| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Silentbanker - flacor.datWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
12.09.2010, 14:59
| #16 |
| /// Malware-holic   |  Silentbanker - flacor.dat da warst du aber flink :-) nutze den ccleaner, dateien +registry bereinigen. http://www.trojaner-board.de/51464-a...-ccleaner.html reinige mit otcleanit: http://oldtimer.geekstogo.com/OTM.exe Klicke cleanup! dein pc wird evtl. neu starten programm löscht sich selbst, + die verwendeten tools nutze den eset online scanner, poste das ergebniss: Free ESET Online Antivirus Scanner |
|
12.09.2010, 20:19
| #17 |
 | Silentbanker - flacor.dat soll ich nur bei "remove found threats" einen hacken setzen ???
__________________ |
|
12.09.2010, 20:23
| #18 |
| /// Malware-holic | Silentbanker - flacor.dat ja und bei scan archives muss glaub ich auch noch einer hin.
__________________ |
|
13.09.2010, 06:39
| #19 |
| | Silentbanker - flacor.dat eset log Code:
ATTFilter C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\6a61a4db-1943845d multiple threats deleted - quarantined
C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\30feb821-7c89449e Java/TrojanDownloader.Agent.NBK trojan deleted - quarantined
C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\31bba1f4-1ef0e6ea Java/TrojanDownloader.Agent.NBL trojan deleted - quarantined
C:\Users\*****\Desktop\Games\Anno.1404.Venedig.GERMAN-0x0007\de-a14v.iso Win32/Packed.VMProtect.D trojan deleted - quarantined
C:\Users\*****\Desktop\Games\The Witcher\tdm-twee-d2.iso Win32/Packed.Themida.F trojan deleted - quarantined
C:\Users\*****\Downloads\Alpha.Protocol-SKIDROW\DVD2\sr-apd2.iso a variant of Win32/Packed.VMProtect.AAA trojan deleted - quarantined
C:\Users\*****\Downloads\NeRo_9.2.6.0_Ultra.Edition.HD_deutsch_ohne_Patent_Activation\Nero.9.2.6.0.exe Win32/Toolbar.AskSBar application deleted - quarantined
Geändert von Mr.X 1991 (13.09.2010 um 07:18 Uhr) |
|
13.09.2010, 13:02
| #20 |
| /// Malware-holic | Silentbanker - flacor.dat leere den java chache. Löschen des Caches von Java Runtime Environment (JRE) setze folgendes um: dep aktivieren: dep für alle prozesse: Datenausführungsverhinderung (DEP) • "Datenausführungsverhinderung für alle Programme und Dienste mit Ausnahme der ausgewählten einschalten:". wenn es zu problemen kommen sollte, kann man die betroffenen prozesse aus der Überwachung entfernen. als browser den firefox nutzen: Webbrowser Firefox | Schneller, sicherer & anpassbar | Mozilla Europe als adon noscript, es werden dadurch einige scripts (java) zb blockiert, du kannst diese dann frei geben, in dem du auf der seite, die freigegeben werden soll, nen rechtsklick machst, noscript wählst, und temporär alle berectigungen aufheben wählst, somit werden sie für den besuch aufgehoben, oder alle beschrenkungen aufheben, somit wird die seite freigegeben. das kann man natürlich wieder rückgängig machen. http://filepony.de/download-adblock_firefox// hier gibt es noch filterlisten: Bekannte Filterlisten für Adblock Plus hier würde ich 2 oder 3 deutsche filter auswählen. unter sonstiges die malware blocklist. um das surfen sicherer zu machen, würde ich Sandboxie empfehlen. Download: drop.io (als pdf) wenn du mit dem programm gut auskommst, ist ne lizenz zu empfehlen. 1. es gibt dann noch ein paar mehr funktionen. 2. kommt nach nem monat die anzeige, dass das programm freeware ist, die verschwindet erst nach ner zeit, find ich n bissel nerfig. 3. ist die lizenz lebenslang gültig, kostenpunkt rund 25 €, und du kannst sie auf allen pcs in deinem haushalt einsetzen. autorun für usb deaktivieren: über diesen weg werden sehr häufig schaddateien verbreitet, schalte die funktion also ab. Tipparchiv - Autorun/Autoplay gezielt für Laufwerkstypen oder -buchstaben abschalten - WinTotal.de usb sticks, festplatten etc, sollte man mit panda vaccine impfen: ANTIMALWARE: Panda USB Vaccine - Download FREE - PANDA SECURITY so holt man sich keine infektionen ins haus, wenn man mal die festplatte etc verleit. regelmäßige Backups des systems sind sehr wichtig, du weist nie, ob deine festplatte mal kaputt geht. Acronis True Image 2011 - Festplatten-Backup-Software, Datei-Backup und Disk Imaging, Wiederherstellung von Anwendungseinstellungen, Backup von Musik, Videos, Fotos und Outlook-Mails außerdem kannst du, bei neuerlichem malware befall das system zurücksetzen. Das Backup sollte möglichst auf eine externe festplatte etc emacht werden, nicht auf die selbe, wo sich die zu sichernden daten befinden. Von sehr wichtigen Daten könnte man noch eine zusätzliche Sicherung auf dvds/cds erstellen, dazu könnte man auch wiederbeschreibbare verwenden (rws) falls die sammlung mal erneuert werden soll. passwörter endern. alsonun nur noch in der sandbox surfen, klicke dazu auf sandboxed web browser |
|
13.09.2010, 13:55
| #21 |
| | Silentbanker - flacor.dat also sandbox hab ich panda hab ich auch, klappt aber irgendwie nicht weil antivir "zu meiner sicherheit J:\AUTORUN.INF blockiert" und wegen dem festplatten backup- hab sowieso im augenblick nichts wo ich sichern könnte PS: ist das file hippo update checker für ne einmalige nutzung, also automatische deinstallation ??? und bei der sandbox mit firewall gibt es probleme wenn ich videos auf youtube anschauen will: bei no script lass ich alles tempörär laufen um mir das video anzuschauen, aber firefox hängt dann ohne sandbox klappt es Geändert von Mr.X 1991 (13.09.2010 um 14:15 Uhr) |
|
13.09.2010, 14:36
| #22 |
| /// Malware-holic | Silentbanker - flacor.dat hi, der file hippo ist nicht für den einmaligen gebraucht, der zeigt dir die neusten updates an. also drauf lassen! öffne mal avira, konfiguration, guard, autostart, da haken raus nehmen, ok klicken. welche firefox version nutzt du? ich sehe noch folgendes, was mit HijackThis gefixt werden muss, öffne hijackthis, klicke scan, hake an: O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present fix checked klicken. |
|
13.09.2010, 14:44
| #23 |
| | Silentbanker - flacor.dat also das fixen hat nicht geklappt und bei avira gibt es keine möglichkeit autostart auszuschalten es gibt bei den configs nur suche und report unter guard ich hab firefox 3.6 |
|
13.09.2010, 14:46
| #24 |
| /// Malware-holic | Silentbanker - flacor.dat du musst die liste schon aufklappen unter guard, dann findest du es auch. schließe mal alle offenen browser fenster, nach dem du das angehakt hast und klicke dann fix checked. |
