9121-C89F14CD9EEA}&mid=d8b3193c997947d0bbe6d15309af62d8-0ec5ba9e4be67d1d0ebd825782cb7604a54894a0&lang=de&ds=st011&pr=sa&d=2012-05-26 21:40:20&v=12.2.5.32&sap=hp
IE - HKU\Malte_ON_J\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Malte_ON_J\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421;<local>
 
 
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: J:\Windows\System32\Macromed\Flash\NPSWF64_11_6_602_180.dll ()
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: J:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: J:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: J:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: J:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer: J:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=:  
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0: J:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: J:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: J:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: J:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: J:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.104.0:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.116.0:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.132.0:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.2: J:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin: J:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: J:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: J:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: J:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: J:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: J:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision: J:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming: J:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: J:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: J:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: J:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1 [2013/02/18 15:37:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013/01/15 17:35:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [2013/02/23 08:09:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/11/08 13:55:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/12/17 09:15:30 | 000,000,000 | ---D | M]
 
[2012/04/26 12:59:34 | 000,000,000 | ---D | M] (No name found) -- J:\Program Files (x86)\Mozilla Firefox\extensions
[2012/06/16 18:33:29 | 000,085,472 | ---- | M] (Mozilla Foundation) -- J:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/04/04 12:49:32 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- J:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012/04/26 12:59:30 | 000,001,392 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013/02/18 15:37:03 | 000,003,716 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/03/21 10:56:44 | 000,002,313 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012/04/26 12:59:30 | 000,002,252 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/04/26 12:59:30 | 000,001,153 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012/04/26 12:59:30 | 000,006,805 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/04/26 12:59:30 | 000,001,178 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/04/26 12:59:30 | 000,001,105 | ---- | M] () -- J:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012/03/31 05:11:56 | 000,001,320 | ---- | M]) - J:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com 
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - J:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - J:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - J:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - J:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - J:\Program Files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - J:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - J:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - J:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - J:\Program Files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\Malte_ON_J\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4:64bit: - HKLM..\Run: [RTHDVCPL] J:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AVMWlanClient] J:\Program Files (x86)\avmwlanstick\WLanGUI.exe (AVM Berlin)
O4 - HKU\LocalService_ON_J..\Run: [Sidebar] J:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\Malte_ON_J..\Run: [AdobeBridge]  File not found
O4 - HKU\NetworkService_ON_J..\Run: [Sidebar] J:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\UpdatusUser_ON_J..\Run: [Sidebar] J:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_J..\RunOnce: [mctadmin]  File not found
O4 - HKU\NetworkService_ON_J..\RunOnce: [mctadmin]  File not found
