| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitetWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.11.2010, 01:22
| #1 |
| |  Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet Guten Morgen  leibe Mitglieder vom Trojaner Board!Ich habe das selbe Problem wie weiter viele Mitglieder (und nicht Mitglieder). Wenn ich Seiten aufrufe und dort auf einen externen Link klicke (zum Beispiel in Suchmaschinen) werde ich über 2 - 5 Weiterleitungen auf Seiten wie through-n, gomeo, unsearchlocal oder find-here weitergeleitet. Das ganze passiert als ich gestern ca. um 19 Uhr eine Datei namens "install.exe" heruntergeladen habe und diese versehentlich ausgeführt anstatt gelöscht habe. Um die Liste zu vervollständigen: 1. RSIT Logfile: Code:
ATTFilter Logfile of random's system information tool 1.08 (written by random/random) Run by xxx at 2010-11-27 23:42:48 Microsoft Windows 7 Home Premium System drive C: has 130 GB (85%) free of 153 GB Total RAM: 3263 MB (77% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:43:04, on 27.11.2010 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16671) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskhost.exe C:\Windows\Explorer.EXE C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Dominik\Downloads\RSIT.exe C:\Program Files\trend micro\xxx.exe (! RENAMED !) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST') O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - D:\Program Files\Team Viewer\TeamViewer_Service.exe -- End of file - 3747 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-22 41760] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-08-02 281768] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2009-09-23 218112] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2010-11-27 21:12:34 ----D---- C:\rsit 2010-11-27 21:12:34 ----D---- C:\Program Files\trend micro 2010-11-27 21:02:10 ----D---- C:\Users\xxx\AppData\Roaming\Avira 2010-11-27 21:01:15 ----D---- C:\Users\xxx\AppData\Roaming\ABBYY 2010-11-27 20:59:32 ----A---- C:\Windows\system32\drivers\ssmdrv.sys 2010-11-27 20:59:31 ----D---- C:\ProgramData\Avira 2010-11-27 20:59:31 ----D---- C:\Program Files\Avira 2010-11-27 20:59:31 ----A---- C:\Windows\system32\drivers\avipbb.sys 2010-11-27 20:59:31 ----A---- C:\Windows\system32\drivers\avgntflt.sys 2010-11-27 13:46:58 ----D---- C:\Program Files\Common Files\Adobe 2010-11-27 13:44:14 ----D---- C:\Program Files\Microsoft WSE 2010-11-27 13:29:52 ----HD---- C:\Program Files\InstallShield Installation Information 2010-11-25 16:18:45 ----D---- C:\Users\xxx\AppData\Roaming\OpenOffice.org 2010-11-25 15:45:49 ----D---- C:\Windows\system32\Wat 2010-11-25 15:32:21 ----A---- C:\Windows\system32\GEARAspi.dll 2010-11-25 15:32:21 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys 2010-11-25 15:32:07 ----D---- C:\Program Files\iPod 2010-11-25 15:29:50 ----D---- C:\Program Files\Apple Software Update 2010-11-25 15:29:32 ----D---- C:\Program Files\Bonjour 2010-11-24 14:20:56 ----D---- C:\Program Files\Inno Setup 5 2010-11-22 21:05:24 ----D---- C:\ProgramData\Sun 2010-11-22 21:05:23 ----D---- C:\Program Files\Common Files\Java 2010-11-22 21:05:06 ----A---- C:\Windows\system32\javaws.exe 2010-11-22 21:05:06 ----A---- C:\Windows\system32\javaw.exe 2010-11-22 21:05:06 ----A---- C:\Windows\system32\java.exe 2010-11-22 21:05:06 ----A---- C:\Windows\system32\deployJava1.dll 2010-11-22 21:04:47 ----D---- C:\Program Files\Java 2010-11-22 16:11:09 ----D---- C:\Program Files\FileZilla FTP Client 2010-11-22 16:10:10 ----D---- C:\Users\xxx\AppData\Roaming\FileZilla 2010-11-22 15:12:39 ----A---- C:\Windows\system32\MRT.exe 2010-11-21 21:20:02 ----D---- C:\Users\xxx\AppData\Roaming\Apple Computer 2010-11-21 21:19:52 ----DC---- C:\Windows\system32\DRVSTORE 2010-11-21 21:19:05 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-11-21 21:17:55 ----D---- C:\ProgramData\Apple Computer 2010-11-21 21:17:55 ----D---- C:\Program Files\QuickTime 2010-11-21 21:16:34 ----D---- C:\ProgramData\Apple 2010-11-21 21:16:34 ----D---- C:\Program Files\Common Files\Apple 2010-11-21 21:03:19 ----D---- C:\Program Files\Krypton Toolkit 4.3.0 2010-11-21 21:03:18 ----D---- C:\Users\xxx\AppData\Roaming\Component Factory 2010-11-21 20:23:15 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 7 2010-11-21 01:33:01 ----D---- C:\Users\xxx\AppData\Roaming\Mozilla 2010-11-20 22:40:17 ----D---- C:\Program Files\RocketDock 2010-11-20 22:31:59 ----D---- C:\Users\xxx\AppData\Roaming\WinRAR 2010-11-20 22:31:52 ----D---- C:\Program Files\WinRAR 2010-11-20 13:44:53 ----D---- C:\Users\xxx\AppData\Roaming\vlc 2010-11-20 12:12:36 ----D---- C:\Program Files\Microsoft SQL Server 2010-11-20 12:12:25 ----D---- C:\Program Files\Microsoft Silverlight 2010-11-20 12:11:47 ----D---- C:\Program Files\Microsoft Synchronization Services 2010-11-20 12:11:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition 2010-11-20 12:10:05 ----D---- C:\Program Files\Microsoft SDKs 2010-11-20 12:10:05 ----D---- C:\Program Files\Microsoft Help Viewer 2010-11-19 23:06:51 ----D---- C:\Users\xxx\AppData\Roaming\AIMP 2010-11-19 23:02:41 ----D---- C:\Program Files\Microsoft.NET 2010-11-19 23:02:07 ----A---- C:\Windows\system32\PresentationHostProxy.dll 2010-11-19 23:02:07 ----A---- C:\Windows\system32\PresentationHost.exe 2010-11-19 23:02:07 ----A---- C:\Windows\system32\netfxperf.dll 2010-11-19 23:02:07 ----A---- C:\Windows\system32\mscoree.dll 2010-11-19 23:02:07 ----A---- C:\Windows\system32\dfshim.dll 2010-11-19 23:00:22 ----D---- C:\Windows\PCHEALTH 2010-11-19 22:44:27 ----A---- C:\Windows\system32\VB5STKIT.DLL 2010-11-19 22:44:27 ----A---- C:\Windows\system32\MSVBVM50.dll 2010-11-19 22:44:27 ----A---- C:\Windows\system32\iwpsetup.exe 2010-11-19 20:47:43 ----A---- C:\Windows\system32\XAudio2_7.dll 2010-11-19 20:47:43 ----A---- C:\Windows\system32\XAPOFX1_5.dll 2010-11-19 20:47:43 ----A---- C:\Windows\system32\xactengine3_7.dll 2010-11-19 20:47:43 ----A---- C:\Windows\system32\d3dx11_43.dll 2010-11-19 20:47:43 ----A---- C:\Windows\system32\d3dx10_43.dll 2010-11-19 20:47:43 ----A---- C:\Windows\system32\d3dcsx_43.dll 2010-11-19 20:47:43 ----A---- C:\Windows\system32\D3DCompiler_43.dll 2010-11-19 20:47:42 ----A---- C:\Windows\system32\XAudio2_6.dll 2010-11-19 20:47:42 ----A---- C:\Windows\system32\XAPOFX1_4.dll 2010-11-19 20:47:42 ----A---- C:\Windows\system32\xactengine3_6.dll 2010-11-19 20:47:42 ----A---- C:\Windows\system32\X3DAudio1_7.dll 2010-11-19 20:47:42 ----A---- C:\Windows\system32\D3DX9_43.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\XAudio2_5.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\xactengine3_5.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\D3DX9_42.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\d3dx11_42.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\d3dx10_42.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\d3dcsx_42.dll 2010-11-19 20:47:41 ----A---- C:\Windows\system32\D3DCompiler_42.dll 2010-11-19 20:47:40 ----A---- C:\Windows\system32\XAudio2_4.dll 2010-11-19 20:47:40 ----A---- C:\Windows\system32\XAPOFX1_3.dll 2010-11-19 20:47:40 ----A---- C:\Windows\system32\D3DX9_41.dll 2010-11-19 20:47:40 ----A---- C:\Windows\system32\d3dx10_41.dll 2010-11-19 20:47:40 ----A---- C:\Windows\system32\D3DCompiler_41.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\XAudio2_3.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\XAPOFX1_2.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\xactengine3_4.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\xactengine3_3.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\X3DAudio1_6.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\X3DAudio1_5.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\D3DX9_40.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\d3dx10_40.dll 2010-11-19 20:47:39 ----A---- C:\Windows\system32\D3DCompiler_40.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAudio2_2.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAudio2_1.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAPOFX1_1.