|
13.09.2010, 15:02
| #25 |
| | Silentbanker - flacor.dat also unter guard,suche, aktion bei fund gab es autostart-funktion blockieren. Hab den hacken weggemacht, firefox beendet und nochmal versucht mit hijack die 2 zu fixen hat net geklappt |
|
13.09.2010, 15:05
| #26 |
| /// Malware-holic | Silentbanker - flacor.dat ok poste nen neues otl log. otl.txt reicht, extras.txt brauche ich nicht. |
|
13.09.2010, 15:12
| #27 |
| | Silentbanker - flacor.dat hey hatten wir schon otl ??? Ich erinner mich nur an OTM. |
|
13.09.2010, 15:12
| #28 |
| /// Malware-holic | Silentbanker - flacor.dat ootl: Systemscan mit OTL download otl: http://filepony.de/download-otl/ Doppelklick auf die OTL.exe (user von Windows 7 und Vista: Rechtsklick als Administrator ausführen) 1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output 2. Hake an "scan all users" 3. Unter "Extra Registry wähle: "Use Safelist" "LOP Check" "Purity Check" 4. Kopiere in die Textbox: netsvcs msconfig safebootminimal safebootnetwork activex drivers32 %ALLUSERSPROFILE%\Application Data\*. %ALLUSERSPROFILE%\Application Data\*.exe /s %APPDATA%\*. %APPDATA%\*.exe /s %SYSTEMDRIVE%\*.exe /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles CREATERESTOREPOINT 5. Klicke "Scan" 6. 2 reporte werden erstellt: OTL.Txt Extras.Txt poste nur otl.txt |
|
13.09.2010, 15:33
| #29 |
| | Silentbanker - flacor.dat otl log OTL Logfile: Code:
ATTFilter OTL logfile created on: 2010-09-13 16:18:59 - Run 1 OTL by OldTimer - Version 3.2.12.0 Folder = C:\Users\****\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: yyyy-MM-dd 2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 48.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 72.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 445.24 Gb Total Space | 46.70 Gb Free Space | 10.49% Space Free | Partition Type: NTFS Drive D: | 20.51 Gb Total Space | 13.92 Gb Free Space | 67.88% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded Drive I: | 3.97 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF Drive J: | 955.70 Mb Total Space | 2.39 Mb Free Space | 0.25% Space Free | Partition Type: FAT Computer Name: YEAH Current User Name: **** Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\****\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Programme\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) PRC - C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft) PRC - C:\Programme\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme\Sandboxie\SbieSvc.exe (SANDBOXIE L.T.D) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avcenter.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH) PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) PRC - C:\Programme\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) PRC - C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin) PRC - C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Windows\System32\conime.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG) PRC - C:\Programme\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) PRC - C:\Programme\Medion\MEDIONbox\Program\GCS.exe (Empolis GmbH) PRC - c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH) PRC - C:\Windows\System32\PSIService.exe () PRC - C:\Windows\System32\wpcumi.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Users\****\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation) MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (stllssvr) -- C:\Program Files\Common Files\SureThing Shared\stllssvr.exe File not found SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe File not found SRV - (PLFlash DeviceIoControl Service) -- C:\Windows\System32\IoctlSvc.exe File not found SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) SRV - (TuneUp.Defrag) -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (SANDBOXIE L.T.D) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (Hamachi2Svc) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (appdrvrem01) Application Driver Auto Removal Service (01) -- C:\Windows\System32\appdrvrem01.exe (Protection Technology) SRV - (AVM WLAN Connection Service) -- C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin) SRV - (Nero BackItUp Scheduler 4.0) -- C:\Programme\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG) SRV - (YahooAUService) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (GnabService) -- c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH) SRV - (AlertService) Intel(R) -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe (Intel(R) Corporation) SRV - (QualityManager) Intel(R) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe (Intel(R) Corporation) SRV - (Remote UI Service) Intel(R) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe (Intel(R) Corporation) SRV - (MCLServiceATL) Intel(R) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe (Intel(R) Corporation) SRV - (DHTRACE) Intel(R) -- C:\Programme\Common Files\Intel\IntelDH\bin\DHTraceController.exe (Intel(R) Corporation) SRV - (ISSM) Intel(R) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe (Intel(R) Corporation) SRV - (NMSCore) Intel(R) -- C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe (Intel(R) Corporation) SRV - (M1 Server) Intel(R) Viiv(TM) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe () SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (DQLWinService) -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe () SRV - (ProtexisLicensing) -- C:\Windows\System32\PSIService.exe () ========== Driver Services (SafeList) ========== DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found DRV - (sptd) -- C:\Windows\System32\drivers\sptd.sys (Duplex Secure Ltd.) DRV - (Lbd) -- C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB) DRV - (Lavasoft Kernexplorer) -- C:\Programme\Lavasoft\Ad-Aware\kernexplorer.sys () DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (SANDBOXIE L.T.D) DRV - (PSI) -- C:\Windows\System32\drivers\psi_mf.sys (Secunia) DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.) DRV - (appdrv01) Application Driver (01) -- C:\Windows\System32\drivers\appdrv01.sys (Protection Technology) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (avmeject) -- C:\Windows\System32\drivers\avmeject.sys (AVM Berlin) DRV - (s117obex) -- C:\Windows\System32\drivers\s117obex.sys (MCCI Corporation) DRV - (s117mdm) -- C:\Windows\System32\drivers\s117mdm.sys (MCCI