O4 - HKU\UpdatusUser_ON_J..\RunOnce: [mctadmin]  File not found
O4 - HKU\UpdatusUser_ON_J..\RunOnce: [ScrSav] J:\Program Files (x86)\Acer\Screensaver\run_Acer.exe ()
O4 - Startup: Error locating startup folders.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - J:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
O9:64bit: - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - J:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - J:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - J:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - J:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - J:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - J:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - J:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13:64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - J:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - J:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - J:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKU\Malte_ON_J Winlogon: Shell - (explorer.exe) - J:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKU\Malte_ON_J Winlogon: Shell - (C:\Users\Malte\AppData\Roaming\skype.dat) - J:\Users\Malte\AppData\Roaming\skype.dat ()
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/03/13 06:44:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\drivers\usb8023.sys
[2013/03/12 18:45:12 | 002,312,704 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\jscript9.dll
[2013/03/12 18:45:12 | 001,494,528 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\inetcpl.cpl
[2013/03/12 18:45:12 | 001,427,968 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\inetcpl.cpl
[2013/03/12 18:45:12 | 000,248,320 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\ieui.dll
[2013/03/12 18:45:12 | 000,237,056 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\url.dll
[2013/03/12 18:45:12 | 000,231,936 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\url.dll
[2013/03/12 18:45:12 | 000,176,640 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ieui.dll
[2013/03/12 18:45:12 | 000,173,056 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\ieUnatt.exe
[2013/03/12 18:45:12 | 000,142,848 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ieUnatt.exe
[2013/03/12 18:45:12 | 000,096,768 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\mshtmled.dll
[2013/03/12 18:45:12 | 000,073,216 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\mshtmled.dll
[2013/03/12 18:45:11 | 001,800,704 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\jscript9.dll
[2013/03/12 18:45:11 | 000,816,640 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\jscript.dll
[2013/03/12 18:45:11 | 000,729,088 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\msfeeds.dll
[2013/03/12 18:45:11 | 000,717,824 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\jscript.dll
[2013/03/12 18:45:11 | 000,607,744 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\msfeeds.dll
[2013/03/12 18:45:11 | 000,599,040 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\vbscript.dll
[2013/03/12 18:45:07 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/03/12 18:44:32 | 000,000,000 | ---D | C] -- J:\Program Files\Microsoft Silverlight
[2013/03/12 18:44:32 | 000,000,000 | ---D | C] -- J:\Program Files (x86)\Microsoft Silverlight
[2013/03/04 15:51:19 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Roaming\13001.072
[2013/03/03 16:08:35 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Roaming\xmldm
[2013/03/03 16:08:35 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Roaming\ckoock
[2013/02/28 13:11:33 | 002,284,544 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\msmpeg2vdec.dll
[2013/02/28 13:11:32 | 002,776,576 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\msmpeg2vdec.dll
[2013/02/28 13:11:32 | 000,221,184 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\UIAnimation.dll
[2013/02/28 13:11:32 | 000,187,392 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\UIAnimation.dll
[2013/02/28 13:11:29 | 000,465,920 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\WMPhoto.dll
[2013/02/28 13:11:29 | 000,417,792 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\WMPhoto.dll
[2013/02/28 13:11:26 | 000,194,560 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d10_1.dll
[2013/02/28 13:11:26 | 000,161,792 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d10_1.dll