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\XAPOFX1_0.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\xactengine3_2.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\xactengine3_1.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\D3DX9_39.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\d3dx10_39.dll 2010-11-19 20:47:38 ----A---- C:\Windows\system32\D3DCompiler_39.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\XAudio2_0.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\xactengine3_0.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\X3DAudio1_4.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\X3DAudio1_3.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\D3DX9_38.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\d3dx10_38.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\d3dx10_37.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\D3DCompiler_38.dll 2010-11-19 20:47:37 ----A---- C:\Windows\system32\D3DCompiler_37.dll 2010-11-19 20:47:36 ----A---- C:\Windows\system32\xactengine2_10.dll 2010-11-19 20:47:36 ----A---- C:\Windows\system32\D3DX9_37.dll 2010-11-19 20:47:36 ----A---- C:\Windows\system32\d3dx10_36.dll 2010-11-19 20:47:36 ----A---- C:\Windows\system32\D3DCompiler_36.dll 2010-11-19 20:47:35 ----A---- C:\Windows\system32\xactengine2_9.dll 2010-11-19 20:47:35 ----A---- C:\Windows\system32\d3dx9_36.dll 2010-11-19 20:47:33 ----A---- C:\Windows\system32\xactengine2_8.dll 2010-11-19 20:47:33 ----A---- C:\Windows\system32\xactengine2_7.dll 2010-11-19 20:47:33 ----A---- C:\Windows\system32\X3DAudio1_2.dll 2010-11-19 20:47:33 ----A---- C:\Windows\system32\d3dx9_34.dll 2010-11-19 20:47:33 ----A---- C:\Windows\system32\d3dx10_34.dll 2010-11-19 20:47:33 ----A---- C:\Windows\system32\D3DCompiler_34.dll 2010-11-19 20:47:32 ----A---- C:\Windows\system32\xactengine2_6.dll 2010-11-19 20:47:32 ----A---- C:\Windows\system32\xactengine2_5.dll 2010-11-19 20:47:32 ----A---- C:\Windows\system32\d3dx9_33.dll 2010-11-19 20:47:32 ----A---- C:\Windows\system32\d3dx10_33.dll 2010-11-19 20:47:32 ----A---- C:\Windows\system32\D3DCompiler_33.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\xinput1_2.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\xactengine2_4.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\xactengine2_3.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\x3daudio1_1.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\d3dx9_32.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\d3dx9_31.dll 2010-11-19 20:47:31 ----A---- C:\Windows\system32\d3dx10.dll 2010-11-19 20:47:30 ----A---- C:\Windows\system32\xinput1_1.dll 2010-11-19 20:47:30 ----A---- C:\Windows\system32\xactengine2_2.dll 2010-11-19 20:47:30 ----A---- C:\Windows\system32\xactengine2_1.dll 2010-11-19 20:47:23 ----A---- C:\Windows\system32\d3dx9_30.dll 2010-11-19 20:47:22 ----A---- C:\Windows\system32\xactengine2_0.dll 2010-11-19 20:47:22 ----A---- C:\Windows\system32\x3daudio1_0.dll 2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_29.dll 2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_28.dll 2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_27.dll 2010-11-19 20:47:22 ----A---- C:\Windows\system32\d3dx9_26.dll 2010-11-19 20:47:21 ----A---- C:\Windows\system32\d3dx9_25.dll 2010-11-19 20:47:21 ----A---- C:\Windows\system32\d3dx9_24.dll 2010-11-19 19:55:04 ----A---- C:\Windows\system32\shell32.dll 2010-11-19 19:55:02 ----A---- C:\Windows\system32\spoolsv.exe 2010-11-19 19:55:00 ----A---- C:\Windows\system32\ntoskrnl.exe 2010-11-19 19:55:00 ----A---- C:\Windows\system32\ntkrnlpa.exe 2010-11-19 19:54:57 ----A---- C:\Windows\system32\ole32.dll 2010-11-19 19:54:55 ----A---- C:\Windows\system32\drivers\tcpip.sys 2010-11-19 19:54:42 ----A---- C:\Windows\system32\drivers\fvevol.sys 2010-11-19 19:54:41 ----A---- C:\Windows\system32\ntdll.dll 2010-11-19 19:54:34 ----A---- C:\Windows\system32\mshtml.dll 2010-11-19 19:54:33 ----A---- C:\Windows\system32\ieframe.dll 2010-11-19 19:54:32 ----A---- C:\Windows\system32\mstime.dll 2010-11-19 19:54:32 ----A---- C:\Windows\system32\msfeeds.dll 2010-11-19 19:54:32 ----A---- C:\Windows\system32\iertutil.dll 2010-11-19 19:54:31 ----A---- C:\Windows\system32\wininet.dll 2010-11-19 19:54:31 ----A---- C:\Windows\system32\urlmon.dll 2010-11-19 19:54:31 ----A---- C:\Windows\system32\licmgr10.dll 2010-11-19 19:54:31 ----A---- C:\Windows\system32\iedkcs32.dll 2010-11-19 19:54:30 ----A---- C:\Windows\system32\mshtmled.dll 2010-11-19 19:54:30 ----A---- C:\Windows\system32\msfeedssync.exe 2010-11-19 19:54:30 ----A---- C:\Windows\system32\msfeedsbs.dll 2010-11-19 19:54:30 ----A---- C:\Windows\system32\jsproxy.dll 2010-11-19 19:54:30 ----A---- C:\Windows\system32\ieui.dll 2010-11-19 19:54:30 ----A---- C:\Windows\system32\iepeers.dll 2010-11-19 19:54:19 ----A---- C:\Windows\system32\ir32_32.dll 2010-11-19 19:54:19 ----A---- C:\Windows\system32\iccvid.dll 2010-11-19 19:54:18 ----A---- C:\Windows\system32\winlogon.exe 2010-11-19 19:54:18 ----A---- C:\Windows\explorer.exe 2010-11-19 19:54:13 ----A---- C:\Windows\system32\tzres.dll 2010-11-19 19:54:02 ----A---- C:\Windows\system32\t2embed.dll 2010-11-19 19:53:59 ----A---- C:\Windows\system32\CPFilters.dll 2010-11-19 19:53:57 ----A---- C:\Windows\system32\msdri.dll 2010-11-19 19:53:56 ----A---- C:\Windows\system32\psisdecd.dll 2010-11-19 19:53:54 ----A---- C:\Windows\system32\schannel.dll 2010-11-19 19:53:52 ----A---- C:\Windows\system32\msasn1.dll 2010-11-19 19:53:49 ----A---- C:\Windows\system32\lsasrv.dll 2010-11-19 19:53:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2010-11-19 19:53:47 ----A---- C:\Windows\system32\rtutils.dll 2010-11-19 19:53:44 ----A---- C:\Windows\system32\inetcomm.dll 2010-11-19 19:53:43 ----A---- C:\Windows\system32\msxml3.dll 2010-11-19 19:53:41 ----A---- C:\Windows\system32\win32k.sys 2010-11-19 19:53:31 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2010-11-19 19:53:31 ----A---- C:\Windows\system32\CertEnroll.dll 2010-11-19 19:53:30 ----A---- C:\Windows\system32\winresume.exe 2010-11-19 19:53:30 ----A---- C:\Windows\system32\winload.exe 2010-11-19 19:53:27 ----A---- C:\Windows\system32\asycfilt.dll 2010-11-19 19:53:25 ----A---- C:\Windows\system32\comctl32.dll 2010-11-19 19:53:22 ----A---- C:\Windows\system32\mfc40u.dll 2010-11-19 19:53:22 ----A---- C:\Windows\system32\mfc40.dll 2010-11-19 19:53:03 ----A---- C:\Windows\system32\wmp.dll 2010-11-19 19:53:01 ----A---- C:\Windows\system32\wmploc.DLL 2010-11-19 19:52:59 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2010-11-19 19:52:55 ----A---- C:\Windows\system32\jscript.dll 2010-11-19 19:52:48 ----A---- C:\Windows\system32\kernel32.dll 2010-11-19 19:52:47 ----A---- C:\Windows\system32\apphelp.dll 2010-11-19 19:52:44 ----A---- C:\Windows\system32\quartz.dll 2010-11-19 19:52:44 ----A---- C:\Windows\system32\mciavi32.dll 2010-11-19 19:52:43 ----A---- C:\Windows\system32\tsbyuv.dll 2010-11-19 19:52:43 ----A---- C:\Windows\system32\msyuv.dll 2010-11-19 19:52:43 ----A---- C:\Windows\system32\msvidc32.dll 2010-11-19 19:52:43 ----A---- C:\Windows\system32\msrle32.dll 2010-11-19 19:52:43 ----A---- C:\Windows\system32\iyuv_32.dll 2010-11-19 19:52:43 ----A---- C:\Windows\system32\avifil32.dll 2010-11-19 19:52:02 ----A---- C:\Windows\system32\srvsvc.dll 2010-11-19 19:52:01 ----A---- C:\Windows\system32\drivers\srv2.sys 2010-11-19 19:51:59 ----A---- C:\Windows\system32\drivers\srvnet.sys 2010-11-19 19:51:59 ----A---- C:\Windows\system32\drivers\srv.sys 2010-11-19 19:45:18 ----A---- C:\Windows\system32\wmpmde.dll 2010-11-19 19:45:17 ----A---- C:\Windows\system32\vbscript.dll 2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc_ssp.dll 2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc_isv.dll 2010-11-19 19:45:14 ----A---- C:\Windows\system32\secproc.dll 2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate_isv.exe 2010-11-19 19:45:14 ----A---- C:\Windows\system32\RMActivate.exe 2010-11-19 19:45:12 ----A---- C:\Windows\system32\StructuredQuery.dll 2010-11-19 19:45:09 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2010-11-19 