Corporation) DRV - (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s117mgmt.sys (MCCI Corporation) DRV - (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM) -- C:\Windows\System32\drivers\s117unic.sys (MCCI Corporation) DRV - (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS) -- C:\Windows\System32\drivers\s117nd5.sys (MCCI Corporation) DRV - (s117mdfl) -- C:\Windows\System32\drivers\s117mdfl.sys (MCCI Corporation) DRV - (s117bus) Sony Ericsson Device 117 driver (WDM) -- C:\Windows\System32\drivers\s117bus.sys (MCCI Corporation) DRV - (IntelDH) -- C:\Windows\System32\drivers\IntelDH.sys (Intel Corporation) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.) DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.) DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.) DRV - (e1express) Intel(R) -- C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation) DRV - (TSHWMDTCP) -- C:\Programme\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys () DRV - (iaStor) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (nmsunidr) -- C:\Windows\System32\drivers\nmsunidr.sys (Gteko Ltd.) DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\Windows\System32\drivers\sfvfs02.sys (Protection Technology (StarForce)) DRV - (FWLANUSB) -- C:\Windows\System32\drivers\fwlanusb.sys (AVM GmbH) DRV - (athrusb) -- C:\Windows\System32\drivers\athrusb.sys (Atheros Communications, Inc.) DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation) DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.) DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex) DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.) DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.) DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation) DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.) DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.) DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation) DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.) DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.) DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation) DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation) DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems) DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation) DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic) DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.) DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company) DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.) DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.) DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.) DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic) DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic) DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic) DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic) DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation) DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic) DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.) DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.) DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.) DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies) DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation) DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\Windows\System32\drivers\sfsync02.sys (Protection Technology) DRV - (sfdrv01a) StarForce Protection Environment Driver (version 1.x.a) -- C:\Windows\System32\drivers\sfdrv01a.sys (Protection Technology (StarForce)) DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\Windows\System32\drivers\sfdrv01.sys (Protection Technology (StarForce)) DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\Windows\System32\drivers\sfhlp02.sys (Protection Technology (StarForce)) DRV - (EverestDriver) -- C:\Programme\Lavalys\EVEREST Home Edition\kerneld.wnt () DRV - (k750bus) Sony Ericsson 750 driver (WDM) -- C:\Windows\System32\drivers\k750bus.sys (MCCI) DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = about:blank IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://dsl-start.computerbild.de/ IE - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2 IE - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-09-12 15:53:52 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-09-12 15:53:52 | 000,000,000 | ---D | M] [2009-03-15 16:15:35 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\mozilla\Extensions [2010-09-13 15:17:21 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions [2010-04-27 16:39:58 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-18 22:53:55 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2010-09-13 14:17:05 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} [2010-06-30 23:56:22 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2010-06-30 23:09:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010-07-27 12:23:51 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-09-13 14:18:06 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Berkay\AppData\Roaming\mozilla\Firefox\Profiles\ctxfrrbe.Berkay\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-05-17 19:16:14 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010-05-17 19:16:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-04-12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll [2010-07-04 18:12:14 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010-07-04 18:12:15 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010-07-04 18:12:15 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010-07-04 18:12:15 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010-07-04 18:12:15 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009-04-02 22:46:25 | 000,000,418 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 hxxp://virscan.com O1 - Hosts: 127.0.0.1 hxxp://virusscan.jotti.org/ O1 - Hosts: 127.0.0.1 virusscan.jotti.org/ O1 - Hosts: 127.0.0.1 www.virusscan.jotti.org/ O1 - Hosts: 127.0.0.1 scanner.novirusthanks.org/ O1 - Hosts: 127.0.0.1 hxxp://scanner.novirusthanks.org/ O1 - Hosts: 127.0.0.1 www.scanner.novirusthanks.org/ O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Programme\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Programme\kikin\ie_kikin.dll (kikin) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Programme\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Programme\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Veoh Video Compass) - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Programme\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll (Veoh Networks) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [Ad-Watch] C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [WPCUMI] C:\Windows\System32\wpcumi.