Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 28.11.2010, 01:22   #1
FranzBauer
 
Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet - Unglücklich

Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet



Guten Morgen leibe Mitglieder vom Trojaner Board!

Ich habe das selbe Problem wie weiter viele Mitglieder (und nicht Mitglieder).
Wenn ich Seiten aufrufe und dort auf einen externen Link klicke (zum Beispiel in Suchmaschinen) werde ich über 2 - 5 Weiterleitungen auf Seiten wie through-n, gomeo, unsearchlocal oder find-here weitergeleitet. Das ganze passiert als ich gestern ca. um 19 Uhr eine Datei namens "install.exe" heruntergeladen habe und diese versehentlich ausgeführt anstatt gelöscht habe.

Um die Liste zu vervollständigen:

1. RSIT Logfile:
Code:
ATTFilter
Logfile of random's system information tool 1.08 (written by random/random)
Run by xxx at 2010-11-27 23:42:48
Microsoft Windows 7 Home Premium  
System drive C: has 130 GB (85%) free of 153 GB
Total RAM: 3263 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:43:04, on 27.11.2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Dominik\Downloads\RSIT.exe
C:\Program Files\trend micro\xxx.exe (! RENAMED !)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - D:\Program Files\Team Viewer\TeamViewer_Service.exe

--
End of file - 3747 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-22 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-08-02 281768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2010-11-27 21:12:34 ----D---- C:\rsit
2010-11-27 21:12:34 ----D---- C:\Program Files\trend micro
2010-11-27 21:02:10 ----D---- C:\Users\xxx\AppData\Roaming\Avira
2010-11-27 21:01:15 ----D---- C:\Users\xxx\AppData\Roaming\ABBYY
2010-11-27 20:59:32 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2010-11-27 20:59:31 ----D---- C:\ProgramData\Avira
2010-11-27 20:59:31 ----D---- C:\Program Files\Avira
2010-11-27 20:59:31 ----A---- C:\Windows\system32\drivers\avipbb.sys
2010-11-27 20:59:31 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2010-11-27 13:46:58 ----D---- C:\Program Files\Common Files\Adobe
2010-11-27 13:44:14 ----D---- C:\Program Files\Microsoft WSE
2010-11-27 13:29:52 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-25 16:18:45 ----D---- C:\Users\xxx\AppData\Roaming\OpenOffice.org
2010-11-25 15:45:49 ----D---- C:\Windows\system32\Wat
2010-11-25 15:32:21 ----A---- C:\Windows\system32\GEARAspi.dll
2010-11-25 15:32:21 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2010-11-25 15:32:07 ----D---- C:\Program Files\iPod
2010-11-25 15:29:50 ----D---- C:\Program Files\Apple Software Update
2010-11-25 15:29:32 ----D---- C:\Program Files\Bonjour
2010-11-24 14:20:56 ----D---- C:\Program Files\Inno Setup 5
2010-11-22 21:05:24 ----D---- C:\ProgramData\Sun
2010-11-22 21:05:23 ----D---- C:\Program Files\Common Files\Java
2010-11-22 21:05:06 ----A---- C:\Windows\system32\javaws.exe
2010-11-22 21:05:06 ----A---- C:\Windows\system32\javaw.exe
2010-11-22 21:05:06 ----A---- C:\Windows\system32\java.exe
2010-11-22 21:05:06 ----A---- C:\Windows\system32\deployJava1.dll
2010-11-22 21:04:47 ----D---- C:\Program Files\Java
2010-11-22 16:11:09 ----D---- C:\Program Files\FileZilla FTP Client
2010-11-22 16:10:10 ----D---- C:\Users\xxx\AppData\Roaming\FileZilla
2010-11-22 15:12:39 ----A---- C:\Windows\system32\MRT.exe
2010-11-21 21:20:02 ----D---- C:\Users\xxx\AppData\Roaming\Apple Computer
2010-11-21 21:19:52 ----DC---- C:\Windows\system32\DRVSTORE
2010-11-21 21:19:05 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-11-21 21:17:55 ----D---- C:\ProgramData\Apple Computer
2010-11-21 21:17:55 ----D---- C:\Program Files\QuickTime
2010-11-21 21:16:34 ----D---- C:\ProgramData\Apple
2010-11-21 21:16:34 ----D---- C:\Program Files\Common Files\Apple
2010-11-21 21:03:19 ----D---- C:\Program Files\Krypton Toolkit 4.3.0
2010-11-21 21:03:18 ----D---- C:\Users\xxx\AppData\Roaming\Component Factory
2010-11-21 20:23:15 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 7
2010-11-21 01:33:01 ----D---- C:\Users\xxx\AppData\Roaming\Mozilla
2010-11-20 22:40:17 ----D---- C:\Program Files\RocketDock
2010-11-20 22:31:59 ----D---- C:\Users\xxx\AppData\Roaming\WinRAR
2010-11-20 22:31:52 ----D---- C:\Program Files\WinRAR
2010-11-20 13:44:53 ----D---- C:\Users\xxx\AppData\Roaming\vlc
2010-11-20 12:12:36 ----D---- C:\Program Files\Microsoft SQL Server
2010-11-20 12:12:25 ----D---- C:\Program Files\Microsoft Silverlight
2010-11-20 12:11:47 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-11-20 12:11:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-11-20 12:10:05 ----D---- C:\Program Files\Microsoft SDKs
2010-11-20 12:10:05 ----D---- C:\Program Files\Microsoft Help Viewer
2010-11-19 23:06:51 ----D---- C:\Users\xxx\AppData\Roaming\AIMP
2010-11-19 23:02:41 ----D---- C:\Program Files\Microsoft.NET
2010-11-19 23:02:07 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-11-19 23:02:07 ----A---- C:\Windows\system32\PresentationHost.exe
2010-11-19 23:02:07 ----A---- C:\Windows\system32\netfxperf.dll
2010-11-19 23:02:07 ----A---- C:\Windows\system32\mscoree.dll
2010-11-19 23:02:07 ----A---- C:\Windows\system32\dfshim.dll
2010-11-19 23:00:22 ----D---- C:\Windows\PCHEALTH
2010-11-19 22:44:27 ----A---- C:\Windows\system32\VB5STKIT.DLL
2010-11-19 22:44:27 ----A---- C:\Windows\system32\MSVBVM50.dll
2010-11-19 22:44:27 ----A---- C:\Windows\system32\iwpsetup.exe
2010-11-19 20:47:43 ----A---- C:\Windows\system32\XAudio2_7.dll
2010-11-19 20:47:43 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2010-11-19 20:47:43 ----A---- C:\Windows\system32\xactengine3_7.dll
2010-11-19 20:47:43 ----A---- C:\Windows\system32\d3dx11_43.dll
2010-11-19 20:47:43 ----A---- C:\Windows\system32\d3dx10_43.dll
2010-11-19 20:47:43 ----A---- C:\Windows\system32\d3dcsx_43.dll
2010-11-19 20:47:43 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2010-11-19 20:47:42 ----A---- C:\Windows\system32\XAudio2_6.dll
2010-11-19 20:47:42 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2010-11-19 20:47:42 ----A---- C:\Windows\system32\xactengine3_6.dll
2010-11-19 20:47:42 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2010-11-19 20:47:42 ----A---- C:\Windows\system32\D3DX9_43.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-19 20:47:41 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-19 20:47:40 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-19 20:47:40 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-19 20:47:40 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-19 20:47:40 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-19 20:47:40 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-19 20:47:39 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-19 20:47:38 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-19 20:47:37 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-19 20:47:36 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-19 20:47:36 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-19 20:47:36 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-19 20:47:36 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-19 20:47:35 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-19 20:47:35 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-19 20:47:33 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-19 20:47:33 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-19 20:47:33 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-19 20:47:33 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-19 20:47:33 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-19 20:47:33 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-19 20:47:32 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-11-19 20:47:32 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-11-19 20:47:32 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-19 20:47:32 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-19 20:47:32 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\xinput1_2.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-11-19 20:47:31 ----A---- C:\Windows\system32\d3dx10.dll
2010-11-19 20:47:30 ----A---- C:\Windows\system32\xinput1_1.dll
2010-11-19 20:47:30 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-11-19 20:47:30 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-11-19 20:47:23 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-11-19 20:47:22 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-11-19 20:47:22 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-11-19 20:47:21 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-11-19 20:47:21 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-11-19 19:55:04 ----A---- C:\Windows\system32\shell32.dll
2010-11-19 19:55:02 ----A---- C:\Windows\system32\spoolsv.exe
2010-11-19 19:55:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-11-19 19:55:00 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-11-19 19:54:57 ----A---- C:\Windows\system32\ole32.dll
2010-11-19 19:54:55 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-11-19 19:54:42 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-11-19 19:54:41 ----A---- C:\Windows\system32\ntdll.dll
2010-11-19 19:54:34 ----A---- C:\Windows\system32\mshtml.dll
2010-11-19 19:54:33 ----A---- C:\Windows\system32\ieframe.dll
2010-11-19 19:54:32 ----A---- C:\Windows\system32\mstime.dll
2010-11-19 19:54:32 ----A---- C:\Windows\system32\msfeeds.dll
2010-11-19 19:54:32 ----A---- C:\Windows\system32\iertutil.dll
2010-11-19 19:54:31 ----A---- C:\Windows\system32\wininet.dll
2010-11-19 19:54:31 ----A---- C:\Windows\system32\urlmon.dll
2010-11-19 19:54:31 ----A---- C:\Windows\system32\licmgr10.dll
2010-11-19 19:54:31 ----A---- C:\Windows\system32\iedkcs32.dll
2010-11-19 19:54:30 ----A---- C:\Windows\system32\mshtmled.dll
2010-11-19 19:54:30 ----A---- C:\Windows\system32\msfeedssync.exe
2010-11-19 19:54:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-11-19 19:54:30 ----A---- C:\Windows\system32\jsproxy.dll
2010-11-19 19:54:30 ----A---- C:\Windows\system32\ieui.dll
2010-11-19 19:54:30 ----A---- C:\Windows\system32\iepeers.dll
2010-11-19 19:54:19 ----A---- C:\Windows\system32\ir32_32.dll
2010-11-19 19:54:19 ----A---- C:\Windows\system32\iccvid.dll
2010-11-19 19:54:18 ----A---- C:\Windows\system32\winlogon.exe
2010-11-19 19:54:18 ----A---- C:\Windows\explorer.exe
2010-11-19 19:54:13 ----A---- C:\Windows\system32\tzres.dll
2010-11-19 19:54:02 ----A---- C:\Windows\system32\t2embed.dll
2010-11-19 19:53:59 ----A---- C:\Windows\system32\CPFilters.dll
2010-11-19 19:53:57 ----A---- C:\Windows\system32\msdri.dll
2010-11-19 19:53:56 ----A---- C:\Windows\system32\psisdecd.dll
2010-11-19 19:53:54 ----A---- C:\Windows\system32\schannel.dll
2010-11-19 19:53:52 ----A---- C:\Windows\system32\msasn1.dll
2010-11-19 19:53:49 ----A---- C:\Windows\system32\lsasrv.dll
2010-11-19 19:53:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-11-19 19:53:47 ----A---- C:\Windows\system32\rtutils.dll
2010-11-19 19:53:44 ----A---- C:\Windows\system32\inetcomm.dll
2010-11-19 19:53:43 ----A---- C:\Windows\system32\msxml3.dll
2010-11-19 19:53:41 ----A---- C:\Windows\system32\win32k.sys
2010-11-19 19:53:31 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-11-19 19:53:31 ----A---- C:\Windows\system32\CertEnroll.dll
2010-11-19 19:53:30 ----A---- C:\Windows\system32\winresume.exe
2010-11-19 19:53:30 ----A---- C:\Windows\system32\winload.exe
2010-11-19 19:53:27 ----A---- C:\Windows\system32\asycfilt.dll
2010-11-19 19:53:25 ----A---- C:\Windows\system32\comctl32.dll
2010-11-19 19:53:22 ----A---- C:\Windows\system32\mfc40u.dll
2010-11-19 19:53:22 ----A---- C:\Windows\system32\mfc40.dll
2010-11-19 19:53:03 ----A---- C:\Windows\system32\wmp.dll
2010-11-19 19:53:01 ----A---- C:\Windows\system32\wmploc.DLL
2010-11-19 19:52:59 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-11-19 19:52:55 ----A---- C:\Windows\system32\jscript.dll
2010-11-19 19:52:48 ----A---- C:\Windows\system32\kernel32.dll
2010-11-19 19:52:47 ----A---- C:\Windows\system32\apphelp.dll
2010-11-19 19:52:44 ----A---- C:\Windows\system32\quartz.dll
2010-11-19 19:52:44 ----A---- C:\Windows\system32\mciavi32.dll
2010-11-19 19:52:43 ----A---- C:\Windows\system32\tsbyuv.dll
2010-11-19 19:52:43 ----A---- C:\Windows\system32\msyuv.dll
2010-11-19 19:52:43 ----A---- C:\Windows\system32\msvidc32.dll
2010-11-19 19:52:43 ----A---- C:\Windows\system32\msrle32.dll
2010-11-19 19:52:43 ----A---- C:\Windows\system32\iyuv_32.dll
2010-11-19 19:52:43 ----A---- C:\Windows\system32\avifil32.dll
2010-11-19 19:52:02 ----A---- C:\Windows\system32\srvsvc.dll
2010-11-19 19:52:01 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-11-19 19:51:59 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-11-19 19:51:59 ----A---- C:\Windows\system32\drivers\srv.sys
2010-11-19 19:45:18 ----A---- C:\Windows\system32\wmpmde.dll
2010-11-19 19:45:17 ----A---- C:\Windows\system32\vbscript.dll
2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc_isv.dll
2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc.dll
2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate.exe
2010-11-19 19:45:12 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-11-19 19:45:09 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-11-19 19:45:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-11-19 19:45:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-11-19 19:45:05 ----A---- C:\Windows\system32\msv1_0.dll
2010-11-19 19:45:00 ----A---- C:\Windows\system32\fontsub.dll
2010-11-19 19:45:00 ----A---- C:\Windows\system32\atmlib.dll
2010-11-19 19:45:00 ----A---- C:\Windows\system32\atmfd.dll
2010-11-19 19:44:41 ----A---- C:\Windows\system32\browserchoice.exe
2010-11-19 19:44:26 ----A---- C:\Windows\system32\drivers\ks.sys
2010-11-19 19:39:27 ----A---- C:\Windows\system32\nvuhda.exe
2010-11-19 19:39:27 ----A---- C:\Windows\system32\nvhdap32.dll
2010-11-19 19:39:27 ----A---- C:\Windows\system32\nvcohda.dll
2010-11-19 19:39:27 ----A---- C:\Windows\system32\drivers\nvhda32v.sys
2010-11-19 19:38:18 ----D---- C:\ProgramData\NVIDIA
2010-11-19 19:38:05 ----D---- C:\Program Files\NVIDIA Corporation
2010-11-19 19:37:42 ----D---- C:\Windows\system32\AGEIA
2010-11-19 19:37:42 ----D---- C:\Program Files\AGEIA Technologies
2010-11-19 19:37:03 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-11-19 19:36:53 ----A---- C:\Windows\system32\NVStWiz.exe
2010-11-19 19:35:45 ----A---- C:\Windows\system32\nvudisp.exe
2010-11-19 19:34:14 ----A---- C:\Windows\system32\NVUNINST.EXE
2010-11-19 19:27:12 ----D---- C:\ProgramData\Adobe
2010-11-18 23:29:38 ----D---- C:\Users\xxx\AppData\Roaming\skypePM
2010-11-18 23:28:40 ----D---- C:\Program Files\Common Files\Skype
2010-11-18 23:28:39 ----RD---- C:\Program Files\Skype
2010-11-18 23:28:38 ----D---- C:\Users\xxx\AppData\Roaming\Skype
2010-11-18 23:28:35 ----D---- C:\ProgramData\Skype
2010-11-18 23:19:32 ----D---- C:\Program Files\Pando Networks
2010-11-18 23:19:32 ----D---- C:\Program Files\Google
2010-11-18 23:19:24 ----D---- C:\Users\xxx\AppData\Roaming\OpenCandy
2010-11-18 23:19:22 ----D---- C:\Program Files\GamersFirst
2010-11-18 23:18:45 ----N---- C:\Windows\system32\MpSigStub.exe
2010-11-18 23:15:36 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-18 23:15:36 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-18 23:15:36 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-18 23:15:36 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-18 23:15:00 ----D---- C:\Users\xxx\AppData\Roaming\Macromedia
2010-11-18 23:15:00 ----D---- C:\Users\xxx\AppData\Roaming\Adobe
2010-11-18 23:14:57 ----D---- C:\Windows\system32\Macromed
2010-11-18 23:09:32 ----D---- C:\Users\xxx\AppData\Roaming\TeamViewer
2010-11-18 23:02:51 ----SHD---- C:\Windows\Installer
2010-11-18 23:00:44 ----D---- C:\Windows\system32\Lang
2010-11-18 23:00:44 ----A---- C:\Windows\system32\TVWizudlg.exe
2010-11-18 23:00:44 ----A---- C:\Windows\system32\igfxtvcx.dll
2010-11-18 23:00:43 ----D---- C:\Program Files\Intel
2010-11-18 22:58:29 ----D---- C:\Windows\system32\x64
2010-11-18 22:58:29 ----A---- C:\Windows\system32\igxpun.exe
2010-11-18 22:57:19 ----A---- C:\Windows\system32\wintrust.dll
2010-11-18 22:57:11 ----A---- C:\Windows\system32\cabview.dll
2010-11-18 22:42:39 ----D---- C:\Users\xxx\AppData\Roaming\Identities
2010-11-18 22:42:28 ----SD---- C:\Users\xxx\AppData\Roaming\Microsoft
2010-11-18 22:42:28 ----D---- C:\Users\xxx\AppData\Roaming\Media Center Programs
2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Vorlagen
2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Startmenü
2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Favoriten
2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Dokumente
2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Anwendungsdaten
2010-11-18 22:42:21 ----SHD---- C:\Program Files\Gemeinsame Dateien
2010-11-18 22:32:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-18 22:15:18 ----D---- C:\Windows\SoftwareDistribution
2010-11-18 22:12:16 ----D---- C:\Windows\Prefetch
2010-11-18 22:11:05 ----D---- C:\Windows\Panther
2010-11-18 21:54:25 ----SHD---- C:\Boot
2010-11-04 21:56:49 ----HD---- C:\Config.Msi
2010-10-13 02:59:13 ----D---- C:\Import
2010-10-07 12:23:02 ----A---- C:\Windows\system32\jdns_sd.dll
2010-10-07 12:23:02 ----A---- C:\Windows\system32\dnssdX.dll
2010-10-07 12:23:02 ----A---- C:\Windows\system32\dns-sd.exe
2010-10-07 12:23:02 ----A---- C:\Windows\system32\dnssd.dll