19:45:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2010-11-19 19:45:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2010-11-19 19:45:05 ----A---- C:\Windows\system32\msv1_0.dll 2010-11-19 19:45:00 ----A---- C:\Windows\system32\fontsub.dll 2010-11-19 19:45:00 ----A---- C:\Windows\system32\atmlib.dll 2010-11-19 19:45:00 ----A---- C:\Windows\system32\atmfd.dll 2010-11-19 19:44:41 ----A---- C:\Windows\system32\browserchoice.exe 2010-11-19 19:44:26 ----A---- C:\Windows\system32\drivers\ks.sys 2010-11-19 19:39:27 ----A---- C:\Windows\system32\nvuhda.exe 2010-11-19 19:39:27 ----A---- C:\Windows\system32\nvhdap32.dll 2010-11-19 19:39:27 ----A---- C:\Windows\system32\nvcohda.dll 2010-11-19 19:39:27 ----A---- C:\Windows\system32\drivers\nvhda32v.sys 2010-11-19 19:38:18 ----D---- C:\ProgramData\NVIDIA 2010-11-19 19:38:05 ----D---- C:\Program Files\NVIDIA Corporation 2010-11-19 19:37:42 ----D---- C:\Windows\system32\AGEIA 2010-11-19 19:37:42 ----D---- C:\Program Files\AGEIA Technologies 2010-11-19 19:37:03 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2010-11-19 19:36:53 ----A---- C:\Windows\system32\NVStWiz.exe 2010-11-19 19:35:45 ----A---- C:\Windows\system32\nvudisp.exe 2010-11-19 19:34:14 ----A---- C:\Windows\system32\NVUNINST.EXE 2010-11-19 19:27:12 ----D---- C:\ProgramData\Adobe 2010-11-18 23:29:38 ----D---- C:\Users\xxx\AppData\Roaming\skypePM 2010-11-18 23:28:40 ----D---- C:\Program Files\Common Files\Skype 2010-11-18 23:28:39 ----RD---- C:\Program Files\Skype 2010-11-18 23:28:38 ----D---- C:\Users\xxx\AppData\Roaming\Skype 2010-11-18 23:28:35 ----D---- C:\ProgramData\Skype 2010-11-18 23:19:32 ----D---- C:\Program Files\Pando Networks 2010-11-18 23:19:32 ----D---- C:\Program Files\Google 2010-11-18 23:19:24 ----D---- C:\Users\xxx\AppData\Roaming\OpenCandy 2010-11-18 23:19:22 ----D---- C:\Program Files\GamersFirst 2010-11-18 23:18:45 ----N---- C:\Windows\system32\MpSigStub.exe 2010-11-18 23:15:36 ----A---- C:\Windows\system32\xinput1_3.dll 2010-11-18 23:15:36 ----A---- C:\Windows\system32\d3dx9_35.dll 2010-11-18 23:15:36 ----A---- C:\Windows\system32\d3dx10_35.dll 2010-11-18 23:15:36 ----A---- C:\Windows\system32\D3DCompiler_35.dll 2010-11-18 23:15:00 ----D---- C:\Users\xxx\AppData\Roaming\Macromedia 2010-11-18 23:15:00 ----D---- C:\Users\xxx\AppData\Roaming\Adobe 2010-11-18 23:14:57 ----D---- C:\Windows\system32\Macromed 2010-11-18 23:09:32 ----D---- C:\Users\xxx\AppData\Roaming\TeamViewer 2010-11-18 23:02:51 ----SHD---- C:\Windows\Installer 2010-11-18 23:00:44 ----D---- C:\Windows\system32\Lang 2010-11-18 23:00:44 ----A---- C:\Windows\system32\TVWizudlg.exe 2010-11-18 23:00:44 ----A---- C:\Windows\system32\igfxtvcx.dll 2010-11-18 23:00:43 ----D---- C:\Program Files\Intel 2010-11-18 22:58:29 ----D---- C:\Windows\system32\x64 2010-11-18 22:58:29 ----A---- C:\Windows\system32\igxpun.exe 2010-11-18 22:57:19 ----A---- C:\Windows\system32\wintrust.dll 2010-11-18 22:57:11 ----A---- C:\Windows\system32\cabview.dll 2010-11-18 22:42:39 ----D---- C:\Users\xxx\AppData\Roaming\Identities 2010-11-18 22:42:28 ----SD---- C:\Users\xxx\AppData\Roaming\Microsoft 2010-11-18 22:42:28 ----D---- C:\Users\xxx\AppData\Roaming\Media Center Programs 2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Vorlagen 2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Startmenü 2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Favoriten 2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Dokumente 2010-11-18 22:42:21 ----SHD---- C:\ProgramData\Anwendungsdaten 2010-11-18 22:42:21 ----SHD---- C:\Program Files\Gemeinsame Dateien 2010-11-18 22:32:54 ----A---- C:\Windows\system32\PerfStringBackup.INI 2010-11-18 22:15:18 ----D---- C:\Windows\SoftwareDistribution 2010-11-18 22:12:16 ----D---- C:\Windows\Prefetch 2010-11-18 22:11:05 ----D---- C:\Windows\Panther 2010-11-18 21:54:25 ----SHD---- C:\Boot 2010-11-04 21:56:49 ----HD---- C:\Config.Msi 2010-10-13 02:59:13 ----D---- C:\Import 2010-10-07 12:23:02 ----A---- C:\Windows\system32\jdns_sd.dll 2010-10-07 12:23:02 ----A---- C:\Windows\system32\dnssdX.dll 2010-10-07 12:23:02 ----A---- C:\Windows\system32\dns-sd.exe 2010-10-07 12:23:02 ----A---- C:\Windows\system32\dnssd.dll ======List of files/folders modified in the last 3 months====== 2010-11-27 23:41:25 ----D---- C:\Windows\Temp 2010-11-27 23:40:51 ----D---- C:\Windows 2010-11-27 23:40:10 ----RD---- C:\Program Files 2010-11-27 23:40:10 ----HD---- C:\ProgramData 2010-11-27 23:40:06 ----D---- C:\Windows\System32 2010-11-27 23:39:41 ----D---- C:\Windows\system32\drivers 2010-11-27 23:39:33 ----D---- C:\Windows\system32\DriverStore 2010-11-27 23:39:33 ----D---- C:\Windows\system32\catroot 2010-11-27 23:39:33 ----D---- C:\Windows\inf 2010-11-27 22:49:42 ----SHD---- C:\System Volume Information 2010-11-27 21:44:16 ----D---- C:\Windows\system32\LogFiles 2010-11-27 17:18:00 ----D---- C:\Windows\system32\config 2010-11-27 13:46:58 ----D---- C:\Program Files\Common Files 2010-11-27 13:44:17 ----RSD---- C:\Windows\assembly 2010-11-27 13:44:05 ----D---- C:\Windows\winsxs 2010-11-26 15:48:57 ----SHD---- C:\$Recycle.Bin 2010-11-25 23:02:21 ----D---- C:\Windows\debug 2010-11-25 16:50:32 ----D---- C:\Windows\system32\Tasks 2010-11-25 15:31:54 ----SD---- C:\ProgramData\Microsoft 2010-11-25 15:12:59 ----RSD---- C:\Windows\Fonts 2010-11-25 03:00:28 ----D---- C:\Program Files\Internet Explorer 2010-11-21 02:18:52 ----D---- C:\Windows\Microsoft.NET 2010-11-20 17:24:08 ----D---- C:\Windows\rescache 2010-11-20 17:22:01 ----D---- C:\Windows\Logs 2010-11-20 12:45:31 ----D---- C:\Windows\system32\migration 2010-11-20 12:45:29 ----D---- C:\Windows\system32\de-DE 2010-11-20 12:45:29 ----D---- C:\Windows\ehome 2010-11-20 12:45:26 ----D---- C:\Windows\system32\Boot 2010-11-20 12:45:26 ----D---- C:\Program Files\Windows Mail 2010-11-20 12:45:24 ----D---- C:\Windows\AppPatch 2010-11-20 12:45:24 ----D---- C:\Program Files\Windows Media Player 2010-11-20 12:17:20 ----D---- C:\Windows\system32\catroot2 2010-11-20 12:10:05 ----D---- C:\Program Files\Common Files\microsoft shared 2010-11-19 23:02:43 ----D---- C:\Windows\system32\en-US 2010-11-19 19:49:12 ----D---- C:\Windows\system32\wdi 2010-11-19 19:38:58 ----D---- C:\Windows\Help 2010-11-18 23:19:46 ----D---- C:\Windows\Tasks 2010-11-18 23:14:59 ----D---- C:\Windows\Downloaded Program Files 2010-11-18 22:57:25 ----D---- C:\Windows\system32\restore 2010-11-18 22:42:28 ----RD---- C:\Users 2010-11-18 22:42:22 ----SHD---- C:\Recovery 2010-11-18 22:42:22 ----D---- C:\Windows\system32\Recovery 2010-11-18 22:42:21 ----D---- C:\Program Files\Windows NT 2010-11-18 22:32:45 ----D---- C:\Windows\system32\wbem 2010-11-18 22:21:47 ----D---- C:\Windows\system32\CodeIntegrity 2010-11-18 22:15:36 ----D---- C:\Windows\system32\sysprep 2010-11-18 22:10:53 ----RASH---- C:\BOOTSECT.BAK 2010-11-18 22:10:31 ----D---- C:\Windows\system32\oobe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648] R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248] R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-08-02 126856] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-08-02 60936] R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600] R3 netr73;RT73 USB-Drahtlos-LAN-Kartentreiber für Vista; C:\Windows\system32\DRIVERS\netr73.sys [2009-07-13 545792] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2009-09-17 66592] R3 RTL8167;Realtek 8167 NT-Treiber; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888] S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192] S3 netr28;Ralink 802.11n-Drahtlostreiber für Windows Vista; C:\Windows\system32\DRIVERS\netr28.sys [2009-07-13 530944] S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-08-02 135336] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-08-02 267944] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-10-16 37664] R2 Bonjour Service;Dienst "Bonjour"; C:\Program Files\Bonjour\mDNSResponder.exe [2010-10-07 345376] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-08-06 215584] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-06 239648] R2 TeamViewer5;TeamViewer 5; D:\Program Files\Team Viewer\TeamViewer_Service.exe [2010-10-19 2011944] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-18 136176] S3 aspnet_state;ASP.NET-Zustandsdienst; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160] S3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2010-11-17 820008] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-11-25 1343400] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] -----------------EOF----------------- 3. HJTscanlist Logfile: Code:
ATTFilter
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
º º
hjtscanlist v2.0
º º
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Microsoft Windows [Version 6.1.7600]
C:
27.11.2010 23:40 C:\Windows --------- 16384
C:\pagefile.sys ---------
C:\hiberfil.sys ---------
27.11.2010 23:40 C:\Config.Msi --------- 0
27.11.2010 23:40 C:\ProgramData --------- 4096
27.11.2010 23:40 C:\Program Files --------- 20480
27.11.2010 22:49 C:\System Volume Information --------- 32768
27.11.2010 21:12 C:\rsit --------- 0
26.11.2010 15:48 C:\$Recycle.Bin --------- 0
18.11.2010 22:42 C:\Users --------- 4096
18.11.2010 22:42 C:\Recovery --------- 4096
18.11.2010 22:10 C:\BOOTSECT.BAK --------- 8192
18.11.2010 22:10 C:\Boot --------- 8192
13.10.2010 02:59 C:\Import --------- 0
27.06.2010 18:03 C:\Programme --------- 0
22.06.2010 16:58 C:\.rnd --------- 1024
04.06.2010 10:20 C:\bootmgr --------- 383832
07.03.2010 15:10 C:\IO.SYS --------- 0
07.03.2010 15:10 C:\MSDOS.SYS --------- 0
17.02.2010 21:25 C:\MSOCache --------- 0
15.02.2010 15:24 C:\NVIDIA --------- 0
12.02.2010 14:45 C:\Dokumente und Einstellungen --------- 0
14.07.2009 05:53 C:\Documents and Settings --------- 0
14.07.2009 03:37 C:\PerfLogs --------- 0
10.06.2009 22:42 C:\autoexec.bat --------- 24
10.06.2009 22:42 C:\config.sys --------- 10
06.11.2008 17:25 C:\grldr.mbr --------- 8192
----------------------------------------
C:\Windows
27.11.2010 23:40 C:\Windows\setupact.log --------- 56
27.11.2010 23:40 C:\Windows\setuperr.log --------- 0
27.11.2010 23:40 C:\Windows\bootstat.dat --------- 67584
27.11.2010 23:40 C:\Windows\PFRO.log --------- 1000
27.11.2010 23:44 C:\Windows\WindowsUpdate.log --------- 1081235
31.10.2009 06:45 C:\Windows\explorer.exe --------- 2614272
14.07.2009 05:54 C:\Windows\win.ini --------- 403
14.07.2009 05:41 C:\Windows\WindowsShell.Manifest --------- 749
14.07.2009 02:16 C:\Windows\twain_32.dll --------- 51200
14.07.2009 02:14 C:\Windows\write.exe --------- 9216
14.07.2009 02:14 C:\Windows\winhlp32.exe --------- 9728
14.07.2009 02:14 C:\Windows\twunk_32.exe --------- 31232
14.07.2009 02:14 C:\Windows\regedit.exe --------- 398336
14.07.2009 02:14 C:\Windows\notepad.exe --------- 179712
14.07.2009 02:14 C:\Windows\hh.exe --------- 15360
14.07.2009 02:14 C:\Windows\HelpPane.exe --------- 497152
14.07.2009 02:14 C:\Windows\fveupdate.exe --------- 13824
14.07.2009 02:14 C:\Windows\bfsvc.exe --------- 65024
13.07.2009 23:58 C:\Windows\mib.bin --------- 43131
10.06.2009 22:46 C:\Windows\system.ini --------- 219
10.06.2009 22:42 C:\Windows\_default.pif --------- 707
10.06.2009 22:42 C:\Windows\winhelp.exe --------- 256192
10.06.2009 22:41 C:\Windows\twunk_16.exe --------- 49680
10.06.2009 22:41 C:\Windows\twain.dll --------- 94784
10.06.2009 22:34 C:\Windows\WMSysPr9.prx --------- 316640
10.06.2009 22:19 C:\Windows\msdfmap.ini --------- 1405
10.06.2009 22:14 C:\Windows\Starter.xml --------- 48201
10.06.2009 22:14 C:\Windows\HomePremium.xml --------- 48265
----------------------------------------
C:\Windows\System
13.07.2009 22:41 C:\Windows\System\OLESVR.DLL --------- 24064
13.07.2009 22:41 C:\Windows\System\WFWNET.DRV --------- 12704
13.07.2009 22:41 C:\Windows\System\COMMDLG.DLL --------- 32816
13.07.2009 22:41 C:\Windows\System\TIMER.DRV --------- 4048
13.07.2009 22:41 C:\Windows\System\MMSYSTEM.DLL --------- 68992
13.07.2009 22:41 C:\Windows\System\mmtask.tsk --------- 1152
13.07.2009 22:41 C:\Windows\System\mouse.drv --------- 2032
13.07.2009 22:41 C:\Windows\System\vga.drv --------- 2176
13.07.2009 22:41 C:\Windows\System\sound.drv --------- 1744
13.07.2009 22:41 C:\Windows\System\keyboard.drv --------- 2000
13.07.2009 22:41 C:\Windows\System\SHELL.DLL --------- 5120
13.07.2009 22:41 C:\Windows\System\system.drv --------- 3360
10.06.2009 22:42 C:\Windows\System\ver.dll --------- 9008
10.06.2009 22:42 C:\Windows\System\olecli.dll --------- 82944
10.06.2009 22:42 C:\Windows\System\lzexpand.dll --------- 9936
10.06.2009 22:25 C:\Windows\System\stdole.tlb --------- 5532
10.06.2009 22:21 C:\Windows\System\msvideo.dll --------- 126912
10.06.2009 22:21 C:\Windows\System\mciwave.drv --------- 28160
10.06.2009 22:21 C:\Windows\System\mciseq.drv --------- 25264
10.06.2009 22:21 C:\Windows\System\mciavi.drv --------- 73376
10.06.2009 22:21 C:\Windows\System\avifile.dll --------- 109456
10.06.2009 22:21 C:\Windows\System\avicap.dll --------- 69584
----------------------------------------
C:\Windows\System32
27.11.2010 23:48 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 14816
27.11.2010 23:48 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 14816
27.11.2010 23:45 C:\Windows\system32\perfh009.dat --------- 651450
27.11.2010 23:45 C:\Windows\system32\perfh007.dat --------- 696132
27.11.2010 23:45 C:\Windows\system32\perfc007.dat --------- 147428
27.11.2010 23:45 C:\Windows\system32\perfc009.dat --------- 120382
27.11.2010 23:45 C:\Windows\system32\PerfStringBackup.INI --------- 1611160
27.11.2010 23:44 C:\Windows\system32\config --------- 16384
27.11.2010 23:39 C:\Windows\system32\drivers --------- 65536
27.11.2010 23:39 C:\Windows\system32\catroot --------- 4096
27.11.2010 23:39 C:\Windows\system32\DriverStore --------- 4096
27.11.2010 21:44 C:\Windows\system32\LogFiles --------- 4096
25.11.2010 16:50 C:\Windows\system32\Tasks --------- 4096
25.11.2010 15:45 C:\Windows\system32\Wat --------- 0
25.11.2010 15:32 C:\Windows\system32\DRVSTORE --------- 0
25.11.2010 15:28 C:\Windows\system32\initdebug.nfo --------- 45
25.11.2010 15:25 C:\Windows\system32\FNTCACHE.DAT --------- 289720
22.11.2010 21:04 C:\Windows\system32\javaws.exe --------- 153376
22.11.2010 21:04 C:\Windows\system32\javaw.exe --------- 145184
22.11.2010 21:04 C:\Windows\system32\java.exe --------- 145184
22.11.2010 21:04 C:\Windows\system32\deployJava1.dll --------- 472808
20.11.2010 12:45 C:\Windows\system32\migration --------- 0
20.11.2010 12:45 C:\Windows\system32\de-DE --------- 327680
20.11.2010 12:45 C:\Windows\system32\Boot --------- 0
20.11.2010 12:17 C:\Windows\system32\catroot2 --------- 16384
19.11.2010 23:02 C:\Windows\system32\en-US --------- 4096
19.11.2010 19:49 C:\Windows\system32\wdi --------- 4096
19.11.2010 19:37 C:\Windows\system32\AGEIA --------- 0
18.11.2010 23:14 C:\Windows\system32\Macromed --------- 0
18.11.2010 23:00 C:\Windows\system32\Lang --------- 0
18.11.2010 22:58 C:\Windows\system32\x64 --------- 0
18.11.2010 22:57 C:\Windows\system32\restore --------- 0
18.11.2010 22:42 C:\Windows\system32\Recovery --------- 0
18.11.2010 22:32 C:\Windows\system32\wbem --------- 65536
18.11.2010 22:21 C:\Windows\system32\CodeIntegrity --------- 0
18.11.2010 22:16 C:\Windows\system32\license.rtf --------- 56735
18.11.2010 22:15 C:\Windows\system32\sysprep --------- 0
18.11.2010 22:10 C:\Windows\system32\oobe --------- 4096
02.11.2010 16:47 C:\Windows\system32\MRT.exe --------- 35758536
19.10.2010 10:41 C:\Windows\system32\MpSigStub.exe --------- 222080
07.10.2010 12:23 C:\Windows\system32\jdns_sd.dll --------- 75040
07.10.2010 12:23 C:\Windows\system32\dns-sd.exe --------- 107808
07.10.2010 12:23 C:\Windows\system32\dnssd.dll --------- 91424
07.10.2010 12:23 C:\Windows\system32\dnssdX.dll --------- 197920
08.09.2010 11:17 C:\Windows\system32\QuickTimeVR.qtx --------- 94208
08.09.2010 11:17 C:\Windows\system32\QuickTime.qts --------- 69632
08.09.2010 05:30 C:\Windows\system32\wininet.dll --------- 978432
08.09.2010 05:30 C:\Windows\system32\urlmon.dll --------- 1226752
08.09.2010 05:28 C:\Windows\system32\mstime.dll --------- 606208
08.09.2010 05:28 C:\Windows\system32\mshtmled.dll --------- 67072
08.09.2010 05:28 C:\Windows\system32\mshtml.dll --------- 5977600