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003..\Run: [FileHippo.com] C:\Program Files\FileHippo.com\UpdateChecker.exe (FileHippo.com) O4 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D) O4 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Berkay\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Programme\kikin\ie_kikin.dll (kikin) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O15 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\..Trusted Domains: microsoft.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\..Trusted Domains: microsoft.com ([*.update] * in Trusted sites) O15 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\..Trusted Domains: microsoft.com ([*.windowsupdate] * in Trusted sites) O15 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\..Trusted Domains: windowsupdate.com ([]* in Trusted sites) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Berkay\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp O24 - Desktop BackupWallPaper: C:\Users\Berkay\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2008-12-27 21:40:42 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2008-12-27 20:40:44 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ FAT32 ] O32 - AutoRun File - [2004-11-07 01:17:15 | 000,000,000 | R--D | M] - I:\Autorun -- [ UDF ] O32 - AutoRun File - [2004-11-06 02:20:16 | 000,023,040 | R--- | M] () - I:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2004-11-06 02:20:16 | 000,000,115 | R--- | M] () - I:\Autorun.inf -- [ UDF ] O32 - AutoRun File - [2010-09-13 14:52:44 | 000,000,000 | ---- | M] () - J:\AUTORUN.INF -- [ FAT ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe () O34 - HKLM BootExecute: (DfSDKBt) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\...com [@ = ComFile] -- Reg Error: Key error. File not found O37 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\...exe [@ = exefile] -- Reg Error: Key error. File not found NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found SafeBootMin: AppMgmt - C:\Windows\System32\appmgmts.dll File not found SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - C:\Windows\System32\appmgmts.dll File not found SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: Hamachi2Svc - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) SafeBootNet: HelpSvc - Service SafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfPf - Driver SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1 ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0 ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 10.4 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 10.4 ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906) ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5AAEFF05-4D71-F313-6631-F30B7996EAB7} - Java (Sun) ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {CF3ADEAA-DEA6-4F83-53F0-98CE9628BF93} - Internet Explorer ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{0AF45D3F-8287-45B9-8DAC-F4B808AB1136} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler) Drivers32: msacm.l3acm - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3codec - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (hxxp://www.mp3dev.org/) Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.) Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll () Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2010-09-13 14:52:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security [2010-09-13 14:52:21 | 000,000,000 | ---D | C] -- C:\Programme\Panda USB Vaccine [2010-09-13 14:25:20 | 000,000,000 | R--D | C] -- C:\Sandbox [2010-09-13 14:24:27 | 000,000,000 | ---D | C] -- C:\Programme\Sandboxie [2010-09-12 15:53:16 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime [2010-09-12 15:52:55 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2010-09-12 15:51:52 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Apple [2010-09-12 15:14:03 | 000,000,000 | ---D | C] -- C:\Programme\Secunia [2010-09-12 15:12:13 | 000,000,000 | ---D | C] -- C:\Programme\FileHippo.com [2010-09-12 00:28:56 | 000,000,000 | ---D | C] -- C:\Users\Berkay\AppData\Roaming\Avira [2010-09-12 00:25:33 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys [2010-09-12 00:25:32 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2010-09-12 00:25:32 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2010-09-12 00:25:32 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys [2010-09-12 00:25:32 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys [2010-09-12 00:25:29 | 000,000,000 | ---D | C] -- C:\Programme\Avira [2010-09-12 00:25:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010-09-11 16:24:49 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2010-09-11 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Local\temp [2010-09-10 12:43:39 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Sunbelt Software [2010-09-10 12:42:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70} [2010-09-08 23:41:14 | 000,000,000 | ---D | C] -- C:\Programme\Luxor [2010-09-08 16:09:35 | 000,000,000 | ---D | C] -- C:\Programme\DAEMON Tools Lite [2010-09-08 16:08:56 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\DAEMON Tools Lite [2010-09-08 16:08:38 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010-09-07 17:37:42 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\BearShare [2010-09-07 17:35:36 | 000,000,000 | ---D | C] -- C:\ProgramData\BearShare [2010-09-07 17:35:09 | 000,000,000 | -H-D | C] -- C:\ProgramData\{26FF3095-882A-4FBE-8936-50F7CEC5EA49} [2010-09-07 17:34:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\PackageAware [2010-09-04 13:57:55 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\pcsx2 [2010-09-04 13:57:22 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll [2010-09-04 13:57:22 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll [2010-09-04 13:57:22 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll [2010-09-04 13:57:21 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll [2010-09-04 13:57:21 