======List of files/folders modified in the last 3 months======

2010-11-27 23:41:25 ----D---- C:\Windows\Temp
2010-11-27 23:40:51 ----D---- C:\Windows
2010-11-27 23:40:10 ----RD---- C:\Program Files
2010-11-27 23:40:10 ----HD---- C:\ProgramData
2010-11-27 23:40:06 ----D---- C:\Windows\System32
2010-11-27 23:39:41 ----D---- C:\Windows\system32\drivers
2010-11-27 23:39:33 ----D---- C:\Windows\system32\DriverStore
2010-11-27 23:39:33 ----D---- C:\Windows\system32\catroot
2010-11-27 23:39:33 ----D---- C:\Windows\inf
2010-11-27 22:49:42 ----SHD---- C:\System Volume Information
2010-11-27 21:44:16 ----D---- C:\Windows\system32\LogFiles
2010-11-27 17:18:00 ----D---- C:\Windows\system32\config
2010-11-27 13:46:58 ----D---- C:\Program Files\Common Files
2010-11-27 13:44:17 ----RSD---- C:\Windows\assembly
2010-11-27 13:44:05 ----D---- C:\Windows\winsxs
2010-11-26 15:48:57 ----SHD---- C:\$Recycle.Bin
2010-11-25 23:02:21 ----D---- C:\Windows\debug
2010-11-25 16:50:32 ----D---- C:\Windows\system32\Tasks
2010-11-25 15:31:54 ----SD---- C:\ProgramData\Microsoft
2010-11-25 15:12:59 ----RSD---- C:\Windows\Fonts
2010-11-25 03:00:28 ----D---- C:\Program Files\Internet Explorer
2010-11-21 02:18:52 ----D---- C:\Windows\Microsoft.NET
2010-11-20 17:24:08 ----D---- C:\Windows\rescache
2010-11-20 17:22:01 ----D---- C:\Windows\Logs
2010-11-20 12:45:31 ----D---- C:\Windows\system32\migration
2010-11-20 12:45:29 ----D---- C:\Windows\system32\de-DE
2010-11-20 12:45:29 ----D---- C:\Windows\ehome
2010-11-20 12:45:26 ----D---- C:\Windows\system32\Boot
2010-11-20 12:45:26 ----D---- C:\Program Files\Windows Mail
2010-11-20 12:45:24 ----D---- C:\Windows\AppPatch
2010-11-20 12:45:24 ----D---- C:\Program Files\Windows Media Player
2010-11-20 12:17:20 ----D---- C:\Windows\system32\catroot2
2010-11-20 12:10:05 ----D---- C:\Program Files\Common Files\microsoft shared
2010-11-19 23:02:43 ----D---- C:\Windows\system32\en-US
2010-11-19 19:49:12 ----D---- C:\Windows\system32\wdi
2010-11-19 19:38:58 ----D---- C:\Windows\Help
2010-11-18 23:19:46 ----D---- C:\Windows\Tasks
2010-11-18 23:14:59 ----D---- C:\Windows\Downloaded Program Files
2010-11-18 22:57:25 ----D---- C:\Windows\system32\restore
2010-11-18 22:42:28 ----RD---- C:\Users
2010-11-18 22:42:22 ----SHD---- C:\Recovery
2010-11-18 22:42:22 ----D---- C:\Windows\system32\Recovery
2010-11-18 22:42:21 ----D---- C:\Program Files\Windows NT
2010-11-18 22:32:45 ----D---- C:\Windows\system32\wbem
2010-11-18 22:21:47 ----D---- C:\Windows\system32\CodeIntegrity
2010-11-18 22:15:36 ----D---- C:\Windows\system32\sysprep
2010-11-18 22:10:53 ----RASH---- C:\BOOTSECT.BAK
2010-11-18 22:10:31 ----D---- C:\Windows\system32\oobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-08-02 126856]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-08-02 60936]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 netr73;RT73 USB-Drahtlos-LAN-Kartentreiber für Vista; C:\Windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2009-09-17 66592]
R3 RTL8167;Realtek 8167 NT-Treiber; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
S3 netr28;Ralink 802.11n-Drahtlostreiber für Windows Vista; C:\Windows\system32\DRIVERS\netr28.sys [2009-07-13 530944]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-08-02 135336]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-08-02 267944]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-10-16 37664]
R2 Bonjour Service;Dienst "Bonjour"; C:\Program Files\Bonjour\mDNSResponder.exe [2010-10-07 345376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-08-06 215584]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-06 239648]
R2 TeamViewer5;TeamViewer 5; D:\Program Files\Team Viewer\TeamViewer_Service.exe [2010-10-19 2011944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-18 136176]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2010-11-17 820008]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-11-25 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
         