08.09.2010 05:28 C:\Windows\system32\msfeedsbs.dll --------- 64512
08.09.2010 05:28 C:\Windows\system32\msfeeds.dll --------- 599040
08.09.2010 05:28 C:\Windows\system32\licmgr10.dll --------- 44544
08.09.2010 05:28 C:\Windows\system32\jsproxy.dll --------- 48128
08.09.2010 05:28 C:\Windows\system32\ieui.dll --------- 176640
08.09.2010 05:28 C:\Windows\system32\iertutil.dll --------- 2058752
08.09.2010 05:28 C:\Windows\system32\iepeers.dll --------- 185856
08.09.2010 05:28 C:\Windows\system32\ieframe.dll --------- 10988544
08.09.2010 05:27 C:\Windows\system32\iedkcs32.dll --------- 381440
08.09.2010 05:25 C:\Windows\system32\msfeedssync.exe --------- 12800
08.09.2010 04:22 C:\Windows\system32\html.iec --------- 386048
08.09.2010 03:48 C:\Windows\system32\mshtml.tlb --------- 1638912
01.09.2010 05:29 C:\Windows\system32\wmp.dll --------- 11406848
01.09.2010 05:23 C:\Windows\system32\wmploc.DLL --------- 12625408
01.09.2010 03:34 C:\Windows\system32\win32k.sys --------- 2327552
31.08.2010 05:32 C:\Windows\system32\mfc40u.dll --------- 954288
31.08.2010 05:32 C:\Windows\system32\mfc40.dll --------- 954752
27.08.2010 06:46 C:\Windows\system32\srvsvc.dll --------- 168448
26.08.2010 05:39 C:\Windows\system32\t2embed.dll --------- 109056
21.08.2010 06:36 C:\Windows\system32\wmpmde.dll --------- 738816
21.08.2010 06:36 C:\Windows\system32\schannel.dll --------- 224256
21.08.2010 06:33 C:\Windows\system32\comctl32.dll --------- 530432
21.08.2010 06:32 C:\Windows\system32\spoolsv.exe --------- 316928
04.08.2010 07:18 C:\Windows\system32\CPFilters.dll --------- 641536
04.08.2010 07:17 C:\Windows\system32\msdri.dll --------- 417792
04.08.2010 07:15 C:\Windows\system32\mpg2splt.ax --------- 199680
04.08.2010 07:15 C:\Windows\system32\MSNP.ax --------- 204288
29.07.2010 07:30 C:\Windows\system32\ir32_32.dll --------- 197632
29.07.2010 07:30 C:\Windows\system32\iccvid.dll --------- 82944
27.07.2010 15:03 C:\Windows\system32\shell32.dll --------- 12867584
29.06.2010 06:02 C:\Windows\system32\ole32.dll --------- 1413632
19.06.2010 07:33 C:\Windows\system32\ntoskrnl.exe --------- 3899784
19.06.2010 07:33 C:\Windows\system32\ntkrnlpa.exe --------- 3955080
19.06.2010 07:23 C:\Windows\system32\rtutils.dll --------- 37376
19.06.2010 07:15 C:\Windows\system32\tzres.dll --------- 2048
08.06.2010 07:02 C:\Windows\system32\msxml3.dll --------- 1233920
02.06.2010 04:55 C:\Windows\system32\XAudio2_7.dll --------- 527192
02.06.2010 04:55 C:\Windows\system32\XAPOFX1_5.dll --------- 74072
02.06.2010 04:55 C:\Windows\system32\xactengine3_7.dll --------- 239960
27.05.2010 08:24 C:\Windows\system32\atmlib.dll --------- 34304
27.05.2010 04:49 C:\Windows\system32\atmfd.dll --------- 293888
26.05.2010 11:41 C:\Windows\system32\D3DCompiler_43.dll --------- 2106216
26.05.2010 11:41 C:\Windows\system32\d3dcsx_43.dll --------- 1868128
26.05.2010 11:41 C:\Windows\system32\d3dx10_43.dll --------- 470880
26.05.2010 11:41 C:\Windows\system32\d3dx11_43.dll --------- 248672
26.05.2010 11:41 C:\Windows\system32\D3DX9_43.dll --------- 1998168
05.05.2010 07:46 C:\Windows\system32\StructuredQuery.dll --------- 363520
24.03.2010 07:37 C:\Windows\system32\ntdll.dll --------- 1286456
18.03.2010 16:47 C:\Windows\system32\aspnet_counters.dll --------- 17760
----------------------------------------
C:\Windows\Prefetch
----------------------------------------
C:\Windows\Tasks
27.11.2010 23:41 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1094
27.11.2010 23:40 C:\Windows\Tasks\SA.DAT --------- 6
27.11.2010 23:29 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1098
14.07.2009 05:53 C:\Windows\Tasks\SCHEDLGU.TXT --------- 5668
----------------------------------------
C:\Windows\Temp
----------------------------------------
C:\Users\Dominik\AppData\Local\Temp
27.11.2010 23:47 C:\Users\xxx\AppData\Local\Temp\etilqs_zOMmCs5dQ6uuvBAtfCqb --------- 0
27.11.2010 23:41 C:\Users\xxx\AppData\Local\Temp\WPDNSE --------- 0
27.11.2010 23:40 C:\Users\xxx\AppData\Local\Temp\MSI5a75f.LOG --------- 4814932
27.11.2010 23:40 C:\Users\xxx\AppData\Local\Temp\ucaevents.log --------- 469630
27.11.2010 23:36 C:\Users\xxx\AppData\Local\Temp\Low --------- 0
27.11.2010 22:24 C:\Users\xxx\AppData\Local\Temp\kl-setup-2010-11-27-22-22-13.log --------- 8659
27.11.2010 22:24 C:\Users\xxx\AppData\Local\Temp\kl-install-2010-11-27-22-22-13.log --------- 5616374
27.11.2010 22:22 C:\Users\xxx\AppData\Local\Temp\tmp6A5A.tmp --------- 9048
27.11.2010 21:01 C:\Users\xxx\AppData\Local\Temp\TWAIN.LOG --------- 875
27.11.2010 21:01 C:\Users\xxx\AppData\Local\Temp\Twain001.Mtx --------- 2
27.11.2010 21:01 C:\Users\xxx\AppData\Local\Temp\Twunk001.MTX --------- 156
27.11.2010 21:01 C:\Users\xxx\AppData\Local\Temp\Twunk002.MTX --------- 0
27.11.2010 19:13 C:\Users\xxx\AppData\Local\Temp\.NETFramework,Version=v4.0,Profile=Client.AssemblyAttributes.vb --------- 305
27.11.2010 13:47 C:\Users\xxx\AppData\Local\Temp\MSI59a86.LOG --------- 288
18.11.2010 22:43 C:\Users\xxx\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0
----------------------------------------
C:\Program Files
27.11.2010 23:42 C:\Program Files\trend micro --------- 4096
27.11.2010 20:59 C:\Program Files\Avira --------- 0
27.11.2010 13:46 C:\Program Files\Common Files --------- 4096
27.11.2010 13:44 C:\Program Files\Microsoft WSE --------- 0
27.11.2010 13:29 C:\Program Files\InstallShield Installation Information --------- 0
25.11.2010 15:32 C:\Program Files\iPod --------- 0
25.11.2010 15:30 C:\Program Files\QuickTime --------- 4096
25.11.2010 15:29 C:\Program Files\Apple Software Update --------- 4096
25.11.2010 15:29 C:\Program Files\Bonjour --------- 4096
25.11.2010 15:21 C:\Program Files\Skype --------- 0
25.11.2010 15:20 C:\Program Files\Pando Networks --------- 0
25.11.2010 03:00 C:\Program Files\Internet Explorer --------- 4096
24.11.2010 14:20 C:\Program Files\Inno Setup 5 --------- 4096
22.11.2010 21:04 C:\Program Files\Java --------- 0
22.11.2010 16:11 C:\Program Files\FileZilla FTP Client --------- 4096
21.11.2010 21:03 C:\Program Files\Krypton Toolkit 4.3.0 --------- 4096
21.11.2010 20:23 C:\Program Files\Mozilla Firefox 4.0 Beta 7 --------- 12288
20.11.2010 22:40 C:\Program Files\RocketDock --------- 4096
20.11.2010 22:31 C:\Program Files\WinRAR --------- 4096
20.11.2010 12:45 C:\Program Files\Windows Mail --------- 4096
20.11.2010 12:45 C:\Program Files\Windows Media Player --------- 4096
20.11.2010 12:16 C:\Program Files\GamersFirst --------- 0
20.11.2010 12:12 C:\Program Files\Microsoft SQL Server --------- 0
20.11.2010 12:12 C:\Program Files\Microsoft Silverlight --------- 0
20.11.2010 12:11 C:\Program Files\Microsoft Synchronization Services --------- 0
20.11.2010 12:11 C:\Program Files\Microsoft SQL Server Compact Edition --------- 0
20.11.2010 12:10 C:\Program Files\Microsoft Help Viewer --------- 0
20.11.2010 12:10 C:\Program Files\Microsoft SDKs --------- 0
20.11.2010 12:10 C:\Program Files\Microsoft.NET --------- 0
19.11.2010 19:38 C:\Program Files\NVIDIA Corporation --------- 0
19.11.2010 19:37 C:\Program Files\AGEIA Technologies --------- 0
18.11.2010 23:21 C:\Program Files\Google --------- 0
18.11.2010 23:00 C:\Program Files\Intel --------- 0
18.11.2010 22:42 C:\Program Files\Windows NT --------- 4096
18.11.2010 22:42 C:\Program Files\Gemeinsame Dateien --------- 0
14.07.2009 09:56 C:\Program Files\DVD Maker --------- 4096
14.07.2009 09:56 C:\Program Files\Windows Journal --------- 4096
14.07.2009 09:56 C:\Program Files\Microsoft Games --------- 4096
14.07.2009 09:47 C:\Program Files\Windows Sidebar --------- 4096
14.07.2009 09:47 C:\Program Files\Windows Photo Viewer --------- 4096
14.07.2009 09:47 C:\Program Files\Windows Defender --------- 4096
14.07.2009 05:53 C:\Program Files\Uninstall Information --------- 0
14.07.2009 05:52 C:\Program Files\Windows Portable Devices --------- 0
14.07.2009 05:52 C:\Program Files\MSBuild --------- 0
14.07.2009 05:52 C:\Program Files\Reference Assemblies --------- 0
14.07.2009 05:41 C:\Program Files\desktop.ini --------- 174
----------------------------------------
C:\ProgramData\..