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll [2010-09-04 13:57:21 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll [2010-09-04 13:57:21 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll [2010-09-04 13:57:21 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll [2010-09-04 13:56:45 | 000,000,000 | ---D | C] -- C:\Programme\PCSX2 0.9.7 [2010-09-04 13:53:47 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\pcsx2 [2010-09-03 22:40:43 | 000,030,016 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2010-09-03 22:40:43 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2010-09-03 22:32:58 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010-09-03 22:32:58 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010-09-03 22:32:58 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010-09-03 22:32:57 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010-09-03 22:32:57 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010-09-03 22:32:57 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010-09-03 22:32:57 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010-09-03 22:32:57 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010-09-03 22:32:57 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010-09-03 22:32:57 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010-09-03 22:32:57 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010-09-03 22:32:57 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010-09-03 22:32:57 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010-09-03 22:32:57 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010-09-03 22:32:57 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010-09-03 22:32:55 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2010-09-03 22:32:51 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2010-09-03 22:32:50 | 002,037,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010-09-03 22:32:21 | 003,600,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2010-09-03 22:32:21 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2009-06-16 14:03:56 | 000,126,976 | ---- | C] ( ) -- C:\Windows\System32\Interop.SHDocVw.dll [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010-09-13 16:17:53 | 008,126,464 | ---- | M] () -- C:\Users\***\ntuser.dat [2010-09-13 15:22:47 | 000,004,410 | ---- | M] () -- C:\Windows\Sandboxie.ini [2010-09-13 15:05:51 | 000,053,294 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-09-13 15:05:50 | 000,053,294 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-09-13 15:04:59 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-09-13 15:04:37 | 000,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-09-13 15:04:36 | 000,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-09-13 15:04:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-09-13 15:03:09 | 000,524,288 | -HS- | M] () -- C:\Users\***\ntuser.dat{1b73b340-bafe-11de-ad6b-0019dbc570af}.TMContainer00000000000000000001.regtrans-ms [2010-09-13 15:03:09 | 000,065,536 | -HS- | M] () -- C:\Users\***\ntuser.dat{1b73b340-bafe-11de-ad6b-0019dbc570af}.TM.blf [2010-09-13 15:03:00 | 004,743,401 | -H-- | M] () -- C:\Users\***\AppData\Local\IconCache.db [2010-09-13 14:53:55 | 001,472,354 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-09-13 14:53:55 | 000,638,510 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2010-09-13 14:53:55 | 000,604,126 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-09-13 14:53:55 | 000,130,462 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2010-09-13 14:53:55 | 000,107,562 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-09-13 14:24:27 | 000,000,910 | ---- | M] () -- C:\Users\***\Desktop\Sandboxed Web Browser.lnk [2010-09-12 16:08:18 | 001,721,952 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-09-12 15:12:17 | 000,104,744 | ---- | M] () -- C:\Windows\System32\GDIPFONTCACHEV1.DAT [2010-09-11 16:21:35 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2010-09-11 15:46:34 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-09-11 15:46:34 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-09-10 12:42:46 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\Ad-Aware.lnk [2010-09-10 00:12:32 | 000,001,082 | ---- | M] () -- C:\Users\***\Desktop\Medieval II - Retrofit Mod.lnk [2010-09-08 16:10:04 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\System32\drivers\sptd.sys [2010-09-07 17:37:11 | 000,001,891 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010-09-07 17:35:43 | 000,000,989 | ---- | M] () -- C:\Users\Public\Desktop\BearShare.lnk [2010-09-04 13:56:48 | 000,001,776 | ---- | M] () -- C:\Users\Public\Desktop\PCSX2 0.9.7 (r3113).lnk [2010-09-03 22:40:42 | 000,001,883 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2010-09-03 22:40:42 | 000,001,871 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk [2010-08-26 14:45:40 | 000,030,528 | ---- | M] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2010-08-26 14:40:34 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2010-08-26 14:40:24 | 000,030,016 | ---- | M] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2010-09-13 14:24:52 | 000,000,910 | ---- | C] () -- C:\Users\***\Desktop\Sandboxed Web Browser.lnk [2010-09-13 14:24:49 | 000,004,410 | ---- | C] () -- C:\Windows\Sandboxie.ini [2010-09-10 12:42:46 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\Ad-Aware.lnk [2010-09-10 00:12:32 | 000,001,082 | ---- | C] () -- C:\Users\***\Desktop\Medieval II - Retrofit Mod.lnk [2010-09-07 17:35:43 | 000,000,989 | ---- | C] () -- C:\Users\Public\Desktop\BearShare.lnk [2010-09-04 13:56:48 | 000,001,776 | ---- | C] () -- C:\Users\Public\Desktop\PCSX2 0.9.7 (r3113).lnk [2010-04-26 16:49:15 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010-04-05 13:06:44 | 000,000,239 | ---- | C] () -- C:\Windows\SIERRA.INI [2010-04-02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat [2010-02-27 01:48:26 | 000,000,120 | ---- | C] () -- C:\ProgramData\xlink.sys [2010-02-27 01:48:25 | 000,000,000 | ---- | C] () -- C:\Windows\System32\ntUsrr_1_0.dll [2010-02-05 18:33:25 | 000,053,294 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-02-05 18:33:25 | 000,053,294 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-01-14 17:12:19 | 000,000,144 | ---- | C] () -- C:\Users\***\AppData\Roaming\default.rss [2010-01-14 10:06:16 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini [2010-01-13 