2. Versteckte und Systemdateien sichtbar: Ja
3. HJTscanlist Logfile:
Code:
ATTFilter
 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows [Version 6.1.7600]
 
 
C:

  27.11.2010 23:40     C:\Windows --------- 16384   
       C:\pagefile.sys ---------    
       C:\hiberfil.sys ---------    
  27.11.2010 23:40     C:\Config.Msi --------- 0   
  27.11.2010 23:40     C:\ProgramData --------- 4096   
  27.11.2010 23:40     C:\Program Files --------- 20480   
  27.11.2010 22:49     C:\System Volume Information --------- 32768   
  27.11.2010 21:12     C:\rsit --------- 0   
  26.11.2010 15:48     C:\$Recycle.Bin --------- 0   
  18.11.2010 22:42     C:\Users --------- 4096   
  18.11.2010 22:42     C:\Recovery --------- 4096   
  18.11.2010 22:10     C:\BOOTSECT.BAK --------- 8192   
  18.11.2010 22:10     C:\Boot --------- 8192   
  13.10.2010 02:59     C:\Import --------- 0   
  27.06.2010 18:03     C:\Programme --------- 0   
  22.06.2010 16:58     C:\.rnd --------- 1024   
  04.06.2010 10:20     C:\bootmgr --------- 383832   
  07.03.2010 15:10     C:\IO.SYS --------- 0   
  07.03.2010 15:10     C:\MSDOS.SYS --------- 0   
  17.02.2010 21:25     C:\MSOCache --------- 0   
  15.02.2010 15:24     C:\NVIDIA --------- 0   
  12.02.2010 14:45     C:\Dokumente und Einstellungen --------- 0   
  14.07.2009 05:53     C:\Documents and Settings --------- 0   
  14.07.2009 03:37     C:\PerfLogs --------- 0   
  10.06.2009 22:42     C:\autoexec.bat --------- 24   
  10.06.2009 22:42     C:\config.sys --------- 10   
  06.11.2008 17:25     C:\grldr.mbr --------- 8192   
----------------------------------------

 
C:\Windows

  27.11.2010 23:40     C:\Windows\setupact.log --------- 56   
  27.11.2010 23:40     C:\Windows\setuperr.log --------- 0   
  27.11.2010 23:40     C:\Windows\bootstat.dat --------- 67584   
  27.11.2010 23:40     C:\Windows\PFRO.log --------- 1000   
  27.11.2010 23:44     C:\Windows\WindowsUpdate.log --------- 1081235   
  31.10.2009 06:45     C:\Windows\explorer.exe --------- 2614272   
  14.07.2009 05:54     C:\Windows\win.ini --------- 403   
  14.07.2009 05:41     C:\Windows\WindowsShell.Manifest --------- 749   
  14.07.2009 02:16     C:\Windows\twain_32.dll --------- 51200   
  14.07.2009 02:14     C:\Windows\write.exe --------- 9216   
  14.07.2009 02:14     C:\Windows\winhlp32.exe --------- 9728   
  14.07.2009 02:14     C:\Windows\twunk_32.exe --------- 31232   
  14.07.2009 02:14     C:\Windows\regedit.exe --------- 398336   
  14.07.2009 02:14     C:\Windows\notepad.exe --------- 179712   
  14.07.2009 02:14     C:\Windows\hh.exe --------- 15360   
  14.07.2009 02:14     C:\Windows\HelpPane.exe --------- 497152   
  14.07.2009 02:14     C:\Windows\fveupdate.exe --------- 13824   
  14.07.2009 02:14     C:\Windows\bfsvc.exe --------- 65024   
  13.07.2009 23:58     C:\Windows\mib.bin --------- 43131   
  10.06.2009 22:46     C:\Windows\system.ini --------- 219   
  10.06.2009 22:42     C:\Windows\_default.pif --------- 707   
  10.06.2009 22:42     C:\Windows\winhelp.exe --------- 256192   
  10.06.2009 22:41     C:\Windows\twunk_16.exe --------- 49680   
  10.06.2009 22:41     C:\Windows\twain.dll --------- 94784   
  10.06.2009 22:34     C:\Windows\WMSysPr9.prx --------- 316640   
  10.06.2009 22:19     C:\Windows\msdfmap.ini --------- 1405   
  10.06.2009 22:14     C:\Windows\Starter.xml --------- 48201   
  10.06.2009 22:14     C:\Windows\HomePremium.xml --------- 48265   
----------------------------------------

 
C:\Windows\System

 13.07.2009 22:41      C:\Windows\System\OLESVR.DLL --------- 24064 
 13.07.2009 22:41      C:\Windows\System\WFWNET.DRV --------- 12704 
 13.07.2009 22:41      C:\Windows\System\COMMDLG.DLL --------- 32816 
 13.07.2009 22:41      C:\Windows\System\TIMER.DRV --------- 4048 
 13.07.2009 22:41      C:\Windows\System\MMSYSTEM.DLL --------- 68992 
 13.07.2009 22:41      C:\Windows\System\mmtask.tsk --------- 1152 
 13.07.2009 22:41      C:\Windows\System\mouse.drv --------- 2032 
 13.07.2009 22:41      C:\Windows\System\vga.drv --------- 2176 
 13.07.2009 22:41      C:\Windows\System\sound.drv --------- 1744 
 13.07.2009 22:41      C:\Windows\System\keyboard.drv --------- 2000 
 13.07.2009 22:41      C:\Windows\System\SHELL.DLL --------- 5120 
 13.07.2009 22:41      C:\Windows\System\system.drv --------- 3360 
 10.06.2009 22:42      C:\Windows\System\ver.dll --------- 9008 
 10.06.2009 22:42      C:\Windows\System\olecli.dll --------- 82944 
 10.06.2009 22:42      C:\Windows\System\lzexpand.dll --------- 9936 
 10.06.2009 22:25      C:\Windows\System\stdole.tlb --------- 5532 
 10.06.2009 22:21      C:\Windows\System\msvideo.dll --------- 126912 
 10.06.2009 22:21      C:\Windows\System\mciwave.drv --------- 28160 
 10.06.2009 22:21      C:\Windows\System\mciseq.drv --------- 25264 
 10.06.2009 22:21      C:\Windows\System\mciavi.drv --------- 73376 
 10.06.2009 22:21      C:\Windows\System\avifile.dll --------- 109456 
 10.06.2009 22:21      C:\Windows\System\avicap.dll --------- 69584 
----------------------------------------