xxx
Default
Public
Default User
All Users
desktop.ini
----------------------------------------
C:\Windows\system32\drivers\etc\hosts
----------------------------------------
Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 12 K
System 4 Services 0 1.220 K
smss.exe 260 Services 0 784 K
csrss.exe 372 Services 0 3.268 K
wininit.exe 440 Services 0 4.076 K
csrss.exe 448 Console 1 5.188 K
winlogon.exe 484 Console 1 4.636 K
services.exe 544 Services 0 9.848 K
lsass.exe 560 Services 0 8.492 K
lsm.exe 568 Services 0 3.020 K
svchost.exe 684 Services 0 6.564 K
nvvsvc.exe 768 Services 0 2.800 K
svchost.exe 808 Services 0 5.344 K
svchost.exe 872 Services 0 16.400 K
svchost.exe 944 Services 0 62.732 K
svchost.exe 972 Services 0 30.300 K
svchost.exe 1116 Services 0 11.272 K
svchost.exe 1232 Services 0 10.164 K
nvvsvc.exe 1244 Console 1 6.160 K
spoolsv.exe 1416 Services 0 10.752 K
sched.exe 1444 Services 0 1.608 K
svchost.exe 1496 Services 0 10.760 K
avguard.exe 1604 Services 0 82.564 K
AppleMobileDeviceService. 1668 Services 0 6.296 K
mDNSResponder.exe 1700 Services 0 4.604 K
nvSCPAPISvr.exe 1764 Services 0 5.376 K
TeamViewer_Service.exe 1844 Services 0 8.744 K
avshadow.exe 1852 Services 0 3.360 K
conhost.exe 1860 Services 0 2.140 K
dwm.exe 2292 Console 1 20.572 K
taskhost.exe 2300 Console 1 5.896 K
explorer.exe 2372 Console 1 41.048 K
svchost.exe 2512 Services 0 10.268 K
avgnt.exe 2636 Console 1 3.456 K
SearchIndexer.exe 2876 Services 0 20.252 K
wmpnetwk.exe 2992 Services 0 3.820 K
WmiPrvSE.exe 3212 Services 0 4.820 K
svchost.exe 3404 Services 0 9.884 K
chrome.exe 3840 Console 1 39.256 K
chrome.exe 4028 Console 1 24.456 K
svchost.exe 2476 Services 0 22.328 K
TrustedInstaller.exe 3396 Services 0 6.060 K
SearchProtocolHost.exe 724 Services 0 6.416 K
SearchFilterHost.exe 2264 Services 0 4.556 K
cmd.exe 1992 Console 1 3.136 K
conhost.exe 1684 Console 1 4.368 K
dllhost.exe 2008 Console 1 3.924 K
tasklist.exe 2400 Console 1 4.148 K
WmiPrvSE.exe 1016 Services 0 4.808 K
***** Ende des Scans 27.11.2010 um 23:48:33,02 ***
Code:
ATTFilter Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 17.11.2010 6,00MB 10.1.102.64
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 20.11.2010 6,00MB 10.1.102.64
Adobe Reader 9 - Deutsch Adobe Systems Incorporated 26.11.2010 232MB 9.0.0
Apple Application Support Apple Inc. 24.11.2010 52,8MB 1.4.1
Apple Mobile Device Support Apple Inc. 24.11.2010 21,7MB 3.3.0.69
Apple Software Update Apple Inc. 24.11.2010 2,26MB 2.1.2.120
Avira AntiVir Personal - Free Antivirus Avira GmbH 26.11.2010 70,7MB 10.0.0.592
Bonjour Apple Inc. 24.11.2010 1,10MB 2.0.4.0
CCleaner Piriform 24.11.2010 3.00
Die*Sims™*3 Electronic Arts 26.11.2010 1.0.615
FileZilla Client 3.3.5.1 21.11.2010 3.3.5.1
Google Chrome Google Inc. 17.11.2010 7.0.517.44
Incomedia WebSite X5 v8 - Evolution 18.11.2010
Inno Setup Version 5.4.0 Jordan Russell 23.11.2010 3,96MB 5.4.0
Install Creator Pro 26.11.2010
Intel(R) Graphics Media Accelerator Driver Intel Corporation 17.11.2010 54,3MB 8.15.10.1930
Intel(R) TV Wizard Intel Corporation 17.11.2010
iTunes Apple Inc. 24.11.2010 144,8MB 10.1.0.56
Java(TM) 6 Update 22 Oracle 21.11.2010 95,0MB 6.0.220
Krypton Toolkit 4.3.0 Component Factory 20.11.2010 102,7MB 4.3.0
Malwarebytes' Anti-Malware Malwarebytes Corporation 26.11.2010 8,51MB
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 18.11.2010 38,8MB 4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 19.11.2010 2,94MB 4.0.30319
Microsoft .NET Framework 4 Extended Microsoft Corporation 18.11.2010 52,0MB 4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft Corporation 19.11.2010 10,7MB 4.0.30319
Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Corporation 19.11.2010 83,5MB 4.0.30319
Microsoft Help Viewer 1.0 Microsoft Corporation 19.11.2010 3,97MB 1.0.30319
Microsoft Help Viewer 1.0 Language Pack - DEU Microsoft Corporation 19.11.2010 1,95MB 1.0.30319
Microsoft Silverlight Microsoft Corporation 19.11.2010 14,9MB 3.0.40818.0
Microsoft SQL Server 2008 R2 Management Objects Microsoft Corporation 19.11.2010 17,2MB 10.50.1447.4
Microsoft SQL Server Compact 3.5 SP2 DEU Microsoft Corporation 19.11.2010 3,69MB 3.5.8080.0
Microsoft SQL Server System CLR Types Microsoft Corporation 19.11.2010 2,55MB 10.50.1447.4
Microsoft Visual Basic 2010 Express - DEU Microsoft Corporation 19.11.2010 10.0.30319
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 26.11.2010 0,42MB 8.0.56336
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 19.11.2010 1,42MB 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 17.11.2010 0,58MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 Microsoft Corporation 18.11.2010 0,58MB 9.0.30729.4974
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools Microsoft Corporation 19.11.2010 35,3MB 10.0.30319
Microsoft WSE 3.0 Runtime Microsoft Corp. 26.11.2010 0,92MB 3.0.5305.0
Mozilla Firefox 4.0b7 (x86 de) Mozilla 20.11.2010 26,3MB 4.0b7
NVIDIA Drivers NVIDIA Corporation 18.11.2010 1.9
NVIDIA PhysX NVIDIA Corporation 18.11.2010 120,1MB 9.09.0814
NVIDIA Stereoscopic 3D Driver NVIDIA Corporation 18.11.2010 7.15.11.9045
OpenOffice.org 3.2 OpenOffice.org 24.11.2010 362MB 3.2.9502
Paint.NET v3.5.6 dotPDN LLC 18.11.2010 10,4MB 3.56.0
QuickTime Apple Inc. 24.11.2010 73,7MB 7.68.75.0
RocketDock 1.3.5 Punk Software 19.11.2010
Skype™ 5.0 Skype Technologies S.A. 17.11.2010 21,4MB 5.0.152
SpeedFan (remove only) 24.11.2010
TeamViewer 5 TeamViewer GmbH 17.11.2010 5.1.9385
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU Microsoft Corporation 19.11.2010 11,2MB 4.0.8080.0
VLC media player 1.1.5 VideoLAN 24.11.2010 1.1.5
War Rock GamersFirst 17.11.2010
WinRAR 19.11.2010
Antiviren Programm (AntiVir Personal): Kein Fund Malwarebytes: Kein Fund Ich konnte auch aus den Logfiles kein Fazit ziehen, hab auch schon die Platten nach der Datei 'install.exe' durchsucht, existiert nicht mehr. Hab auch schon so auf der Platte nach Veränderungen gesucht, aber ist eben nichts an der groben Verzeichnisstruktur (z.B. Program Files, AppData etc.) geändert. Systemwiederherstellung hat nicht geholfen (dachte könnte helfen weil es eine 'install.exe' war)... Hoffe Ihr könnt mir da noch weiterhelfen. |
|
28.11.2010, 11:41
| #2 |
| /// Malware-holic   |  Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet ootl:
__________________Systemscan mit OTL download otl: http://filepony.de/download-otl/ Doppelklick auf die OTL.exe (user von Windows 7 und Vista: Rechtsklick als Administrator ausführen) 1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output 2. Hake an "scan all users" 3. Unter "Extra Registry wähle: "Use Safelist" "LOP Check" "Purity Check" 4. Kopiere in die Textbox: netsvcs msconfig safebootminimal safebootnetwork activex drivers32 %ALLUSERSPROFILE%\Application Data\*. %ALLUSERSPROFILE%\Application Data\*.exe /s %APPDATA%\*. %APPDATA%\*.exe /s %SYSTEMDRIVE%\*.exe /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL explorer.exe iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles CREATERESTOREPOINT 5. Klicke "Scan" 6. 2 reporte werden erstellt: OTL.Txt Extras.Txt beide posten bitte
__________________ |
|
28.11.2010, 12:55
| #3 |
| | Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet Hier sind die zwei Logfiles:
__________________Code:
ATTFilter OTL logfile created on: 28.11.2010 12:32:21 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Dominik\Downloads Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 70,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 85,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 149,05 Gb Total Space | 126,07 Gb Free Space | 84,59% Space Free | Partition Type: NTFS Drive D: | 465,76 Gb Total Space | 448,62 Gb Free Space | 96,32% Space Free | Partition Type: NTFS Drive F: | 99,00 Gb Total Space | 91,34 Gb Free Space | 92,27% Space Free | Partition Type: NTFS Computer Name: DOMINIK-PC | User Name: Dominik | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Dominik\Downloads\OTL.exe (OldTimer Tools) PRC - D:\Program Files\Team Viewer\TeamViewer_Service.exe (TeamViewer GmbH) PRC - C:\Programme\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - D:\Program Files\D61F20F75FCCE260DA0769CC34BB2481\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - D:\Program Files\D61F20F75FCCE260DA0769CC34BB2481\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - c:\Programme\Windows Defender\MpCmdRun.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Users\Dominik\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation) MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation) MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation) MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation) MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation) MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation) MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation) MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation) SRV - (TeamViewer5) -- D:\Program Files\Team Viewer\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (aspnet_state) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) SRV - (NetTcpActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) SRV - (NetPipeActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) SRV - (NetMsmqActivator) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation) SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation) SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation) SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation) SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation) SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation) SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation) SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation) SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation) SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation) SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation) DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation) DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.) DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.) DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.) DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.) DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices) DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.) DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices) DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation) DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation) DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation) DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation) DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation) DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation) DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation) DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation) DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation) DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation) DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex) DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.) DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company) DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation) DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation) DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation) DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation) DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.) DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation) DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation) DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation) DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems) DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation) DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.) DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology) DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.) DRV - (rdpbus) -- C:\Windows\system32\DRIVERS\rdpbus.sys (Microsoft Corporation) DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation) DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation) DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation) DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation) DRV - (vwififlt) -- C:\Windows\System32\drivers\vwififlt.sys (Microsoft Corporation) DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation) DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation) DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation) DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation) DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation) DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation) DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation) DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation) DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation) DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation) DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation) DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.) DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.) DRV - (netr73) -- C:\Windows\System32\drivers\netr73.sys (Ralink Technology, Corp.) DRV - (netr28) -- C:\Windows\System32\drivers\netr28.sys (Ralink Technology, Corp.) DRV - (RTL8167) -- C:\Windows\System32\drivers\Rt86win7.sys (Realtek Corporation ) DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation) DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation) DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation) DRV - (speedfan) -- C:\Windows\system32\speedfan.sys (Windows (R) 2000 DDK provider) DRV - (giveio) -- C:\Windows\system32\giveio.