[2013/02/28 13:11:26 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/02/28 13:11:26 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/02/28 13:11:26 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/02/28 13:11:26 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/02/28 13:11:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/02/28 13:11:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/02/28 13:11:26 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/02/28 13:11:26 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/02/28 13:11:25 | 002,565,120 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d10warp.dll
[2013/02/28 13:11:25 | 001,988,096 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d10warp.dll
[2013/02/28 13:11:24 | 000,522,752 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\XpsGdiConverter.dll
[2013/02/28 13:11:24 | 000,364,544 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\XpsGdiConverter.dll
[2013/02/28 13:11:24 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/02/28 13:11:24 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/02/28 13:11:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/02/28 13:11:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/02/28 13:11:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/02/28 13:11:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/02/28 13:11:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/02/28 13:11:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/02/28 13:11:23 | 003,928,064 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d2d1.dll
[2013/02/28 13:11:23 | 001,887,232 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d11.dll
[2013/02/28 13:11:23 | 001,682,432 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\XpsPrint.dll
[2013/02/28 13:11:23 | 001,643,520 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\DWrite.dll
[2013/02/28 13:11:23 | 001,504,768 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d11.dll
[2013/02/28 13:11:23 | 001,424,384 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\WindowsCodecs.dll
[2013/02/28 13:11:23 | 001,247,744 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\DWrite.dll
[2013/02/28 13:11:23 | 001,238,528 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d10.dll
[2013/02/28 13:11:23 | 001,158,144 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\XpsPrint.dll
[2013/02/28 13:11:23 | 001,080,832 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d10.dll
[2013/02/28 13:11:23 | 000,648,192 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d10level9.dll
[2013/02/28 13:11:23 | 000,604,160 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d10level9.dll
[2013/02/28 13:11:23 | 000,363,008 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\dxgi.dll
[2013/02/28 13:11:23 | 000,333,312 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d10_1core.dll
[2013/02/28 13:11:23 | 000,296,960 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\d3d10core.dll
[2013/02/28 13:11:23 | 000,293,376 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\dxgi.dll
[2013/02/28 13:11:23 | 000,249,856 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d10_1core.dll
[2013/02/28 13:11:23 | 000,245,248 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\WindowsCodecsExt.dll
[2013/02/28 13:11:23 | 000,220,160 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d3d10core.dll
[2013/02/28 13:11:23 | 000,207,872 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\WindowsCodecsExt.dll
[2013/02/28 13:11:23 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/02/28 13:11:23 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- J:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/02/28 13:11:22 | 003,419,136 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\d2d1.dll
[2013/02/23 08:09:05 | 000,000,000 | ---D | C] -- J:\Program Files (x86)\DVDVideoSoft
[2013/02/23 08:09:05 | 000,000,000 | ---D | C] -- J:\Program Files (x86)\Common Files\DVDVideoSoft
[2013/02/22 18:20:36 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Local\{888A6EFF-753A-4FE0-B347-7AEE8ABDC170}
[2013/02/21 13:15:17 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/02/21 13:14:41 | 000,000,000 | ---D | C] -- J:\Program Files\iTunes
[2013/02/21 13:14:41 | 000,000,000 | ---D | C] -- J:\Program Files (x86)\iTunes
[2013/02/21 13:14:41 | 000,000,000 | ---D | C] -- J:\Program Files\iPod
[2013/02/21 13:14:41 | 000,000,000 | ---D | C] -- J:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/02/16 14:45:33 | 000,000,000 | ---D | C] -- J:\Users\Malte\Desktop\Santiano-Bis_Ans_Ende_Der_Welt-DE-2012-FiH
[2013/02/15 11:15:45 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Local\{19D05E0A-1BBC-4828-BE9C-F11A779A564A}
[2013/02/14 15:52:53 | 005,553,512 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\ntoskrnl.exe
[2013/02/14 15:52:53 | 003,967,848 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ntkrnlpa.exe
[2013/02/14 15:52:53 | 003,913,064 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ntoskrnl.exe