 
C:\Windows\System32

 27.11.2010 23:48     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 14816  
 27.11.2010 23:48     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 14816  
 27.11.2010 23:45     C:\Windows\system32\perfh009.dat --------- 651450  
 27.11.2010 23:45     C:\Windows\system32\perfh007.dat --------- 696132  
 27.11.2010 23:45     C:\Windows\system32\perfc007.dat --------- 147428  
 27.11.2010 23:45     C:\Windows\system32\perfc009.dat --------- 120382  
 27.11.2010 23:45     C:\Windows\system32\PerfStringBackup.INI --------- 1611160  
 27.11.2010 23:44     C:\Windows\system32\config --------- 16384  
 27.11.2010 23:39     C:\Windows\system32\drivers --------- 65536  
 27.11.2010 23:39     C:\Windows\system32\catroot --------- 4096  
 27.11.2010 23:39     C:\Windows\system32\DriverStore --------- 4096  
 27.11.2010 21:44     C:\Windows\system32\LogFiles --------- 4096  
 25.11.2010 16:50     C:\Windows\system32\Tasks --------- 4096  
 25.11.2010 15:45     C:\Windows\system32\Wat --------- 0  
 25.11.2010 15:32     C:\Windows\system32\DRVSTORE --------- 0  
 25.11.2010 15:28     C:\Windows\system32\initdebug.nfo --------- 45  
 25.11.2010 15:25     C:\Windows\system32\FNTCACHE.DAT --------- 289720  
 22.11.2010 21:04     C:\Windows\system32\javaws.exe --------- 153376  
 22.11.2010 21:04     C:\Windows\system32\javaw.exe --------- 145184  
 22.11.2010 21:04     C:\Windows\system32\java.exe --------- 145184  
 22.11.2010 21:04     C:\Windows\system32\deployJava1.dll --------- 472808  
 20.11.2010 12:45     C:\Windows\system32\migration --------- 0  
 20.11.2010 12:45     C:\Windows\system32\de-DE --------- 327680  
 20.11.2010 12:45     C:\Windows\system32\Boot --------- 0  
 20.11.2010 12:17     C:\Windows\system32\catroot2 --------- 16384  
 19.11.2010 23:02     C:\Windows\system32\en-US --------- 4096  
 19.11.2010 19:49     C:\Windows\system32\wdi --------- 4096  
 19.11.2010 19:37     C:\Windows\system32\AGEIA --------- 0  
 18.11.2010 23:14     C:\Windows\system32\Macromed --------- 0  
 18.11.2010 23:00     C:\Windows\system32\Lang --------- 0  
 18.11.2010 22:58     C:\Windows\system32\x64 --------- 0  
 18.11.2010 22:57     C:\Windows\system32\restore --------- 0  
 18.11.2010 22:42     C:\Windows\system32\Recovery --------- 0  
 18.11.2010 22:32     C:\Windows\system32\wbem --------- 65536  
 18.11.2010 22:21     C:\Windows\system32\CodeIntegrity --------- 0  
 18.11.2010 22:16     C:\Windows\system32\license.rtf --------- 56735  
 18.11.2010 22:15     C:\Windows\system32\sysprep --------- 0  
 18.11.2010 22:10     C:\Windows\system32\oobe --------- 4096  
 02.11.2010 16:47     C:\Windows\system32\MRT.exe --------- 35758536  
 19.10.2010 10:41     C:\Windows\system32\MpSigStub.exe --------- 222080  
 07.10.2010 12:23     C:\Windows\system32\jdns_sd.dll --------- 75040  
 07.10.2010 12:23     C:\Windows\system32\dns-sd.exe --------- 107808  
 07.10.2010 12:23     C:\Windows\system32\dnssd.dll --------- 91424  
 07.10.2010 12:23     C:\Windows\system32\dnssdX.dll --------- 197920  
 08.09.2010 11:17     C:\Windows\system32\QuickTimeVR.qtx --------- 94208  
 08.09.2010 11:17     C:\Windows\system32\QuickTime.qts --------- 69632  
 08.09.2010 05:30     C:\Windows\system32\wininet.dll --------- 978432  
 08.09.2010 05:30     C:\Windows\system32\urlmon.dll --------- 1226752  
 08.09.2010 05:28     C:\Windows\system32\mstime.dll --------- 606208  
 08.09.2010 05:28     C:\Windows\system32\mshtmled.dll --------- 67072  
 08.09.2010 05:28     C:\Windows\system32\mshtml.dll --------- 5977600  
 08.09.2010 05:28     C:\Windows\system32\msfeedsbs.dll --------- 64512  
 08.09.2010 05:28     C:\Windows\system32\msfeeds.dll --------- 599040  
 08.09.2010 05:28     C:\Windows\system32\licmgr10.dll --------- 44544  
 08.09.2010 05:28     C:\Windows\system32\jsproxy.dll --------- 48128  
 08.09.2010 05:28     C:\Windows\system32\ieui.dll --------- 176640  
 08.09.2010 05:28     C:\Windows\system32\iertutil.dll --------- 2058752  
 08.09.2010 05:28     C:\Windows\system32\iepeers.dll --------- 185856  
 08.09.2010 05:28     C:\Windows\system32\ieframe.dll --------- 10988544  
 08.09.2010 05:27     C:\Windows\system32\iedkcs32.dll --------- 381440  
 08.09.2010 05:25     C:\Windows\system32\msfeedssync.exe --------- 12800  
 08.09.2010 04:22     C:\Windows\system32\html.iec --------- 386048  
 08.09.2010 03:48     C:\Windows\system32\mshtml.tlb --------- 1638912  
 01.09.2010 05:29     C:\Windows\system32\wmp.dll --------- 11406848  
 01.09.2010 05:23     C:\Windows\system32\wmploc.DLL --------- 12625408  
 01.09.2010 03:34     C:\Windows\system32\win32k.sys --------- 2327552  
 31.08.2010 05:32     C:\Windows\system32\mfc40u.dll --------- 954288  
 31.08.2010 05:32     C:\Windows\system32\mfc40.dll --------- 954752  
 27.08.2010 06:46     C:\Windows\system32\srvsvc.dll --------- 168448  
 26.08.2010 05:39     C:\Windows\system32\t2embed.dll --------- 109056  
 21.08.2010 06:36     C:\Windows\system32\wmpmde.dll --------- 738816  
 21.08.2010 06:36     C:\Windows\system32\schannel.dll --------- 224256  
 21.08.2010 06:33     C:\Windows\system32\comctl32.dll --------- 530432  
 21.08.2010 06:32     C:\Windows\system32\spoolsv.exe --------- 316928  
 04.08.2010 07:18     C:\Windows\system32\CPFilters.dll --------- 641536  
 04.08.2010 07:17     C:\Windows\system32\msdri.dll --------- 417792  
 04.08.2010 07:15     C:\Windows\system32\mpg2splt.ax --------- 199680  
 04.08.2010 07:15     C:\Windows\system32\MSNP.ax --------- 204288  
 29.07.2010 07:30     C:\Windows\system32\ir32_32.dll --------- 197632  
 29.07.2010 07:30     C:\Windows\system32\iccvid.dll --------- 82944  
 27.07.2010 15:03     C:\Windows\system32\shell32.dll --------- 12867584  
 29.06.2010 06:02     C:\Windows\system32\ole32.dll --------- 1413632  
 19.06.2010 07:33     C:\Windows\system32\ntoskrnl.exe --------- 3899784  
 19.06.2010 07:33     C:\Windows\system32\ntkrnlpa.exe --------- 3955080  
 19.06.2010 07:23     C:\Windows\system32\rtutils.dll --------- 37376  
 19.06.2010 07:15     C:\Windows\system32\tzres.dll --------- 2048  
 08.06.2010 07:02     C:\Windows\system32\msxml3.dll --------- 1233920  
 02.06.2010 04:55     C:\Windows\system32\XAudio2_7.dll --------- 527192  
 02.06.2010 04:55     C:\Windows\system32\XAPOFX1_5.dll --------- 74072  
 02.06.2010 04:55     C:\Windows\system32\xactengine3_7.dll --------- 239960  
 27.05.2010 08:24     C:\Windows\system32\atmlib.dll --------- 34304  
 27.05.2010 04:49     C:\Windows\system32\atmfd.dll --------- 293888  
 26.05.2010 11:41     C:\Windows\system32\D3DCompiler_43.dll --------- 2106216  
 26.05.2010 11:41     C:\Windows\system32\d3dcsx_43.dll --------- 1868128  
 26.05.2010 11:41     C:\Windows\system32\d3dx10_43.dll --------- 470880  
 26.05.2010 11:41     C:\Windows\system32\d3dx11_43.dll --------- 248672  
 26.05.2010 11:41     C:\Windows\system32\D3DX9_43.dll --------- 1998168  
 05.05.2010 07:46     C:\Windows\system32\StructuredQuery.dll --------- 363520  
 24.03.2010 07:37     C:\Windows\system32\ntdll.dll --------- 1286456  
 18.03.2010 16:47     C:\Windows\system32\aspnet_counters.dll --------- 17760  
----------------------------------------

 
C:\Windows\Prefetch

----------------------------------------

 
C:\Windows\Tasks

 27.11.2010 23:41     C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1094  
 27.11.2010 23:40     C:\Windows\Tasks\SA.DAT --------- 6  
 27.11.2010 23:29     C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1098  
 14.07.2009 05:53     C:\Windows\Tasks\SCHEDLGU.TXT --------- 5668  
----------------------------------------

 
C:\Windows\Temp

----------------------------------------

 
C:\Users\Dominik\AppData\Local\Temp

 27.11.2010 23:47     C:\Users\xxx\AppData\Local\Temp\etilqs_zOMmCs5dQ6uuvBAtfCqb --------- 0  
 27.11.2010 23:41     C:\Users\xxx\AppData\Local\Temp\WPDNSE --------- 0  
 27.11.2010 23:40     C:\Users\xxx\AppData\Local\Temp\MSI5a75f.LOG --------- 4814932  
 27.11.2010 23:40     C:\Users\xxx\AppData\Local\Temp\ucaevents.log --------- 469630  
 27.11.2010 23:36     C:\Users\xxx\AppData\Local\Temp\Low --------- 0  
 27.11.2010 22:24     C:\Users\xxx\AppData\Local\Temp\kl-setup-2010-11-27-22-22-13.log --------- 8659  
 27.11.2010 22:24     C:\Users\xxx\AppData\Local\Temp\kl-install-2010-11-27-22-22-13.log --------- 5616374  
 27.11.2010 22:22     C:\Users\xxx\AppData\Local\Temp\tmp6A5A.tmp --------- 9048  
 27.11.2010 21:01     C:\Users\xxx\AppData\Local\Temp\TWAIN.LOG --------- 875  
 27.11.2010 21:01     C:\Users\xxx\AppData\Local\Temp\Twain001.Mtx --------- 2  
 27.11.2010 21:01     C:\Users\xxx\AppData\Local\Temp\Twunk001.MTX --------- 156  
 27.11.2010 21:01     C:\Users\xxx\AppData\Local\Temp\Twunk002.MTX --------- 0  
 27.11.2010 19:13     C:\Users\xxx\AppData\Local\Temp\.NETFramework,Version=v4.0,Profile=Client.AssemblyAttributes.vb --------- 305  
 27.11.2010 13:47     C:\Users\xxx\AppData\Local\Temp\MSI59a86.LOG --------- 288  
 18.11.2010 22:43     C:\Users\xxx\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0  
----------------------------------------

 
C:\Program Files

 27.11.2010 23:42     C:\Program Files\trend micro --------- 4096  
 27.11.2010 20:59     C:\Program Files\Avira --------- 0  
 27.11.2010 13:46     C:\Program Files\Common Files --------- 4096  
 27.11.2010 13:44     C:\Program Files\Microsoft WSE --------- 0  
 27.11.2010 13:29     C:\Program Files\InstallShield Installation Information --------- 0  
 25.11.2010 15:32     C:\Program Files\iPod --------- 0  
 25.11.2010 15:30     C:\Program Files\QuickTime --------- 4096  
 25.11.2010 15:29     C:\Program Files\Apple Software Update --------- 4096  
 25.11.2010 15:29     C:\Program Files\Bonjour --------- 4096  
 25.11.2010 15:21     C:\Program Files\Skype --------- 0  
 25.11.2010 15:20     C:\Program Files\Pando Networks --------- 0  
 25.11.2010 03:00     C:\Program Files\Internet Explorer --------- 4096  
 24.11.2010 14:20     C:\Program Files\Inno Setup 5 --------- 4096  
 22.11.2010 21:04     C:\Program Files\Java --------- 0  
 22.11.2010 16:11     C:\Program Files\FileZilla FTP Client --------- 4096  
 21.11.2010 21:03     C:\Program Files\Krypton Toolkit 4.3.0 --------- 4096  
 21.11.2010 20:23     C:\Program Files\Mozilla Firefox 4.0 Beta 7 --------- 12288  
 20.11.2010 22:40     C:\Program Files\RocketDock --------- 4096  
 20.11.2010 22:31     C:\Program Files\WinRAR --------- 4096  
 20.11.2010 12:45     C:\Program Files\Windows Mail --------- 4096  
 20.11.2010 12:45     C:\Program Files\Windows Media Player --------- 4096  
 20.11.2010 12:16     C:\Program Files\GamersFirst --------- 0  
 20.11.2010 12:12     C:\Program Files\Microsoft SQL Server --------- 0  
 20.11.2010 12:12     C:\Program Files\Microsoft Silverlight --------- 0  
 20.11.2010 12:11     C:\Program Files\Microsoft Synchronization Services --------- 0  
 20.11.2010 12:11     C:\Program Files\Microsoft SQL Server Compact Edition --------- 0  
 20.11.2010 12:10     C:\Program Files\Microsoft Help Viewer --------- 0  
 20.11.2010 12:10     C:\Program Files\Microsoft SDKs --------- 0  
 20.11.2010 12:10     C:\Program Files\Microsoft.NET --------- 0  
 19.11.2010 19:38     C:\Program Files\NVIDIA Corporation --------- 0  
 19.11.2010 19:37     C:\Program Files\AGEIA Technologies --------- 0  
 18.11.2010 23:21     C:\Program Files\Google --------- 0  
 18.11.2010 23:00     C:\Program Files\Intel --------- 0  
 18.11.2010 22:42     C:\Program Files\Windows NT --------- 4096  
 18.11.2010 22:42     C:\Program Files\Gemeinsame Dateien --------- 0  
 14.07.2009 09:56     C:\Program Files\DVD Maker --------- 4096  
 14.07.2009 09:56     C:\Program Files\Windows Journal --------- 4096  
 14.07.2009 09:56     C:\Program Files\Microsoft Games --------- 4096  
 14.07.2009 09:47     C:\Program Files\Windows Sidebar --------- 4096  
 14.07.2009 09:47     C:\Program Files\Windows Photo Viewer --------- 4096  
 14.07.2009 09:47     C:\Program Files\Windows Defender --------- 4096  
 14.07.2009 05:53     C:\Program Files\Uninstall Information --------- 0  
 14.07.2009 05:52     C:\Program Files\Windows Portable Devices --------- 0  
 14.07.2009 05:52     C:\Program Files\MSBuild --------- 0  
 14.07.2009 05:52     C:\Program Files\Reference Assemblies --------- 0  
 14.07.2009 05:41     C:\Program Files\desktop.ini --------- 174  
----------------------------------------