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7E 33 53 61 6D 87 CB 01 [binary data] IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1928760412-1669202804-1752954967-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2682599&q=" FF - HKLM\software\mozilla\Mozilla Firefox 4.0b7\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 7\components [2010.11.21 21:18:18 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0b7\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 7\plugins [2010.11.21 20:23:26 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\mozilla\Extensions [2010.11.25 22:24:06 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\3s3qzocw.default\extensions [2010.11.25 22:24:06 | 000,000,000 | ---D | M] (InnoGames Community Toolbar) -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\3s3qzocw.default\extensions\{c7478d43-2bd5-4844-98b8-c2a6aa9ed677} [2010.11.25 22:24:05 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\3s3qzocw.default\extensions\engine@conduit.com O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O4 - HKLM..\Run: [iTunesHelper] D:\Program Files\41D95987DA91375C523B7AA3F081B80C\iTunesHelper.exe (Apple Inc.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = D:\Program Files\D61F20F75FCCE260DA0769CC34BB2481\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{728cce12-f358-11df-9aec-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{728cce12-f358-11df-9aec-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.11.28 11:10:55 | 000,000,000 | ---D | C] -- C:\Programme\Install Creator Pro [2010.11.27 23:52:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Malwarebytes [2010.11.27 23:52:28 | 000,000,000 | ---D | C] -- C:\Programme\ Malwarebytes Anti-Malware [2010.11.27 23:52:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.11.27 21:12:34 | 000,000,000 | ---D | C] -- C:\Programme\trend micro [2010.11.27 21:12:34 | 000,000,000 | ---D | C] -- C:\rsit [2010.11.27 21:02:10 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Avira [2010.11.27 21:01:15 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\ABBYY [2010.11.27 21:01:15 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\ABBYY [2010.11.27 20:59:31 | 000,000,000 | ---D | C] -- C:\Programme\Avira [2010.11.27 20:59:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010.11.27 19:44:49 | 000,000,000 | -H-D | C] -- C:\Users\Public\Documents\Server [2010.11.27 13:49:17 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Electronic Arts [2010.11.27 13:46:58 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Adobe [2010.11.27 13:44:14 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft WSE [2010.11.27 13:29:52 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information [2010.11.25 16:50:37 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Microsoft Games [2010.11.25 16:18:45 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\OpenOffice.org [2010.11.25 15:45:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat [2010.11.25 15:32:21 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll [2010.11.25 15:32:07 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.11.25 15:29:50 | 000,000,000 | ---D | C] -- C:\Programme\Apple Software Update [2010.11.25 15:29:32 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour [2010.11.24 14:23:19 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Output [2010.11.24 14:20:56 | 000,000,000 | ---D | C] -- C:\Programme\Inno Setup 5 [2010.11.22 21:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010.11.22 21:05:23 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Java [2010.11.22 21:05:06 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll [2010.11.22 21:05:06 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2010.11.22 21:05:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2010.11.22 21:05:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2010.11.22 21:04:47 | 000,000,000 | ---D | C] -- C:\Programme\Java [2010.11.22 20:39:36 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Umrechner [2010.11.22 16:11:09 | 000,000,000 | ---D | C] -- C:\Programme\FileZilla FTP Client [2010.11.22 16:10:10 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\FileZilla [2010.11.21 21:20:03 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Apple Computer [2010.11.21 21:20:02 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Apple Computer [2010.11.21 21:19:52 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE [2010.11.21 21:19:05 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2010.11.21 21:17:55 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime [2010.11.21 21:17:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010.11.21 21:17:37 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Apple [2010.11.21 21:16:34 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Apple [2010.11.21 21:16:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010.11.21 21:03:19 | 000,000,000 | ---D | C] -- C:\Programme\Krypton Toolkit 4.3.0 [2010.11.21 21:03:18 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Component Factory [2010.11.21 20:23:22 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Mozilla [2010.11.21 20:23:15 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox 4.0 Beta 7 [2010.11.21 01:33:01 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Mozilla [2010.11.21 01:11:46 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Geckofx [2010.11.20 22:40:17 | 000,000,000 | ---D | C] -- C:\Programme\RocketDock [2010.11.20 22:31:59 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\WinRAR [2010.11.20 22:31:52 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR [2010.11.20 22:25:04 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Doktop [2010.11.20 16:37:10 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Xenocode [2010.11.20 13:44:53 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\vlc [2010.11.20 12:12:36 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SQL Server [2010.11.20 12:12:25 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Silverlight [2010.11.20 12:11:47 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Synchronization Services [2010.11.20 12:11:46 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SQL Server Compact Edition [2010.11.20 12:10:05 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SDKs [2010.11.20 12:10:05 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Help Viewer [2010.11.19 23:06:51 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\AIMP [2010.11.19 23:02:41 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft.NET [2010.11.19 23:02:07 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe [2010.11.19 23:02:07 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll [2010.11.19 23:02:07 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll [2010.11.19 23:00:22 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010.11.19 22:54:13 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Paint.NET [2010.11.19 22:45:26 | 000,604,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMCTL32.OCX [2010.11.19 22:44:27 | 001,355,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSVBVM50.dll [2010.11.19 22:44:27 | 000,207,872 | ---- | C] (Incomedia - www.websitex5.com) -- C:\Windows\System32\iwpsetup.exe [2010.11.19 22:44:27 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VB5STKIT.DLL [2010.11.19 20:48:12 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Activision [2010.11.19 20:47:43 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll [2010.11.19 20:47:43 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll [2010.11.19 20:47:43 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll [2010.11.19 20:47:43 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll [2010.11.19 20:47:43 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll [2010.11.19 20:47:43 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll [2010.11.19 20:47:43 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll [2010.11.19 20:47:42 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll [2010.11.19 20:47:42 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll [2010.11.19 20:47:42 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll [2010.11.19 20:47:42 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll [2010.11.19 20:47:42 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll [2010.11.19 20:47:41 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll [2010.11.19 20:47:41 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll [2010.11.19 20:47:41 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll [2010.11.19 20:47:41 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll [2010.11.19 20:47:41 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll [2010.11.19 20:47:41 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll [2010.11.19 20:47:41 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll [2010.11.19 20:47:40 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll [2010.11.19 20:47:40 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll [2010.11.19 20:47:40 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll [2010.11.19 20:47:40 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll [2010.11.19 20:47:40 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll [2010.11.19 20:47:39 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll [2010.11.19 20:47:39 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll [2010.11.19 20:47:39 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll [2010.11.19 20:47:39 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll [2010.11.19 20:47:39 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll [2010.11.19 20:47:39 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll [2010.11.19 20:47:39 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll [2010.11.19 20:47:39 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll [2010.11.19 20:47:39 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll [2010.11.19 20:47:38 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll [2010.11.19 20:47:38 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll [2010.11.19 20:47:38 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll [2010.11.19 20:47:38 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll [2010.11.19 20:47:38 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll [2010.11.19 20:47:38 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll [2010.11.19 20:47:38 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll [2010.11.19 20:47:38 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll [2010.11.19 20:47:38 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll [2010.11.19 20:47:37 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll [2010.11.19 20:47:37 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll [2010.11.19 20:47:37 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll [2010.11.19 20:47:37 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll [2010.11.19 20:47:37 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll [2010.11.19 20:47:37 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll [2010.11.19 20:47:37 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll [2010.11.19 20:47:37 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll [2010.11.19 20:47:37 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll [2010.11.19 20:47:36 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll [2010.11.19 20:47:36 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll [2010.11.19 20:47:36 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll [2010.11.19 20:47:36 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll [2010.11.19 20:47:35 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll [2010.11.19 20:47:35 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll [2010.11.19 20:47:33 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll [2010.11.19 20:47:33 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll [2010.11.19 20:47:33 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll [2010.11.19 20:47:33 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll [2010.11.19 20:47:33 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll [2010.11.19 20:47:33 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll [2010.11.19 20:47:32 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll [2010.11.19 20:47:32 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll [2010.11.19 20:47:32 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll [2010.11.19 20:47:32 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll [2010.11.19 20:47:32 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll [2010.11.19 20:47:31 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll [2010.11.19 20:47:31 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll [2010.11.19 20:47:31 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll [2010.11.19 20:47:31 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll [2010.11.19 20:47:31 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll [2010.11.19 20:47:31 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll [2010.11.19 20:47:31 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll [2010.11.19 20:47:30 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll [2010.11.19 20:47:30 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll [2010.11.19 20:47:30 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll [2010.11.19 20:47:23 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll [2010.11.19 20:47:22 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll [2010.11.19 20:47:22 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll [2010.11.19 20:47:22 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll [2010.11.19 20:47:22 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll [2010.11.19 20:47:22 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll [2010.11.19 20:47:22 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll [2010.11.19 20:47:21 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll [2010.11.19 20:47:21 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll [2010.11.19 19:55:00 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2010.11.19 19:55:00 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2010.11.19 19:54:32 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010.11.19 19:54:32 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010.11.19 19:54:31 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010.11.19 19:54:31 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2010.11.19 19:54:30 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010.11.19 