13:05:33 | 000,000,103 | ---- | C] () -- C:\Users\***\AppData\Roaming\default.pls [2009-09-02 18:27:54 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2009-09-02 18:27:53 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2009-08-03 00:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-08-03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-08-03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-06-21 21:34:25 | 000,076,407 | ---- | C] () -- C:\Users\**\AppData\Roaming\Smiley.ico [2009-06-17 21:31:01 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009-06-16 14:03:58 | 000,053,248 | ---- | C] () -- C:\Windows\System32\dossec.dll [2008-11-19 15:15:27 | 000,000,011 | ---- | C] () -- C:\Windows\swinst.INI [2008-09-11 15:55:42 | 000,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll [2008-09-11 15:55:42 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2008-09-11 15:55:39 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2008-09-11 15:55:39 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest [2008-05-25 13:58:54 | 000,004,608 | ---- | C] () -- C:\Windows\System32\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-05-22 14:04:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI [2008-05-17 13:28:02 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini [2008-05-17 13:26:43 | 000,000,025 | ---- | C] () -- C:\Windows\CDE V10V100V350EFGD.ini [2008-02-10 15:41:54 | 000,000,552 | ---- | C] () -- C:\Users\***\AppData\Local\d3d8caps.dat [2008-01-20 20:01:11 | 000,001,356 | ---- | C] () -- C:\Users\***\AppData\Local\d3d9caps.dat [2008-01-02 16:11:47 | 000,022,328 | ---- | C] () -- C:\Users\***\AppData\Roaming\PnkBstrK.sys [2007-12-13 18:02:39 | 000,000,006 | ---- | C] () -- C:\ProgramData\DragToDiscUserNameH.txt [2007-12-02 21:54:41 | 000,000,067 | ---- | C] () -- C:\Windows\Easy Video to iPod MP4 PSP 3GP Converter.INI [2007-12-02 13:27:58 | 000,442,368 | ---- | C] () -- C:\Windows\System32\dvmsg.dll [2007-11-28 22:20:13 | 000,000,094 | -H-- | C] () -- C:\Users\***\AppData\Local\fusioncache.dat [2007-11-28 19:47:18 | 000,128,512 | -H-- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-11-24 10:14:15 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2007-10-21 20:29:10 | 000,000,330 | ---- | C] () -- C:\Windows\lernpakt.ini [2007-08-18 08:30:49 | 000,069,632 | R--- | C] () -- C:\Windows\System32\xmltok.dll [2007-08-18 08:30:49 | 000,036,864 | R--- | C] () -- C:\Windows\System32\xmlparse.dll [2007-08-13 09:39:42 | 000,000,848 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys [2007-08-04 19:12:08 | 000,000,035 | ---- | C] () -- C:\Windows\A4W.INI [2007-08-04 19:11:13 | 000,000,024 | ---- | C] () -- C:\Windows\pstudio.ini [2007-08-04 19:11:13 | 000,000,011 | ---- | C] () -- C:\Windows\album.ini [2007-07-11 07:45:32 | 000,000,032 | ---- | C] () -- C:\Windows\CD_Start.INI [2007-06-25 09:10:51 | 000,000,120 | ---- | C] () -- C:\Windows\wininit.ini [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 12:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006-06-23 10:09:34 | 000,019,968 | R--- | C] () -- C:\Windows\System32\cpuinf32.dll ========== LOP Check ========== [2010-03-24 13:18:18 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\2K Sports [2009-03-29 17:07:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Ace [2010-09-07 17:37:43 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\BearShare [2010-09-08 18:28:33 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\BitTorrent [2010-03-28 13:38:38 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools [2010-09-08 17:30:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite [2009-03-02 15:45:25 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Digital Red [2010-09-11 15:38:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DMCache [2010-06-30 23:09:46 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers [2009-03-22 11:42:31 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\EPSON [2008-01-18 22:12:41 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ICQ [2010-09-09 00:09:20 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\IDM [2009-01-16 23:21:52 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\iMesh [2010-03-06 12:49:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\kikin [2010-03-24 15:33:30 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech [2008-05-02 11:40:30 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Orbit [2009-08-23 18:55:41 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Petroglyph [2010-01-21 22:23:26 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\RouterControl [2010-03-24 13:19:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Stardock [2009-04-21 19:20:48 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\The Creative Assembly [2007-08-04 19:55:35 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TuneUp Software [2010-05-23 11:52:44 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Ubisoft [2010-03-21 22:03:43 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Uniblue [2007-12-14 23:36:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Zoner [2009-03-30 10:33:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Ace [2009-07-31 14:35:53 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\Activision [2008-03-17 14:39:40 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\BitTorrent [2010-03-28 13:38:38 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\DAEMON Tools [2009-09-22 14:16:20 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\EPSON [2010-06-09 20:39:55 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\kikin [2009-08-23 21:01:49 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\Petroglyph [2009-06-04 18:20:41 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\SPORE [2009-04-22 16:26:38 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\The Creative Assembly [2008-02-12 16:15:50 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\TuneUp Software [2010-06-02 21:31:13 | 000,000,000 | ---D | M] -- C:\Users\Ronay und Ali\AppData\Roaming\Ubisoft [2010-09-13 15:03:17 | 000,032,530 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2010-03-24 13:18:18 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\2K Sports [2009-03-29 17:07:19 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Ace [2010-07-10 16:36:39 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Adobe [2010-03-03 17:11:09 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\ArcSoft [2010-09-12 00:28:56 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Avira [2008-09-11 20:03:41 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\AVS4YOU [2010-09-07 17:37:43 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\BearShare [2010-09-08 18:28:33 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\BitTorrent [2008-12-24 12:55:49 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Corel [2007-11-28 19:39:52 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\CyberLink [2010-03-28 13:38:38 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\DAEMON Tools [2010-09-08 17:30:57 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\DAEMON Tools Lite [2009-03-02 15:45:25 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Digital Red [2010-04-15 18:08:27 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\DivX [2010-09-11 15:38:03 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\DMCache [2010-06-30 23:09:46 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\DVDVideoSoftIEHelpers [2009-03-22 11:42:31 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\EPSON [2007-08-04 19:58:08 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Google [2007-08-04 18:59:03 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\GTek [2010-03-25 20:50:51 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Hamachi [2008-01-18 22:12:41 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\ICQ [2010-09-09 00:09:20 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\IDM [2009-01-16 23:21:52 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\iMesh [2008-01-18 22:06:45 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\InstallShield [2010-03-06 12:49:14 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\kikin [2010-03-24 15:33:30 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Leadertech [2007-08-04 19:15:02 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Macromedia [2008-12-27 18:46:40 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Malwarebytes [2006-11-02 14:37:34 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Media Center Programs [2010-05-17 17:43:37 | 000,000,000 | --SD | M] -- C:\Users\Berkay\AppData\Roaming\Microsoft [2009-07-18 13:14:12 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Microsoft Game Studios [2010-02-13 13:46:57 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Move Networks [2009-03-15 16:15:35 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Mozilla [2010-01-14 10:25:06 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Nero [2008-05-02 11:40:30 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Orbit [2009-08-23 18:55:41 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Petroglyph [2010-01-21 22:23:26 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\RouterControl [2007-12-02 21:30:28 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Roxio [2008-12-14 19:07:01 | 000,000,000 | RH-D | M] -- C:\Users\Berkay\AppData\Roaming\SecuROM [2010-03-24 13:19:03 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Stardock [2008-12-29 00:20:21 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\SUPERAntiSpyware.com [2008-12-29 20:53:06 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Symantec [2009-04-21 19:20:48 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\The Creative Assembly [2007-08-04 19:55:35 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\TuneUp Software [2010-05-23 11:52:44 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Ubisoft [2010-03-21 22:03:43 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Uniblue [2007-11-28 19:47:16 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\WinRAR [2010-07-02 23:18:41 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Yahoo! [2007-12-14 23:36:08 | 000,000,000 | ---D | M] -- C:\Users\Berkay\AppData\Roaming\Zoner < %APPDATA%\*.exe /s > [2009-06-09 23:22:40 | 000,003,584 | R--- | M] () -- C:\Users\Berkay\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe [2010-05-15 18:13:33 | 000,010,134 | R--- | M] () -- C:\Users\Berkay\AppData\Roaming\Microsoft\Installer\{89661B04-C646-4412-B6D3-5E19F02F1F37}\ARPPRODUCTICON.exe [2009-06-16 17:50:01 | 000,010,134 | R--- | M] () -- C:\Users\Berkay\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe [2009-02-12 20:37:34 | 000,097,144 | ---- | M] () -- C:\Users\Berkay\AppData\Roaming\Move Networks\ie_bin\MovePlayerUpgrade.exe [2010-02-13 13:46:57 | 000,034,062 | ---- | M] () -- C:\Users\Berkay\AppData\Roaming\Move Networks\ie_bin\Uninst.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2008-01-19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys [2008-01-19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008-01-19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008-01-19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\ERDNT\cache\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS > [2009-04-10 23:32:28 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\ERDNT\cache\atapi.sys [2009-04-10 23:32:28 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys [2009-04-10 23:32:28 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys [2009-04-10 23:32:28 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008-01-19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008-01-19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006-11-02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2007-04-17 10:30:38 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=78620BDA3EC87816E5D1FA86F920BC3A -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c2a1b5ae\atapi.sys [2007-04-17 10:30:38 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=78620BDA3EC87816E5D1FA86F920BC3A -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20518_none_dbd8b4d73d81c9d0\atapi.sys [2008-02-13 14:20:42 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys [2008-02-13 14:20:42 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys [2008-02-13 14:20:42 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys < MD5 for: CNGAUDIT.DLL > [2006-11-02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\ERDNT\cache\cngaudit.dll [2006-11-02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll [2006-11-02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: IASTOR.SYS > [2007-03-21 12:58:56 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Programme\Intel\Intel