 
C:\ProgramData\.. 

xxx    
Default    
Public    
Default User    
All Users    
desktop.ini    
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts


----------------------------------------

 

Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                   0            12 K
System                           4 Services                   0         1.220 K
smss.exe                       260 Services                   0           784 K
csrss.exe                      372 Services                   0         3.268 K
wininit.exe                    440 Services                   0         4.076 K
csrss.exe                      448 Console                    1         5.188 K
winlogon.exe                   484 Console                    1         4.636 K
services.exe                   544 Services                   0         9.848 K
lsass.exe                      560 Services                   0         8.492 K
lsm.exe                        568 Services                   0         3.020 K
svchost.exe                    684 Services                   0         6.564 K
nvvsvc.exe                     768 Services                   0         2.800 K
svchost.exe                    808 Services                   0         5.344 K
svchost.exe                    872 Services                   0        16.400 K
svchost.exe                    944 Services                   0        62.732 K
svchost.exe                    972 Services                   0        30.300 K
svchost.exe                   1116 Services                   0        11.272 K
svchost.exe                   1232 Services                   0        10.164 K
nvvsvc.exe                    1244 Console                    1         6.160 K
spoolsv.exe                   1416 Services                   0        10.752 K
sched.exe                     1444 Services                   0         1.608 K
svchost.exe                   1496 Services                   0        10.760 K
avguard.exe                   1604 Services                   0        82.564 K
AppleMobileDeviceService.     1668 Services                   0         6.296 K
mDNSResponder.exe             1700 Services                   0         4.604 K
nvSCPAPISvr.exe               1764 Services                   0         5.376 K
TeamViewer_Service.exe        1844 Services                   0         8.744 K
avshadow.exe                  1852 Services                   0         3.360 K
conhost.exe                   1860 Services                   0         2.140 K
dwm.exe                       2292 Console                    1        20.572 K
taskhost.exe                  2300 Console                    1         5.896 K
explorer.exe                  2372 Console                    1        41.048 K
svchost.exe                   2512 Services                   0        10.268 K
avgnt.exe                     2636 Console                    1         3.456 K
SearchIndexer.exe             2876 Services                   0        20.252 K
wmpnetwk.exe                  2992 Services                   0         3.820 K
WmiPrvSE.exe                  3212 Services                   0         4.820 K
svchost.exe                   3404 Services                   0         9.884 K
chrome.exe                    3840 Console                    1        39.256 K
chrome.exe                    4028 Console                    1        24.456 K
svchost.exe                   2476 Services                   0        22.328 K
TrustedInstaller.exe          3396 Services                   0         6.060 K
SearchProtocolHost.exe         724 Services                   0         6.416 K
SearchFilterHost.exe          2264 Services                   0         4.556 K
cmd.exe                       1992 Console                    1         3.136 K
conhost.exe                   1684 Console                    1         4.368 K
dllhost.exe                   2008 Console                    1         3.924 K
tasklist.exe                  2400 Console                    1         4.148 K
WmiPrvSE.exe                  1016 Services                   0         4.808 K

 
***** Ende des Scans 27.11.2010 um 23:48:33,02 ***
         
4. CCleaner (installierte Programme):
Code:
ATTFilter
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	17.11.2010	6,00MB	10.1.102.64
Adobe Flash Player 10 Plugin	Adobe Systems Incorporated	20.11.2010	6,00MB	10.1.102.64
Adobe Reader 9 - Deutsch	Adobe Systems Incorporated	26.11.2010	232MB	9.0.0
Apple Application Support	Apple Inc.	24.11.2010	52,8MB	1.4.1
Apple Mobile Device Support	Apple Inc.	24.11.2010	21,7MB	3.3.0.69
Apple Software Update	Apple Inc.	24.11.2010	2,26MB	2.1.2.120
Avira AntiVir Personal - Free Antivirus	Avira GmbH	26.11.2010	70,7MB	10.0.0.592
Bonjour	Apple Inc.	24.11.2010	1,10MB	2.0.4.0
CCleaner	Piriform	24.11.2010		3.00
Die*Sims™*3	Electronic Arts	26.11.2010		1.0.615
FileZilla Client 3.3.5.1		21.11.2010		3.3.5.1
Google Chrome	Google Inc.	17.11.2010		7.0.517.44
Incomedia WebSite X5 v8 - Evolution		18.11.2010		
Inno Setup Version 5.4.0	Jordan Russell	23.11.2010	3,96MB	5.4.0
Install Creator Pro		26.11.2010		
Intel(R) Graphics Media Accelerator Driver	Intel Corporation	17.11.2010	54,3MB	8.15.10.1930
Intel(R) TV Wizard	Intel Corporation	17.11.2010		
iTunes	Apple Inc.	24.11.2010	144,8MB	10.1.0.56
Java(TM) 6 Update 22	Oracle	21.11.2010	95,0MB	6.0.220
Krypton Toolkit 4.3.0	Component Factory	20.11.2010	102,7MB	4.3.0
Malwarebytes' Anti-Malware	Malwarebytes Corporation	26.11.2010	8,51MB	
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	18.11.2010	38,8MB	4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	19.11.2010	2,94MB	4.0.30319
Microsoft .NET Framework 4 Extended	Microsoft Corporation	18.11.2010	52,0MB	4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack	Microsoft Corporation	19.11.2010	10,7MB	4.0.30319
Microsoft .NET Framework 4 Multi-Targeting Pack	Microsoft Corporation	19.11.2010	83,5MB	4.0.30319
Microsoft Help Viewer 1.0	Microsoft Corporation	19.11.2010	3,97MB	1.0.30319
Microsoft Help Viewer 1.0 Language Pack - DEU	Microsoft Corporation	19.11.2010	1,95MB	1.0.30319
Microsoft Silverlight	Microsoft Corporation	19.11.2010	14,9MB	3.0.40818.0
Microsoft SQL Server 2008 R2 Management Objects	Microsoft Corporation	19.11.2010	17,2MB	10.50.1447.4
Microsoft SQL Server Compact 3.5 SP2 DEU	Microsoft Corporation	19.11.2010	3,69MB	3.5.8080.0
Microsoft SQL Server System CLR Types	Microsoft Corporation	19.11.2010	2,55MB	10.50.1447.4
Microsoft Visual Basic 2010 Express - DEU	Microsoft Corporation	19.11.2010		10.0.30319
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	26.11.2010	0,42MB	8.0.56336
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022	Microsoft Corporation	19.11.2010	1,42MB	9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	17.11.2010	0,58MB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974	Microsoft Corporation	18.11.2010	0,58MB	9.0.30729.4974
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools	Microsoft Corporation	19.11.2010	35,3MB	10.0.30319
Microsoft WSE 3.0 Runtime	Microsoft Corp.	26.11.2010	0,92MB	3.0.5305.0
Mozilla Firefox 4.0b7 (x86 de)	Mozilla	20.11.2010	26,3MB	4.0b7
NVIDIA Drivers	NVIDIA Corporation	18.11.2010		1.9
NVIDIA PhysX	NVIDIA Corporation	18.11.2010	120,1MB	9.09.0814
NVIDIA Stereoscopic 3D Driver	NVIDIA Corporation	18.11.2010		7.15.11.9045
OpenOffice.org 3.2	OpenOffice.org	24.11.2010	362MB	3.2.9502
Paint.NET v3.5.6	dotPDN LLC	18.11.2010	10,4MB	3.56.0
QuickTime	Apple Inc.	24.11.2010	73,7MB	7.68.75.0
RocketDock 1.3.5	Punk Software	19.11.2010		
Skype™ 5.0	Skype Technologies S.A.	17.11.2010	21,4MB	5.0.152
SpeedFan (remove only)		24.11.2010		
TeamViewer 5	TeamViewer GmbH	17.11.2010		5.1.9385 
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU	Microsoft Corporation	19.11.2010	11,2MB	4.0.8080.0
VLC media player 1.1.5	VideoLAN	24.11.2010		1.1.5
War Rock	GamersFirst	17.11.2010		
WinRAR		19.11.2010
         
5.
Antiviren Programm (AntiVir Personal): Kein Fund
Malwarebytes: Kein Fund


Ich konnte auch aus den Logfiles kein Fazit ziehen, hab auch schon die Platten nach der Datei 'install.exe' durchsucht, existiert nicht mehr.
Hab auch schon so auf der Platte nach Veränderungen gesucht, aber ist eben nichts an der groben Verzeichnisstruktur (z.B. Program Files, AppData etc.) geändert. Systemwiederherstellung hat nicht geholfen (dachte könnte helfen weil es eine 'install.exe' war)...

Hoffe Ihr könnt mir da noch weiterhelfen.