[2013/02/14 15:36:53 | 000,288,088 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\drivers\FWPKCLNT.SYS
[2013/02/14 14:32:46 | 000,215,040 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\winsrv.dll
[2013/02/14 14:32:46 | 000,025,600 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\setup16.exe
[2013/02/14 14:32:46 | 000,014,336 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ntvdm64.dll
[2013/02/14 14:32:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\instnm.exe
[2013/02/14 14:32:46 | 000,005,120 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\wow32.dll
[2013/02/14 14:32:45 | 000,002,048 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\user.exe
[2013/02/14 13:25:54 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Local\{5CA9F9D4-AB08-48F1-9832-44CD92388E1B}
[2013/02/13 13:17:46 | 000,000,000 | ---D | C] -- J:\Users\Malte\AppData\Local\{9C6875AF-D9F8-4E87-90F0-F0C34CF717B5}
[2012/11/26 12:24:48 | 000,044,544 | ---- | C] (Microsoft Corporation) -- J:\ProgramData\lsass.exe
[2007/03/12 06:41:52 | 000,061,440 | ---- | C] ( ) -- J:\Windows\SysWow64\vsnpstd3.dll
[2 J:\Users\Malte\AppData\Roaming\*.tmp files -> J:\Users\Malte\AppData\Roaming\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013/03/14 16:03:55 | 000,067,584 | --S- | M] () -- J:\Windows\bootstat.dat
[2013/03/14 15:53:39 | 000,654,594 | ---- | M] () -- J:\Windows\System32\perfh007.dat
[2013/03/14 15:53:39 | 000,616,476 | ---- | M] () -- J:\Windows\System32\perfh009.dat
[2013/03/14 15:53:39 | 000,130,208 | ---- | M] () -- J:\Windows\System32\perfc007.dat
[2013/03/14 15:53:39 | 000,106,598 | ---- | M] () -- J:\Windows\System32\perfc009.dat
[2013/03/14 15:49:25 | 4279,431,166 | -HS- | M] () -- J:\hiberfil.sys
[2013/03/14 15:16:53 | 000,000,004 | ---- | M] () -- J:\Users\Malte\AppData\Roaming\skype.ini
[2013/03/14 15:02:05 | 000,016,752 | -H-- | M] () -- J:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/03/14 15:02:05 | 000,016,752 | -H-- | M] () -- J:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/03/14 00:18:00 | 000,000,884 | ---- | M] () -- J:\Windows\tasks\Adobe Flash Player Updater.job
[2013/03/13 23:26:04 | 000,001,138 | ---- | M] () -- J:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1696833072-3802408556-3082212168-1000UA.job
[2013/03/13 17:26:00 | 000,001,116 | ---- | M] () -- J:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1696833072-3802408556-3082212168-1000Core.job
[2013/03/13 16:57:12 | 000,000,314 | ---- | M] () -- J:\Users\Malte\Documents\aionmemo_3235d832.dat
[2013/03/13 13:30:58 | 000,217,977 | ---- | M] () -- J:\Users\Malte\Desktop\Liebe.jpg
[2013/03/12 18:45:07 | 000,000,000 | ---D | M] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/03/12 16:34:15 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- J:\Windows\SysWow64\FlashPlayerApp.exe
[2013/03/12 16:34:15 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- J:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/03/10 18:12:28 | 000,238,029 | ---- | M] () -- J:\Users\Malte\Desktop\rawr 4.jpg
[2013/03/10 18:11:14 | 000,236,584 | ---- | M] () -- J:\Users\Malte\Desktop\Rawr 3.jpg
[2013/03/10 14:39:28 | 000,017,869 | ---- | M] () -- J:\Users\Malte\Desktop\^^.jpg
[2013/03/09 18:35:04 | 000,483,360 | ---- | M] () -- J:\Users\Malte\Desktop\Aion0045.jpg
[2013/03/04 15:52:19 | 000,226,400 | ---- | M] () -- J:\Users\Malte\AppData\Roaming\AcroIEHelpe001256.dll
[2013/03/04 15:52:19 | 000,007,104 | ---- | M] () -- J:\Users\Malte\AppData\Roaming\BAcroIEHelpe001256.dll
[2013/03/03 16:49:41 | 002,502,737 | ---- | M] () -- J:\Users\Malte\Desktop\IMG_0202.JPG
[2013/03/03 16:12:46 | 000,000,512 | ---- | M] () -- J:\Users\Malte\AppData\Roaming\rost.dat
[2013/02/26 15:51:31 | 000,064,159 | ---- | M] () -- J:\Users\Malte\Desktop\webcam-toy-foto6.jpg
[2013/02/24 11:32:53 | 000,229,181 | ---- | M] () -- J:\Users\Malte\Desktop\111.png
[2013/02/23 08:09:10 | 000,000,000 | ---D | M] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2013/02/21 13:15:18 | 000,001,787 | ---- | M] () -- J:\Users\Public\Desktop\iTunes.lnk
[2013/02/21 13:15:18 | 000,000,000 | ---D | M] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/02/18 15:36:59 | 000,039,768 | ---- | M] (AVG Technologies) -- J:\Windows\System32\drivers\avgtpx64.sys
[2013/02/15 11:13:35 | 004,994,904 | ---- | M] () -- J:\Windows\System32\FNTCACHE.DAT
[2013/02/14 13:37:04 | 000,100,612 | ---- | M] () -- J:\Users\Malte\Desktop\schluessel-herz.jpg
[2013/02/14 10:39:16 | 001,982,006 | ---- | M] () -- J:\Users\Malte\Desktop\IMG_0194.JPG
[2013/02/14 10:39:07 | 000,393,770 | ---- | M] () -- J:\Users\Malte\Desktop\IMG_0193.JPG
[2013/02/14 10:38:24 | 001,882,463 | ---- | M] () -- J:\Users\Malte\Desktop\IMG_0192.JPG
[2013/02/14 10:38:13 | 001,703,465 | ---- | M] () -- J:\Users\Malte\Desktop\IMG_0191.JPG