Matrix Storage Manager\Driver\IaStor.sys [2007-03-21 12:58:56 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\drivers\iaStor.sys [2007-03-21 12:58:56 | 000,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_3a63e5a6\iaStor.sys [2007-03-21 12:59:30 | 000,381,720 | ---- | M] (Intel Corporation) MD5=9D7ED4275702E2FC409F2CC563245740 -- C:\Programme\Intel\Intel Matrix Storage Manager\Driver64\IaStor.sys < MD5 for: IASTORV.SYS > [2008-01-19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys [2008-01-19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009-04-10 23:28:24 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\ERDNT\cache\netlogon.dll [2009-04-10 23:28:24 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll [2009-04-10 23:28:24 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll [2008-01-19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS > [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys [2008-01-19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys [2008-01-19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL > [2008-01-19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll [2009-04-10 23:28:26 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\ERDNT\cache\scecli.dll [2009-04-10 23:28:26 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll [2009-04-10 23:28:26 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < MD5 for: USER32.DLL > [2007-06-18 12:26:31 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=63B4F59D7C89B1BF5277F1FFEFD491CD -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16438_none_cb39bc5b7047127e\user32.dll [2009-04-10 23:28:26 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\ERDNT\cache\user32.dll [2007-06-18 12:26:32 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=9D9F061EDA75425FC67F0365E3467C86 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.20537_none_cbc258dc896598f1\user32.dll [2008-01-19 09:36:46 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll [2009-04-10 23:28:26 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll [2009-04-10 23:28:26 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll < MD5 for: USERINIT.EXE > [2008-01-19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\ERDNT\cache\userinit.exe [2008-01-19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008-01-19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WINLOGON.EXE > [2009-04-10 23:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\ERDNT\cache\winlogon.exe [2009-04-10 23:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009-04-10 23:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008-01-19 09:33:37 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < MD5 for: WS2IFSL.SYS > [2008-01-19 07:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys [2008-01-19 07:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > [2006-11-02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2006-11-02 12:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2006-11-02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006-11-02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006-11-02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2009-04-10 23:27:48 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll [2009-04-10 23:28:24 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll [4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ] ========== Alternate Data Streams ========== @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Pictures:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Mix:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Videos:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\My Videos:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\My Games:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Meine empfangenen Dateien:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Corel User Files:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\CCWin:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Aufzeichnungen:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Adobe Scripts:Roxio EMC Stream < End of report > Geändert von Mr.X 1991 (13.09.2010 um 15:39 Uhr) |
|
13.09.2010, 15:53
| #30 |
| /// Malware-holic | Silentbanker - flacor.dat adaware und avira nutzen die gleiche engine, ad-aware ist daher unnötig und sollte deinstaliert werden. toolbars stellen ein sicherheitsrisiko dar, außerdem können sie genutzt werden, um user infos zu sammeln, deinstaliere die google toolbar, yahoo toolbar und falls nicht benötigt alles von Veoh • Starte bitte die OTL.exe. • Kopiere nun das Folgende in die Textbox. :OTL SRV - (stllssvr) -- C:\Program Files\Common Files\SureThing Shared\stllssvr.exe File not found SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe File not found SRV - (PLFlash DeviceIoControl Service) -- C:\Windows\System32\IoctlSvc.exe File not found DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (DfSDKBt) - File not found O37 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\...com [@ = ComFile] -- Reg Error: Key error. File not found O37 - HKU\S-1-5-21-2649846486-4142026674-4246215158-1003\...exe [@ = exefile] -- Reg Error: Key error. File not found @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Pictures:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Mix:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Videos:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\My Videos:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\My Games:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Meine empfangenen Dateien:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Corel User Files:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\CCWin:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Aufzeichnungen:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Berkay\Documents\Adobe Scripts:Roxio EMC Stream :Files :Commands [purity] [EMPTYFLASH] [emptytemp] [resethosts] [Reboot] • Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument dieses posten |
|
| Themen zu Silentbanker - flacor.dat |
| 0 bytes, ad-watch, adobe, anderes, appdata, banker, datei, dll, dll -, dokumente, einzige, gelöst, guten, hochfahren, hotmail, krieg, mail, meldung, modul, namen, neues, pcs, plug-in, problem, problem gelöst, probleme, programm, roaming, sendet, silentbanker, tracker |
Linear-Darstellung