Alt 28.11.2010, 11:41   #2
markusg
/// Malware-holic
 
Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet - Standard

Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet



ootl:
Systemscan mit OTL
download otl:
http://filepony.de/download-otl/

Doppelklick auf die OTL.exe
(user von Windows 7 und Vista: Rechtsklick als Administrator ausführen)
1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
2. Hake an "scan all users"
3. Unter "Extra Registry wähle:
"Use Safelist" "LOP Check" "Purity Check"
4. Kopiere in die Textbox:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
5. Klicke "Scan"
6. 2 reporte werden erstellt:
OTL.Txt
Extras.Txt
beide posten bitte
__________________

__________________

Alt 28.11.2010, 12:55   #3
FranzBauer
 
Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet - Standard

Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet



Hier sind die zwei Logfiles:
Code:
ATTFilter
OTL logfile created on: 28.11.2010 12:32:21 - Run 1
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\Dominik\Downloads
 Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 70,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 126,07 Gb Free Space | 84,59% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 448,62 Gb Free Space | 96,32% Space Free | Partition Type: NTFS
Drive F: | 99,00 Gb Total Space | 91,34 Gb Free Space | 92,27% Space Free | Partition Type: NTFS
 
Computer Name: DOMINIK-PC | User Name: Dominik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Dominik\Downloads\OTL.exe (OldTimer Tools)
PRC - D:\Program Files\Team Viewer\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Programme\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - D:\Program Files\D61F20F75FCCE260DA0769CC34BB2481\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - D:\Program Files\D61F20F75FCCE260DA0769CC34BB2481\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - c:\Programme\Windows Defender\MpCmdRun.exe (Microsoft Corporation)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Dominik\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (TeamViewer5) -- D:\Program Files\Team Viewer\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (NetTcpActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (NetPipeActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (NetMsmqActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\Windows\system32\DRIVERS\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwififlt) -- C:\Windows\System32\drivers\vwififlt.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (netr73) -- C:\Windows\System32\drivers\netr73.sys (Ralink Technology, Corp.)
DRV - (netr28) -- C:\Windows\System32\drivers\netr28.sys (Ralink Technology, Corp.)
DRV - (RTL8167) -- C:\Windows\System32\drivers\Rt86win7.sys (Realtek Corporation                                            )
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (speedfan) -- C:\Windows\system32\speedfan.sys (Windows (R) 2000 DDK provider)
DRV - (giveio) -- C:\Windows\system32\giveio.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7E 33 53 61 6D 87 CB 01  [binary data]
IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2682599&q="
 
FF - HKLM\software\mozilla\Mozilla Firefox 4.0b7\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 7\components [2010.11.21 21:18:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0b7\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 7\plugins
 
[2010.11.21 20:23:26 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\mozilla\Extensions
[2010.11.25 22:24:06 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\3s3qzocw.default\extensions
[2010.11.25 22:24:06 | 000,000,000 | ---D | M] (InnoGames Community Toolbar) -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\3s3qzocw.default\extensions\{c7478d43-2bd5-4844-98b8-c2a6aa9ed677}
[2010.11.25 22:24:05 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\3s3qzocw.default\extensions\engine@conduit.com
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O4 - HKLM..\Run: [iTunesHelper] D:\Program Files\41D95987DA91375C523B7AA3F081B80C\iTunesHelper.exe (Apple Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = D:\Program Files\D61F20F75FCCE260DA0769CC34BB2481\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{728cce12-f358-11df-9aec-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{728cce12-f358-11df-9aec-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.11.28 11:10:55 | 000,000,000 | ---D | C] -- C:\Programme\Install Creator Pro
[2010.11.27 23:52:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Malwarebytes
[2010.11.27 23:52:28 | 000,000,000 | ---D | C] -- C:\Programme\ Malwarebytes Anti-Malware 
[2010.11.27 23:52:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.11.27 21:12:34 | 000,000,000 | ---D | C] -- C:\Programme\trend micro
[2010.11.27 21:12:34 | 000,000,000 | ---D | C] -- C:\rsit
[2010.11.27 21:02:10 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Avira
[2010.11.27 21:01:15 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\ABBYY
[2010.11.27 21:01:15 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\ABBYY
[2010.11.27 20:59:31 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2010.11.27 20:59:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2010.11.27 19:44:49 | 000,000,000 | -H-D | C] -- C:\Users\Public\Documents\Server
[2010.11.27 13:49:17 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Electronic Arts
[2010.11.27 13:46:58 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Adobe
[2010.11.27 13:44:14 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft WSE
[2010.11.27 13:29:52 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information
[2010.11.25 16:50:37 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Microsoft Games
[2010.11.25 16:18:45 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\OpenOffice.org
[2010.11.25 15:45:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2010.11.25 15:32:21 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2010.11.25 15:32:07 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2010.11.25 15:29:50 | 000,000,000 | ---D | C] -- C:\Programme\Apple Software Update
[2010.11.25 15:29:32 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour
[2010.11.24 14:23:19 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Output
[2010.11.24 14:20:56 | 000,000,000 | ---D | C] -- C:\Programme\Inno Setup 5
[2010.11.22 21:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010.11.22 21:05:23 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Java
[2010.11.22 21:05:06 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2010.11.22 21:05:06 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2010.11.22 21:05:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2010.11.22 21:05:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2010.11.22 21:04:47 | 000,000,000 | ---D | C] -- C:\Programme\Java
[2010.11.22 20:39:36 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Umrechner
[2010.11.22 16:11:09 | 000,000,000 | ---D | C] -- C:\Programme\FileZilla FTP Client
[2010.11.22 16:10:10 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\FileZilla
[2010.11.21 21:20:03 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Apple Computer
[2010.11.21 21:20:02 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Apple Computer
[2010.11.21 21:19:52 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2010.11.21 21:19:05 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010.11.21 21:17:55 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime
[2010.11.21 21:17:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2010.11.21 21:17:37 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Apple
[2010.11.21 21:16:34 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Apple
[2010.11.21 21:16:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2010.11.21 21:03:19 | 000,000,000 | ---D | C] -- C:\Programme\Krypton Toolkit 4.3.0
[2010.11.21 21:03:18 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Component Factory
[2010.11.21 20:23:22 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Mozilla
[2010.11.21 20:23:15 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox 4.0 Beta 7
[2010.11.21 01:33:01 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Mozilla
[2010.11.21 01:11:46 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Geckofx
[2010.11.20 22:40:17 | 000,000,000 | ---D | C] -- C:\Programme\RocketDock
[2010.11.20 22:31:59 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\WinRAR
[2010.11.20 22:31:52 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR
[2010.11.20 22:25:04 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Doktop
[2010.11.20 16:37:10 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Xenocode
[2010.11.20 13:44:53 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\vlc
[2010.11.20 12:12:36 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SQL Server
[2010.11.20 12:12:25 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Silverlight
[2010.11.20 12:11:47 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Synchronization Services
[2010.11.20 12:11:46 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SQL Server Compact Edition
[2010.11.20 12:10:05 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SDKs
[2010.11.20 12:10:05 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Help Viewer
[2010.11.19 23:06:51 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\AIMP
[2010.11.19 23:02:41 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft.NET
[2010.11.19 23:02:07 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2010.11.19 23:02:07 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2010.11.19 23:02:07 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2010.11.19 23:00:22 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010.11.19 22:54:13 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Paint.NET
[2010.11.19 22:45:26 | 000,604,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMCTL32.OCX
[2010.11.19 22:44:27 | 001,355,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSVBVM50.dll
[2010.11.19 22:44:27 | 000,207,872 | ---- | C] (Incomedia -  www.websitex5.com) -- C:\Windows\System32\iwpsetup.exe
[2010.11.19 22:44:27 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VB5STKIT.DLL
[2010.11.19 20:48:12 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Activision
[2010.11.19 20:47:43 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2010.11.19 20:47:43 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll
[2010.11.19 20:47:43 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
[2010.11.19 20:47:43 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll
[2010.11.19 20:47:43 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
[2010.11.19 20:47:43 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll
[2010.11.19 20:47:43 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
[2010.11.19 20:47:42 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll
[2010.11.19 20:47:42 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll
[2010.11.19 20:47:42 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll
[2010.11.19 20:47:42 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll
[2010.11.19 20:47:42 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll
[2010.11.19 20:47:41 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll
[2010.11.19 20:47:41 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll
[2010.11.19 20:47:41 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
[2010.11.19 20:47:41 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll
[2010.11.19 20:47:41 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2010.11.19 20:47:41 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll
[2010.11.19 20:47:41 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll
[2010.11.19 20:47:40 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll
[2010.11.19 20:47:40 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
[2010.11.19 20:47:40 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll
[2010.11.19 20:47:40 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
[2010.11.19 20:47:40 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll
[2010.11.19 20:47:39 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2010.11.19 20:47:39 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
[2010.11.19 20:47:39 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll
[2010.11.19 20:47:39 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2010.11.19 20:47:39 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll
[2010.11.19 20:47:39 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll
[2010.11.19 20:47:39 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll
[2010.11.19 20:47:39 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll
[2010.11.19 20:47:39 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll
[2010.11.19 20:47:38 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
[2010.11.19 20:47:38 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
[2010.11.19 20:47:38 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll
[2010.11.19 20:47:38 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll
[2010.11.19 20:47:38 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
[2010.11.19 20:47:38 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll
[2010.11.19 20:47:38 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll
[2010.11.19 20:47:38 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll
[2010.11.19 20:47:38 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll
[2010.11.19 20:47:37 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll
[2010.11.19 20:47:37 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll
[2010.11.19 20:47:37 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll
[2010.11.19 20:47:37 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll
[2010.11.19 20:47:37 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll
[2010.11.19 20:47:37 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll
[2010.11.19 20:47:37 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll
[2010.11.19 20:47:37 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll
[2010.11.19 20:47:37 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll
[2010.11.19 20:47:36 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll
[2010.11.19 20:47:36 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll
[2010.11.19 20:47:36 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll
[2010.11.19 20:47:36 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll
[2010.11.19 20:47:35 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll
[2010.11.19 20:47:35 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll
[2010.11.19 20:47:33 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
[2010.11.19 20:47:33 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll
[2010.11.19 20:47:33 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll
[2010.11.19 20:47:33 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll
[2010.11.19 20:47:33 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll
[2010.11.19 20:47:33 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll
[2010.11.19 20:47:32 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll
[2010.11.19 20:47:32 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll
[2010.11.19 20:47:32 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll
[2010.11.19 20:47:32 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll
[2010.11.19 20:47:32 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll
[2010.11.19 20:47:31 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2010.11.19 20:47:31 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
[2010.11.19 20:47:31 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll
[2010.11.19 20:47:31 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll
[2010.11.19 20:47:31 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll
[2010.11.19 20:47:31 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll
[2010.11.19 20:47:31 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll
[2010.11.19 20:47:30 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll
[2010.11.19 20:47:30 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll
[2010.11.19 20:47:30 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll
[2010.11.19 20:47:23 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
[2010.11.19 20:47:22 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll
[2010.11.19 20:47:22 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll
[2010.11.19 20:47:22 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll
[2010.11.19 20:47:22 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll
[2010.11.19 20:47:22 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll
[2010.11.19 20:47:22 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll
[2010.11.19 20:47:21 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll
[2010.11.19 20:47:21 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll
[2010.11.19 19:55:00 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2010.11.19 19:55:00 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2010.11.19 19:54:32 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010.11.19 19:54:32 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010.11.19 19:54:31 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010.11.19 19:54:31 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2010.11.19 19:54:30 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010.11.19 19:54:30 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010.11.19 19:54:30 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010.11.19 19:54:30 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010.11.19 19:54:30 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010.11.19 19:54:30 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010.11.19 19:54:30 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010.11.19 19:54:19 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll
[2010.11.19 19:54:19 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2010.11.19 19:54:18 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2010.11.19 19:54:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2010.11.19 19:54:02 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010.11.19 19:53:59 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2010.11.19 19:53:57 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2010.11.19 19:53:57 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2010.11.19 19:53:56 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2010.11.19 19:53:56 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2010.11.19 19:53:49 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2010.11.19 19:53:48 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
[2010.11.19 19:53:47 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2010.11.19 19:53:41 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010.11.19 19:53:31 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2010.11.19 19:53:30 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2010.11.19 19:53:30 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2010.11.19 19:53:27 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2010.11.19 19:53:22 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2010.11.19 19:53:22 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2010.11.19 19:53:01 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2010.11.19 19:52:59 | 000,026,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2010.11.19 19:52:55 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2010.11.19 19:52:44 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2010.11.19 19:52:44 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2010.11.19 19:52:43 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2010.11.19 19:45:18 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2010.11.19 19:45:17 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2010.11.19 19:45:14 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2010.11.19 19:45:14 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2010.11.19 19:45:14 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2010.11.19 19:45:14 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2010.11.19 19:45:14 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2010.11.19 19:45:14 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2010.11.19 19:45:14 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2010.11.19 19:45:14 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2010.11.19 19:45:12 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
[2010.11.19 19:45:00 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2010.11.19 19:45:00 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010.11.19 19:45:00 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2010.11.19 19:44:41 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2010.11.19 19:44:26 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2010.11.19 19:42:40 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Adobe
[2010.11.19 19:39:27 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvuhda.exe
[2010.11.19 19:39:27 | 000,155,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcohda.dll
[2010.11.19 19:39:27 | 000,066,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvhda32v.sys
[2010.11.19 19:39:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nvhdap32.dll
[2010.11.19 19:38:18 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2010.11.19 19:38:05 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation
[2010.11.19 19:37:42 | 000,000,000 | ---D | C] -- C:\Programme\AGEIA Technologies
[2010.11.19 19:37:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\AGEIA
[2010.11.19 19:37:03 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Wise Installation Wizard
[2010.11.19 19:36:53 | 004,223,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NVStWiz.exe
[2010.11.19 19:35:45 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvudisp.exe
[2010.11.19 19:34:14 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NVUNINST.EXE
[2010.11.19 19:27:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010.11.18 23:29:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\skypePM
[2010.11.18 23:28:40 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Skype
[2010.11.18 23:28:39 | 000,000,000 | R--D | C] -- C:\Programme\Skype
[2010.11.18 23:28:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Skype
[2010.11.18 23:28:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010.11.18 23:19:35 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Google
[2010.11.18 23:19:32 | 000,000,000 | ---D | C] -- C:\Programme\Google
[2010.11.18 23:19:24 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\OpenCandy
[2010.11.18 23:19:22 | 000,000,000 | ---D | C] -- C:\Programme\GamersFirst
[2010.11.18 23:18:45 | 000,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2010.11.18 23:15:36 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
[2010.11.18 23:15:36 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll
[2010.11.18 23:15:36 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll
[2010.11.18 23:15:36 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
[2010.11.18 23:15:00 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Macromedia
[2010.11.18 23:15:00 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Adobe
[2010.11.18 23:14:57 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2010.11.18 23:09:32 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\TeamViewer
[2010.11.18 23:02:51 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010.11.18 23:00:44 | 000,398,336 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\TVWizudlg.exe
[2010.11.18 23:00:44 | 000,000,000 | ---D | C] -- C:\Windows\System32\Lang
[2010.11.18 23:00:43 | 000,000,000 | ---D | C] -- C:\Programme\Intel
[2010.11.18 22:58:29 | 001,002,008 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpun.exe
[2010.11.18 22:58:29 | 000,000,000 | ---D | C] -- C:\Windows\System32\x64
[2010.11.18 22:47:21 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Desktop\Gameboy
[2010.11.18 22:42:49 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Searches
[2010.11.18 22:42:39 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Identities
[2010.11.18 22:42:37 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Contacts
[2010.11.18 22:42:33 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\VirtualStore
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Vorlagen
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\AppData\Local\Verlauf
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\AppData\Local\Temporary Internet Files
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Startmenü
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\SendTo
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Recent
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Netzwerkumgebung
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Lokale Einstellungen
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Documents\Eigene Videos
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Documents\Eigene Musik
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Eigene Dateien
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Documents\Eigene Bilder
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Druckumgebung
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Cookies
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\AppData\Local\Anwendungsdaten
[2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Anwendungsdaten
[2010.11.18 22:42:28 | 000,000,000 | --SD | C] -- C:\Users\Dominik\AppData\Roaming\Microsoft
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Videos
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Saved Games
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Pictures
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Music
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Links
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Favorites
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Downloads
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Documents
[2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Desktop
[2010.11.18 22:42:28 | 000,000,000 | -H-D | C] -- C:\Users\Dominik\AppData
[2010.11.18 22:42:28 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Temp
[2010.11.18 22:42:28 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Microsoft
[2010.11.18 22:42:28 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Media Center Programs
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2010.11.18 22:15:18 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010.11.18 22:12:16 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010.11.18 22:11:05 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010.11.18 21:54:25 | 000,000,000 | -HSD | C] -- C:\Boot
[2010.11.08 17:28:52 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Zeileneditor
[2010.11.04 21:56:49 | 000,000,000 | -H-D | C] -- C:\Config.Msi
[2010.11.04 16:46:11 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\shutme
[2010.10.31 12:07:03 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\8-Bit
[2010.10.30 20:02:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Server
 