[2013/02/14 10:38:09 | 001,904,144 | ---- | M] () -- J:\Users\Malte\Desktop\IMG_0190.JPG
[2 J:\Users\Malte\AppData\Roaming\*.tmp files -> J:\Users\Malte\AppData\Roaming\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013/03/13 13:30:58 | 000,217,977 | ---- | C] () -- J:\Users\Malte\Desktop\Liebe.jpg
[2013/03/12 18:32:29 | 000,000,004 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\skype.ini
[2013/03/10 18:12:28 | 000,238,029 | ---- | C] () -- J:\Users\Malte\Desktop\rawr 4.jpg
[2013/03/10 18:11:14 | 000,236,584 | ---- | C] () -- J:\Users\Malte\Desktop\Rawr 3.jpg
[2013/03/10 14:39:27 | 000,017,869 | ---- | C] () -- J:\Users\Malte\Desktop\^^.jpg
[2013/03/09 18:35:00 | 000,483,360 | ---- | C] () -- J:\Users\Malte\Desktop\Aion0045.jpg
[2013/03/04 15:51:34 | 000,007,104 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\BAcroIEHelpe001256.dll
[2013/03/04 15:51:33 | 000,226,400 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\AcroIEHelpe001256.dll
[2013/03/04 15:35:43 | 002,502,737 | ---- | C] () -- J:\Users\Malte\Desktop\IMG_0202.JPG
[2013/03/03 16:12:46 | 000,000,512 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\rost.dat
[2013/02/26 15:51:29 | 000,064,159 | ---- | C] () -- J:\Users\Malte\Desktop\webcam-toy-foto6.jpg
[2013/02/24 11:32:44 | 000,229,181 | ---- | C] () -- J:\Users\Malte\Desktop\111.png
[2013/02/14 13:55:40 | 001,982,006 | ---- | C] () -- J:\Users\Malte\Desktop\IMG_0194.JPG
[2013/02/14 13:55:40 | 001,904,144 | ---- | C] () -- J:\Users\Malte\Desktop\IMG_0190.JPG
[2013/02/14 13:55:40 | 001,882,463 | ---- | C] () -- J:\Users\Malte\Desktop\IMG_0192.JPG
[2013/02/14 13:55:40 | 001,703,465 | ---- | C] () -- J:\Users\Malte\Desktop\IMG_0191.JPG
[2013/02/14 13:55:40 | 000,393,770 | ---- | C] () -- J:\Users\Malte\Desktop\IMG_0193.JPG
[2013/02/14 13:37:03 | 000,100,612 | ---- | C] () -- J:\Users\Malte\Desktop\schluessel-herz.jpg
[2013/01/08 16:38:10 | 000,000,140 | ---- | C] () -- J:\ProgramData\dsgsdgdsgdsgw1.reg
[2012/12/13 13:49:19 | 000,007,104 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\BAcroIEHelpe245.dll
[2012/12/12 13:07:42 | 000,007,104 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\BAcroIEHelpe244.dll
[2012/09/11 12:06:33 | 004,503,728 | ---- | C] () -- J:\ProgramData\dsgsdgdsgdsgw.pad
[2012/08/14 08:59:10 | 000,000,581 | ---- | C] () -- J:\Windows\eReg.dat
[2012/07/28 18:29:46 | 000,000,051 | ---- | C] () -- J:\ProgramData\ctuomgsajtshftg
[2012/07/19 16:37:10 | 000,000,011 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\urhtps.dat
[2012/07/11 17:53:18 | 000,000,068 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\blckdom.res
[2012/06/05 10:58:37 | 000,004,608 | ---- | C] () -- J:\Users\Malte\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/05/26 17:56:16 | 000,000,119 | ---- | C] () -- J:\Windows\Apache3.INI
[2012/02/26 14:49:11 | 000,164,352 | -HS- | C] () -- J:\Windows\SysWow64\SC.dll
[2012/01/24 16:27:15 | 001,526,060 | ---- | C] () -- J:\Windows\SysWow64\PerfStringBackup.INI
[2012/01/18 10:02:48 | 046,592,716 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\.minecraft.rar
[2012/01/11 09:59:33 | 000,114,688 | ---- | C] () -- J:\Users\Malte\AppData\Roaming\skype.dat
[2011/12/07 23:02:11 | 000,281,520 | ---- | C] () -- J:\Windows\SysWow64\PnkBstrB.exe
[2011/12/07 23:02:07 | 000,076,888 | ---- | C] () -- J:\Windows\SysWow64\PnkBstrA.exe
[2011/11/26 15:43:15 | 000,175,616 | ---- | C] () -- J:\Windows\SysWow64\unrar.dll
[2011/11/26 15:43:08 | 000,650,752 | ---- | C] () -- J:\Windows\SysWow64\xvidcore.dll
[2011/11/26 15:43:08 | 000,243,200 | ---- | C] () -- J:\Windows\SysWow64\xvidvfw.dll
[2011/11/26 15:43:08 | 000,074,752 | ---- | C] () -- J:\Windows\SysWow64\ff_vfw.dll
[2010/11/20 23:24:49 | 000,252,928 | ---- | C] () -- J:\Windows\SysWow64\DShowRdpFilter.dll
[2010/04/02 11:17:34 | 000,179,091 | ---- | C] () -- J:\Windows\SysWow64\xlive.dll.cat
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- J:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- J:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- J:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- J:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- J:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- J:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- J:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- J:\Windows\SysWow64\mlang.dat
[2008/12/09 11:23:13 | 000,066,048 | RHS- | C] () -- J:\Users\Malte\AppData\Roaming\jabconf32.exe
[2006/09/19 04:07:28 | 000,827,392 | ---- | C] () -- J:\Windows\vsnpstd3.exe
[2004/02/27 11:36:18 | 000,015,498 | ---- | C] () -- J:\Windows\snpstd3.ini
[2004/01/26 12:15:29 | 000,233,472 | R--- | C] () -- J:\Windows\SysWow64\MafiaSetup.exe
 