========== Files - Modified Within 30 Days ==========
 
[2010.11.28 12:29:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.11.28 11:10:56 | 000,001,022 | ---- | M] () -- C:\Users\Public\Desktop\Install Creator Pro.lnk
[2010.11.28 11:10:29 | 000,696,132 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.11.28 11:10:29 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.11.28 11:10:29 | 000,147,428 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.11.28 11:10:29 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.11.28 07:43:47 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.11.28 01:31:06 | 000,000,997 | ---- | M] () -- C:\Users\Dominik\Desktop\AIMP2.exe - Verknüpfung.lnk
[2010.11.28 01:23:09 | 000,014,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.11.28 01:23:09 | 000,014,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.11.28 01:15:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.11.28 01:15:48 | 2566,365,184 | -HS- | M] () -- C:\hiberfil.sys
[2010.11.25 22:22:20 | 000,013,957 | ---- | M] () -- C:\Users\Dominik\Documents\smrm.odt
[2010.11.25 22:09:12 | 000,026,100 | ---- | M] () -- C:\Users\Dominik\Documents\perso_charakter_elliot.odt
[2010.11.25 16:21:26 | 000,000,398 | ---- | M] () -- C:\Users\Dominik\Documents\Dokument.rtf
[2010.11.25 16:19:05 | 000,001,071 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
[2010.11.25 15:28:32 | 000,000,045 | ---- | M] () -- C:\Windows\System32\initdebug.nfo
[2010.11.25 15:25:55 | 000,289,720 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.11.22 21:04:49 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2010.11.22 21:04:49 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2010.11.22 21:04:49 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2010.11.22 21:04:49 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2010.11.22 16:12:28 | 000,000,199 | ---- | M] () -- C:\Users\Dominik\Documents\.htaccess
[2010.11.21 20:23:20 | 000,002,088 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox 4.0 Beta 7.lnk
[2010.11.21 01:50:31 | 000,127,892 | ---- | M] () -- C:\Users\Dominik\Documents\Zeileneditor.zip
[2010.11.20 13:40:34 | 015,383,240 | ---- | M] () -- C:\Users\Dominik\Documents\clip0001.avi
[2010.11.19 22:41:03 | 000,000,111 | ---- | M] () -- C:\Users\Dominik\Desktop\SR1.m3u
[2010.11.18 23:29:40 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2010.11.18 22:16:25 | 000,056,735 | ---- | M] () -- C:\Windows\System32\license.rtf
[2010.11.18 22:10:53 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2010.10.30 20:05:40 | 000,022,528 | ---- | M] () -- C:\Users\Dominik\Desktop\WindowsApplication1.exe
 
========== Files Created - No Company Name ==========
 
[2010.11.28 11:10:56 | 000,001,022 | ---- | C] () -- C:\Users\Public\Desktop\Install Creator Pro.lnk
[2010.11.28 01:31:06 | 000,000,997 | ---- | C] () -- C:\Users\Dominik\Desktop\AIMP2.exe - Verknüpfung.lnk
[2010.11.25 22:22:19 | 000,013,957 | ---- | C] () -- C:\Users\Dominik\Documents\smrm.odt
[2010.11.25 22:09:10 | 000,026,100 | ---- | C] () -- C:\Users\Dominik\Documents\perso_charakter_elliot.odt
[2010.11.25 16:21:26 | 000,000,398 | ---- | C] () -- C:\Users\Dominik\Documents\Dokument.rtf
[2010.11.25 16:19:05 | 000,001,071 | ---- | C] () -- C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
[2010.11.25 15:18:47 | 000,022,528 | ---- | C] () -- C:\Users\Dominik\Desktop\WindowsApplication1.exe
[2010.11.22 16:12:28 | 000,000,199 | ---- | C] () -- C:\Users\Dominik\Documents\.htaccess
[2010.11.21 20:23:20 | 000,002,088 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox 4.0 Beta 7.lnk
[2010.11.21 18:46:48 | 000,000,045 | ---- | C] () -- C:\Windows\System32\initdebug.nfo
[2010.11.21 01:50:31 | 000,127,892 | ---- | C] () -- C:\Users\Dominik\Documents\Zeileneditor.zip
[2010.11.20 13:32:15 | 015,383,240 | ---- | C] () -- C:\Users\Dominik\Documents\clip0001.avi
[2010.11.19 22:44:27 | 000,006,114 | ---- | C] () -- C:\Windows\System32\SHELLLNK.TLB
[2010.11.19 22:41:03 | 000,000,111 | ---- | C] () -- C:\Users\Dominik\Desktop\SR1.m3u
[2010.11.19 19:39:27 | 000,001,481 | ---- | C] () -- C:\Windows\System32\nvhda.nvu
[2010.11.19 19:35:44 | 000,010,155 | ---- | C] () -- C:\Windows\System32\nvdisp.nvu
[2010.11.18 23:29:40 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.18 23:19:46 | 000,001,098 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.11.18 23:19:43 | 000,001,094 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.11.18 23:00:44 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2010.11.18 23:00:44 | 000,121,232 | ---- | C] () -- C:\Windows\System32\IScrNB.bmp
[2010.11.18 21:51:25 | 000,383,832 | RHS- | C] () -- C:\bootmgr
[2009.08.03 00:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2009.08.03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2009.08.03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
 
========== LOP Check ==========
 
[2010.11.28 11:13:41 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\AIMP
[2010.11.21 21:03:18 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Component Factory
[2010.11.27 12:10:04 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\FileZilla
[2010.11.28 01:14:51 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenCandy
[2010.11.25 16:18:45 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenOffice.org
[2010.11.18 23:09:32 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\TeamViewer
[2009.07.14 05:53:46 | 000,005,668 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2010.11.27 21:01:15 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\ABBYY
[2010.11.19 19:42:40 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Adobe
[2010.11.28 11:13:41 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\AIMP
[2010.11.21 21:23:09 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Apple Computer
[2010.11.27 21:02:10 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Avira
[2010.11.21 21:03:18 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Component Factory
[2010.11.27 12:10:04 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\FileZilla
[2010.11.18 22:42:39 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Identities
[2010.11.18 23:15:00 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Macromedia
[2010.11.27 23:52:38 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Malwarebytes
[2009.07.14 09:56:41 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Media Center Programs
[2010.11.27 13:44:14 | 000,000,000 | --SD | M] -- C:\Users\Dominik\AppData\Roaming\Microsoft
[2010.11.21 20:23:26 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Mozilla
[2010.11.28 01:14:51 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenCandy
[2010.11.25 16:18:45 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenOffice.org
[2010.11.25 18:11:32 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Skype
[2010.11.25 16:30:29 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\skypePM
[2010.11.18 23:09:32 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\TeamViewer
[2010.11.28 01:14:51 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\vlc
[2010.11.20 22:32:00 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
[2010.11.27 13:44:14 | 000,010,134 | R--- | M] () -- C:\Users\Dominik\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2010.11.18 23:19:31 | 000,659,048 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\OpenCandy\OpenCandy_491F238FD8D54385AB4F14A48D158D9F\Chrome_p2v1wr.exe
[2010.11.18 23:19:26 | 000,349,296 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\OpenCandy\OpenCandy_491F238FD8D54385AB4F14A48D158D9F\DLMgr_3_1.6.87.exe
[2010.08.25 03:58:52 | 000,579,824 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\OpenCandy\OpenCandy_491F238FD8D54385AB4F14A48D158D9F\opencandy_08232010_SIGNED.exe
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=0D5FBE7A10141460C61791510EB5F5F9 -- C:\Windows\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\System32\user32.dll
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >

< End of report >
         
Code:
ATTFilter
OTL Extras logfile created on: 28.11.2010 12:32:21 - Run 1
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\Dominik\Downloads
 Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 70,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 126,07 Gb Free Space | 84,59% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 448,62 Gb Free Space | 96,32% Space Free | Partition Type: NTFS
Drive F: | 99,00 Gb Total Space | 91,34 Gb Free Space | 92,27% Space Free | Partition Type: NTFS
 
Computer Name: DOMINIK-PC | User Name: Dominik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox 4.0 Beta 7\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Program Files\3973B01543C57F53FFF87DDDA6F61020\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Program Files\3973B01543C57F53FFF87DDDA6F61020\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}" = Microsoft SQL Server System CLR Types
"{616C6F39-4CE1-3434-A665-2F6A04C09A7F}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{639673E9-D53F-44F4-A046-485C8A6ADA15}" = Paint.NET v3.5.6
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
"{8EDD94AF-CB8E-42FB-8B9A-DA6D3920D4A7}" = Krypton Toolkit 4.3.0
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A106D33E-6B43-42C0-9BFC-D03303261FA7}" = Microsoft SQL Server 2008 R2 Management Objects
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}" = Microsoft Visual Basic 2010 Express - DEU
"{CFCB8616-A5D1-4281-80E8-389F685BFAE2}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FAE36873-1941-4076-A9A5-48812B5EA0B7}" = iTunes
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CCleaner" = CCleaner
"FileZilla Client" = FileZilla Client 3.3.5.1
"GamersFirst War Rock" = War Rock
"Google Chrome" = Google Chrome
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Incomedia WebSite X5 v8 - Evolution" = Incomedia WebSite X5 v8 - Evolution
"Inno Setup 5_is1" = Inno Setup Version 5.4.0
"Install Creator Pro" = Install Creator Pro
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft Visual Basic 2010 Express - DEU" = Microsoft Visual Basic 2010 Express - DEU
"Mozilla Firefox 4.0b7 (x86 de)" = Mozilla Firefox 4.0b7 (x86 de)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"RocketDock_is1" = RocketDock 1.3.5
"SpeedFan" = SpeedFan (remove only)
"TeamViewer 5" = TeamViewer 5
"TVWiz" = Intel(R) TV Wizard
"VLC media player" = VLC media player 1.1.5
"WinRAR archiver" = WinRAR
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 27.11.2010 20:25:21 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description = 
 
Error - 27.11.2010 20:25:22 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description = 
 
Error - 27.11.2010 20:25:22 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description = 
 
Error - 27.11.2010 20:25:25 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description = 
 
Error - 27.11.2010 20:25:30 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7600.16450,
 Zeitstempel: 0x4aeba271  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x02360000  ID des fehlerhaften
 Prozesses: 0x3c8  Startzeit der fehlerhaften Anwendung: 0x01cb8e91719b51d8  Pfad der
 fehlerhaften Anwendung: C:\Windows\Explorer.EXE  Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
 010ea971-fa86-11df-acf9-00252204656a
 
Error - 27.11.2010 20:26:10 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description = 
 
Error - 27.11.2010 20:52:23 | Computer Name = Dominik-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "D:\Program Files\VS2010\Common7\Packages\Debugger\X64\msvsmon.exe".
Die
 abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 27.11.2010 22:13:23 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7600.16450,
 Zeitstempel: 0x4aeba271  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x01fc0003  ID des fehlerhaften
 Prozesses: 0xf68  Startzeit der fehlerhaften Anwendung: 0x01cb8e92c4f50b01  Pfad der
 fehlerhaften Anwendung: C:\Windows\explorer.exe  Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
 1339cbcd-fa95-11df-acf9-00252204656a
 
Error - 28.11.2010 05:54:34 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7600.16450,
 Zeitstempel: 0x4aeba271  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x01df0000  ID des fehlerhaften
 Prozesses: 0x7f4  Startzeit der fehlerhaften Anwendung: 0x01cb8ea1e1e20f90  Pfad der
 fehlerhaften Anwendung: C:\Windows\explorer.exe  Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
 806e1009-fad5-11df-acf9-00252204656a
 
Error - 28.11.2010 07:27:48 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7600.16450,
 Zeitstempel: 0x4aeba271  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x02010009  ID des fehlerhaften
 Prozesses: 0x978  Startzeit der fehlerhaften Anwendung: 0x01cb8ee245ac36aa  Pfad der
 fehlerhaften Anwendung: C:\Windows\explorer.exe  Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
 86b3be18-fae2-11df-acf9-00252204656a
 
[ System Events ]
Error - 26.11.2010 23:00:08 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
 Status gemeldet: 32
 
Error - 27.11.2010 05:48:55 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
 an den Computerhersteller, um aktualisierte Firmware zu erhalten.
 
Error - 27.11.2010 07:10:11 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
 Status gemeldet: 32
 
Error - 27.11.2010 08:22:26 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
 an den Computerhersteller, um aktualisierte Firmware zu erhalten.
 
Error - 27.11.2010 12:07:49 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-General | ID = 5
Description = 
 
Error - 27.11.2010 18:40:31 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
 Status gemeldet: 32
 
Error - 27.11.2010 18:40:41 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
 an den Computerhersteller, um aktualisierte Firmware zu erhalten.
 
Error - 27.11.2010 20:12:34 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
 Status gemeldet: 32
 
Error - 27.11.2010 20:15:44 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
 an den Computerhersteller, um aktualisierte Firmware zu erhalten.
 
Error - 27.11.2010 20:27:54 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 
Mal passiert.
 
 
< End of report >
         
__________________

Alt 28.11.2010, 15:58   #4
markusg
/// Malware-holic
 
Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet - Standard

Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet



bitte erstelle und poste ein combofix log.
Ein Leitfaden und Tutorium zur Nutzung von ComboFix
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Antwort

Themen zu Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet
antivir, antivir guard, aufrufe, avira, bho, bonjour, bootmgr, browser, c:\hiberfil.sys, cache.dat, desktop, desktop.ini, falsche seite, firefox, flash player, gomeo, google, hiberfil.sys, hijack, hijackthis, home, home premium, install.exe, logfile, media center, notepad.exe, object, problem, programdata, realtek, registry, software, studio, suchmaschine, system, team viewer, trojaner, trojaner board, twain.dll, twunk_32.exe, virus, vista, visual studio, weiterleitungen, windows, windows 7 home, windows 7 home premium, wscript.exe



Ähnliche Themen: Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet


  1. Windows 7: Browser voller Werbung/ Links werden zu Werbung weitergeleitet
    Log-Analyse und Auswertung - 17.12.2014 (31)
  2. Firefox öffnen bei Google-Links oft falsche Seiten
    Plagegeister aller Art und deren Bekämpfung - 23.02.2013 (1)
  3. Google-Links leiten mich auf falsche Seiten
    Plagegeister aller Art und deren Bekämpfung - 04.02.2013 (23)
  4. Googlesuche wird auf falsche Seiten weitergeleitet.
    Log-Analyse und Auswertung - 07.01.2013 (9)
  5. Google links führen auf falsche Seiten
    Plagegeister aller Art und deren Bekämpfung - 20.12.2012 (7)
  6. Google Links führen auf falsche Seiten
    Log-Analyse und Auswertung - 15.07.2012 (52)
  7. Google links führen auf falsche Seiten
    Plagegeister aller Art und deren Bekämpfung - 05.07.2012 (9)
  8. Google Redirect-Virus - ich werde auf falsche seiten weitergeleitet
    Plagegeister aller Art und deren Bekämpfung - 27.02.2012 (20)
  9. Firefox: bei Google suche wird manchmal auf falsche seiten weitergeleitet
    Log-Analyse und Auswertung - 05.07.2011 (5)
  10. Googlesuchergebnisse werden auf fremde Seiten weitergeleitet + Browser friert ein
    Log-Analyse und Auswertung - 05.05.2011 (1)
  11. Falsche Internet Seiten werden geladen, Schlechte Performence, USB Sticks werden nicht erkannt
    Log-Analyse und Auswertung - 08.04.2011 (19)
  12. Google-Links auf S**-Seiten weitergeleitet
    Plagegeister aller Art und deren Bekämpfung - 27.03.2011 (23)
  13. Links führen auf falsche Seiten/Seiten öffnen sich automat. / HJT-Logfileseite nicht mehr nutzbar
    Plagegeister aller Art und deren Bekämpfung - 19.08.2010 (8)
  14. von Google auf falsche Seiten weitergeleitet - Mozilla
    Plagegeister aller Art und deren Bekämpfung - 20.12.2009 (2)
  15. Werde von Google Ergebnissen auf falsche Links weitergeleitet
    Log-Analyse und Auswertung - 09.05.2009 (12)
  16. Google-Links leiten mich auf falsche Seiten...
    Log-Analyse und Auswertung - 22.12.2008 (2)
  17. Komme bei Links auf falsche Seiten
    Log-Analyse und Auswertung - 25.11.2006 (1)

Zum Thema Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet - Guten Morgen leibe Mitglieder vom Trojaner Board! Ich habe das selbe Problem wie weiter viele Mitglieder (und nicht Mitglieder). Wenn ich Seiten aufrufe und dort auf einen externen Link klicke - Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet...
Archiv
Du betrachtest: Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.