========== LOP Check ==========
 
[2013/02/21 13:15:10 | 000,000,000 | ---D | M] -- J:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2011/07/11 03:39:52 | 000,000,000 | ---D | M] -- J:\ProgramData\Acer
[2011/11/22 15:01:44 | 000,000,000 | -HSD | M] -- J:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Application Data
[2012/11/08 13:44:18 | 000,000,000 | ---D | M] -- J:\ProgramData\AVG Secure Search
[2012/03/21 10:56:42 | 000,000,000 | ---D | M] -- J:\ProgramData\Babylon
[2011/12/26 07:03:51 | 000,000,000 | ---D | M] -- J:\ProgramData\Bagger-Simulator 2011
[2011/12/21 13:02:21 | 000,000,000 | -H-D | M] -- J:\ProgramData\CanonBJ
[2011/12/24 16:42:16 | 000,000,000 | ---D | M] -- J:\ProgramData\CDRWIN 9 Basic
[2013/03/14 14:54:47 | 000,000,000 | ---D | M] -- J:\ProgramData\clear.fi
[2012/05/26 15:39:46 | 000,000,000 | -H-D | M] -- J:\ProgramData\Common Files
[2012/05/26 15:18:05 | 000,000,000 | ---D | M] -- J:\ProgramData\DAEMON Tools Lite
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Documents
[2011/11/22 15:01:44 | 000,000,000 | -HSD | M] -- J:\ProgramData\Dokumente
[2011/11/26 09:11:21 | 000,000,000 | ---D | M] -- J:\ProgramData\EA Core
[2012/02/18 04:43:22 | 000,000,000 | ---D | M] -- J:\ProgramData\EA Logs
[2011/12/29 08:36:13 | 000,000,000 | ---D | M] -- J:\ProgramData\Easy Driver Pro
[2011/10/18 16:04:46 | 000,000,000 | ---D | M] -- J:\ProgramData\EgisTec
[2011/10/18 16:04:42 | 000,000,000 | ---D | M] -- J:\ProgramData\EgisTec IPS
[2011/12/08 13:46:22 | 000,000,000 | ---D | M] -- J:\ProgramData\Electronic Arts
[2011/11/22 15:01:44 | 000,000,000 | -HSD | M] -- J:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Favorites
[2011/12/13 14:38:32 | 000,000,000 | ---D | M] -- J:\ProgramData\Licenses
[2011/11/22 15:03:45 | 000,000,000 | ---D | M] -- J:\ProgramData\oem
[2012/12/15 06:46:08 | 000,000,000 | ---D | M] -- J:\ProgramData\Origin
[2013/02/12 17:39:14 | 000,000,000 | ---D | M] -- J:\ProgramData\PMB Files
[2012/02/16 16:39:54 | 000,000,000 | ---D | M] -- J:\ProgramData\PWD
[2012/02/25 13:49:37 | 000,000,000 | ---D | M] -- J:\ProgramData\regid.1986-12.com.adobe
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Start Menu
[2011/11/22 15:01:44 | 000,000,000 | -HSD | M] -- J:\ProgramData\Startmenü
[2012/04/26 15:11:17 | 000,000,000 | ---D | M] -- J:\ProgramData\Synetic
[2012/04/15 08:17:41 | 000,000,000 | ---D | M] -- J:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Templates
[2011/12/31 16:26:35 | 000,000,000 | ---D | M] -- J:\ProgramData\Test Drive Unlimited
[2012/07/22 05:16:35 | 000,000,000 | ---D | M] -- J:\ProgramData\TmForever
[2012/05/11 17:34:07 | 000,000,000 | ---D | M] -- J:\ProgramData\Ubisoft
[2012/07/28 18:29:56 | 000,000,000 | ---D | M] -- J:\ProgramData\vbyttbuvncngkwc
[2012/01/24 19:35:02 | 000,000,000 | ---D | M] -- J:\ProgramData\VirtualizedApplications
[2011/11/22 15:01:44 | 000,000,000 | -HSD | M] -- J:\ProgramData\Vorlagen
[2012/12/04 18:40:38 | 000,000,000 | ---D | M] -- J:\ProgramData\WildTangent
[2012/11/17 14:25:36 | 000,000,000 | ---D | M] -- J:\ProgramData\WindSolutions
[2012/01/11 11:39:27 | 000,000,000 | ---D | M] -- J:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2013/03/13 17:26:00 | 000,001,116 | ---- | M] () -- J:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1696833072-3802408556-3082212168-1000Core.job
[2013/03/13 23:26:04 | 000,001,138 | ---- | M] () -- J:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1696833072-3802408556-3082212168-1000UA.job
[2012/12/29 03:56:08 | 000,032,640 | ---- | M] () -- J:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 139 bytes -> J:\ProgramData\Temp:B2AA1B61
< End of report >

Alt 14.03.2013, 22:38   #2
ryder
/// TB-Ausbilder
 
GVU Trojaner (Abgesicherter Modus funktioniert nicht) - Standard

GVU Trojaner (Abgesicherter Modus funktioniert nicht)


Zitat:
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
Die von mir gelisteten Einträge deuten stark darauf hin, dass auf diesem Rechner Software benutzt wird, die nicht legal erworben wurde.

Supportstopp
Lesestoff:
Cracks und Keygens
Den Kopierschutz von Software zu umgehen ist nach geltendem Recht illegal. Die Logfiles deuten stark darauf hin, dass du nicht legal erworbene Software einsetzt. Zudem sind Cracks und Patches aus dubioser Quelle sehr oft mit Schädlingen versehen, womit man sich also fast vorsätzlich infiziert.

Wir haben uns hier auf dem Board darauf geeinigt, dass wir an dieser Stelle nicht weiter bereinigen, da wir ein solches Vorgehen nicht unterstützen. Hinzu kommt, dass wir dich in unserer Anleitung und auch in diesem Wichtig-Thema unmissverständlich darauf hingewiesen haben, wie wir damit umgehen werden. Saubere, gute Software hat seinen Preis und die Softwarefirmen leben von diesen Einnahmen.

Unsere Hilfe beschränkt sich daher nur auf das Neuaufsetzen und Absichern deines Systems.
Fragen dazu beantworten wir dir aber weiterhin gerne und zwar in unserem Forum.
Damit ist das Thema beendet.
__________________

__________________
Alt 17.03.2013, 10:22   #3
Bushido_RH
 
GVU Trojaner (Abgesicherter Modus funktioniert nicht) - Standard

GVU Trojaner (Abgesicherter Modus funktioniert nicht)


Natürlich versteh ich euch.
Schade das auf die Privat Nachricht nicht geantwortet hast.
Ich wusste garnicht mehr das ich es noch habe.
Benutzt habe ich nur die Testversion und der Crack funktionierte nie.
Leider komme ich an meine Ausbildungsberichte über euer Programm nicht mehr ran.
Wenn ich das Programm lösche könntest mir bitte helfen??
__________________
Antwort

Themen zu GVU Trojaner (Abgesicherter Modus funktioniert nicht)
antivir, autorun, avg, avg secure search, avg security toolbar, avira, bho, bingbar, bonjour, browser, cid, datei gelöscht, defender, desktop, dvdvideosoft ltd., error, firefox, flash player, format, helper, home, launch, logfile, mozilla, plug-in, realtek, registry, scan, secure search, security, software, symantec, trojaner, vtoolbarupdater, wildtangent games


« Werde pup.installbrain nicht los | Groupon Trojaner - wie prüfe ich das System richtig? »


Ähnliche Themen: GVU Trojaner (Abgesicherter Modus funktioniert nicht)


  1. Windows XP - GVU-Trojaner abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 21.05.2014 (15)
  2. GVU Trojaner-Abgesicherter Modus mit Eingabeaufforderung funktioniert nicht
    Log-Analyse und Auswertung - 09.02.2014 (3)
  3. GVU Trojaner - Windows XP - Abgesicherter Modus funktioniert nicht :(
    Plagegeister aller Art und deren Bekämpfung - 11.11.2013 (5)
  4. GVU Trojaner (abgesicherter modus funktioniert nicht)
    Log-Analyse und Auswertung - 23.10.2013 (10)
  5. Bundespolizei Trojaner, Abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 06.09.2013 (5)
  6. GVU-Trojaner; abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 02.08.2013 (12)
  7. GVU Trojaner, abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 13.07.2013 (10)
  8. GVU Trojaner beseitigen, abgesicherter Modus funktioniert nicht
    Log-Analyse und Auswertung - 24.06.2013 (11)
  9. GVU Trojaner - abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 05.06.2013 (13)
  10. Landespolizeidirection Trojaner, abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 24.05.2013 (3)
  11. GVU Trojaner, abgesicherter Modus funktioniert nicht
    Log-Analyse und Auswertung - 15.05.2013 (7)
  12. GVU Trojaner - Auch abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 17.04.2013 (25)
  13. GVU-Trojaner entfernen (abgesicherter Modus funktioniert nicht)
    Plagegeister aller Art und deren Bekämpfung - 10.04.2013 (12)
  14. GVU-/Bundespolizei-Trojaner, abgesicherter Modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 28.02.2013 (16)
  15. Bundespolizei Trojaner - Abgesicherter Modus funktioniert nicht
    Log-Analyse und Auswertung - 18.07.2012 (2)
  16. bundespolizei trojaner, abgesicherter modus funktioniert nicht (win xp pro)
    Plagegeister aller Art und deren Bekämpfung - 29.03.2012 (7)
  17. ukash trojaner-abgesicherter modus funktioniert nicht
    Plagegeister aller Art und deren Bekämpfung - 23.09.2011 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU Trojaner (Abgesicherter Modus funktioniert nicht) - Guten Abend. Vorgestern habe ich mir den GVU Trojaner eingefangen. Ich selber dachte natürlich ich entferne sie wie früher immer über den Systemstart und schmeiße sie dort raus (habe ich - GVU Trojaner (Abgesicherter Modus funktioniert nicht)...
Archiv
Du betrachtest: GVU Trojaner (Abgesicherter Modus funktioniert nicht) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129