19:54:30 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2010.11.19 19:54:30 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010.11.19 19:54:30 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010.11.19 19:54:30 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010.11.19 19:54:30 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010.11.19 19:54:30 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010.11.19 19:54:19 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll [2010.11.19 19:54:19 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2010.11.19 19:54:18 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010.11.19 19:54:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010.11.19 19:54:02 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll [2010.11.19 19:53:59 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll [2010.11.19 19:53:57 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll [2010.11.19 19:53:57 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax [2010.11.19 19:53:56 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll [2010.11.19 19:53:56 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax [2010.11.19 19:53:49 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll [2010.11.19 19:53:48 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys [2010.11.19 19:53:47 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2010.11.19 19:53:41 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010.11.19 19:53:31 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll [2010.11.19 19:53:30 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe [2010.11.19 19:53:30 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe [2010.11.19 19:53:27 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll [2010.11.19 19:53:22 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll [2010.11.19 19:53:22 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll [2010.11.19 19:53:01 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL [2010.11.19 19:52:59 | 000,026,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys [2010.11.19 19:52:55 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2010.11.19 19:52:44 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2010.11.19 19:52:44 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll [2010.11.19 19:52:43 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll [2010.11.19 19:45:18 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll [2010.11.19 19:45:17 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2010.11.19 19:45:14 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll [2010.11.19 19:45:14 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll [2010.11.19 19:45:14 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe [2010.11.19 19:45:14 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe [2010.11.19 19:45:14 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe [2010.11.19 19:45:14 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe [2010.11.19 19:45:14 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll [2010.11.19 19:45:14 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll [2010.11.19 19:45:12 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll [2010.11.19 19:45:00 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2010.11.19 19:45:00 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2010.11.19 19:45:00 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2010.11.19 19:44:41 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe [2010.11.19 19:44:26 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys [2010.11.19 19:42:40 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Adobe [2010.11.19 19:39:27 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvuhda.exe [2010.11.19 19:39:27 | 000,155,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcohda.dll [2010.11.19 19:39:27 | 000,066,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvhda32v.sys [2010.11.19 19:39:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nvhdap32.dll [2010.11.19 19:38:18 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010.11.19 19:38:05 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.11.19 19:37:42 | 000,000,000 | ---D | C] -- C:\Programme\AGEIA Technologies [2010.11.19 19:37:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\AGEIA [2010.11.19 19:37:03 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Wise Installation Wizard [2010.11.19 19:36:53 | 004,223,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NVStWiz.exe [2010.11.19 19:35:45 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvudisp.exe [2010.11.19 19:34:14 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NVUNINST.EXE [2010.11.19 19:27:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010.11.18 23:29:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\skypePM [2010.11.18 23:28:40 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Skype [2010.11.18 23:28:39 | 000,000,000 | R--D | C] -- C:\Programme\Skype [2010.11.18 23:28:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Skype [2010.11.18 23:28:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.11.18 23:19:35 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Google [2010.11.18 23:19:32 | 000,000,000 | ---D | C] -- C:\Programme\Google [2010.11.18 23:19:24 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\OpenCandy [2010.11.18 23:19:22 | 000,000,000 | ---D | C] -- C:\Programme\GamersFirst [2010.11.18 23:18:45 | 000,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2010.11.18 23:15:36 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll [2010.11.18 23:15:36 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll [2010.11.18 23:15:36 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll [2010.11.18 23:15:36 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll [2010.11.18 23:15:00 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Macromedia [2010.11.18 23:15:00 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Adobe [2010.11.18 23:14:57 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed [2010.11.18 23:09:32 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\TeamViewer [2010.11.18 23:02:51 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010.11.18 23:00:44 | 000,398,336 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\TVWizudlg.exe [2010.11.18 23:00:44 | 000,000,000 | ---D | C] -- C:\Windows\System32\Lang [2010.11.18 23:00:43 | 000,000,000 | ---D | C] -- C:\Programme\Intel [2010.11.18 22:58:29 | 001,002,008 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpun.exe [2010.11.18 22:58:29 | 000,000,000 | ---D | C] -- C:\Windows\System32\x64 [2010.11.18 22:47:21 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Desktop\Gameboy [2010.11.18 22:42:49 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Searches [2010.11.18 22:42:39 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Identities [2010.11.18 22:42:37 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Contacts [2010.11.18 22:42:33 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\VirtualStore [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Vorlagen [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\AppData\Local\Verlauf [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\AppData\Local\Temporary Internet Files [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Startmenü [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\SendTo [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Recent [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Netzwerkumgebung [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Lokale Einstellungen [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Documents\Eigene Videos [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Documents\Eigene Musik [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Eigene Dateien [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Documents\Eigene Bilder [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Druckumgebung [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Cookies [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\AppData\Local\Anwendungsdaten [2010.11.18 22:42:29 | 000,000,000 | -HSD | C] -- C:\Users\Dominik\Anwendungsdaten [2010.11.18 22:42:28 | 000,000,000 | --SD | C] -- C:\Users\Dominik\AppData\Roaming\Microsoft [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Videos [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Saved Games [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Pictures [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Music [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Links [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Favorites [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Downloads [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Documents [2010.11.18 22:42:28 | 000,000,000 | R--D | C] -- C:\Users\Dominik\Desktop [2010.11.18 22:42:28 | 000,000,000 | -H-D | C] -- C:\Users\Dominik\AppData [2010.11.18 22:42:28 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Temp [2010.11.18 22:42:28 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Local\Microsoft [2010.11.18 22:42:28 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\Media Center Programs [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.11.18 22:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.11.18 22:15:18 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.11.18 22:12:16 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010.11.18 22:11:05 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010.11.18 21:54:25 | 000,000,000 | -HSD | C] -- C:\Boot [2010.11.08 17:28:52 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Zeileneditor [2010.11.04 21:56:49 | 000,000,000 | -H-D | C] -- C:\Config.Msi [2010.11.04 16:46:11 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\shutme [2010.10.31 12:07:03 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\8-Bit [2010.10.30 20:02:38 | 000,000,000 | ---D | C] -- C:\Users\Dominik\Documents\Server ========== Files - Modified Within 30 Days ========== [2010.11.28 12:29:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.11.28 11:10:56 | 000,001,022 | ---- | M] () -- C:\Users\Public\Desktop\Install Creator Pro.lnk [2010.11.28 11:10:29 | 000,696,132 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2010.11.28 11:10:29 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010.11.28 11:10:29 | 000,147,428 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2010.11.28 11:10:29 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010.11.28 07:43:47 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.11.28 01:31:06 | 000,000,997 | ---- | M] () -- C:\Users\Dominik\Desktop\AIMP2.exe - Verknüpfung.lnk [2010.11.28 01:23:09 | 000,014,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.11.28 01:23:09 | 000,014,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.11.28 01:15:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.11.28 01:15:48 | 2566,365,184 | -HS- | M] () -- C:\hiberfil.sys [2010.11.25 22:22:20 | 000,013,957 | ---- | M] () -- C:\Users\Dominik\Documents\smrm.odt [2010.11.25 22:09:12 | 000,026,100 | ---- | M] () -- C:\Users\Dominik\Documents\perso_charakter_elliot.odt [2010.11.25 16:21:26 | 000,000,398 | ---- | M] () -- C:\Users\Dominik\Documents\Dokument.rtf [2010.11.25 16:19:05 | 000,001,071 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010.11.25 15:28:32 | 000,000,045 | ---- | M] () -- C:\Windows\System32\initdebug.nfo [2010.11.25 15:25:55 | 000,289,720 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010.11.22 21:04:49 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll [2010.11.22 21:04:49 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2010.11.22 21:04:49 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2010.11.22 21:04:49 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2010.11.22 16:12:28 | 000,000,199 | ---- | M] () -- C:\Users\Dominik\Documents\.htaccess [2010.11.21 20:23:20 | 000,002,088 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox 4.0 Beta 7.lnk [2010.11.21 01:50:31 | 000,127,892 | ---- | M] () -- C:\Users\Dominik\Documents\Zeileneditor.zip [2010.11.20 13:40:34 | 015,383,240 | ---- | M] () -- C:\Users\Dominik\Documents\clip0001.avi [2010.11.19 22:41:03 | 000,000,111 | ---- | M] () -- C:\Users\Dominik\Desktop\SR1.m3u [2010.11.18 23:29:40 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010.11.18 22:16:25 | 000,056,735 | ---- | M] () -- C:\Windows\System32\license.rtf [2010.11.18 22:10:53 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2010.10.30 20:05:40 | 000,022,528 | ---- | M] () -- C:\Users\Dominik\Desktop\WindowsApplication1.exe ========== Files Created - No Company Name ========== [2010.11.28 11:10:56 | 000,001,022 | ---- | C] () -- C:\Users\Public\Desktop\Install Creator Pro.lnk [2010.11.28 01:31:06 | 000,000,997 | ---- | C] () -- C:\Users\Dominik\Desktop\AIMP2.exe - Verknüpfung.lnk [2010.11.25 22:22:19 | 000,013,957 | ---- | C] () -- C:\Users\Dominik\Documents\smrm.odt [2010.11.25 22:09:10 | 000,026,100 | ---- | C] () -- C:\Users\Dominik\Documents\perso_charakter_elliot.odt [2010.11.25 16:21:26 | 000,000,398 | ---- | C] () -- C:\Users\Dominik\Documents\Dokument.rtf [2010.11.25 16:19:05 | 000,001,071 | ---- | C] () -- C:\Users\Dominik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010.11.25 15:18:47 | 000,022,528 | ---- | C] () -- C:\Users\Dominik\Desktop\WindowsApplication1.exe [2010.11.22 16:12:28 | 000,000,199 | ---- | C] () -- C:\Users\Dominik\Documents\.htaccess [2010.11.21 20:23:20 | 000,002,088 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox 4.0 Beta 7.lnk [2010.11.21 18:46:48 | 000,000,045 | ---- | C] () -- C:\Windows\System32\initdebug.nfo [2010.11.21 01:50:31 | 000,127,892 | ---- | C] () -- C:\Users\Dominik\Documents\Zeileneditor.zip [2010.11.20 13:32:15 | 015,383,240 | ---- | C] () -- C:\Users\Dominik\Documents\clip0001.avi [2010.11.19 22:44:27 | 000,006,114 | ---- | C] () -- C:\Windows\System32\SHELLLNK.TLB [2010.11.19 22:41:03 | 000,000,111 | ---- | C] () -- C:\Users\Dominik\Desktop\SR1.m3u [2010.11.19 19:39:27 | 000,001,481 | ---- | C] () -- C:\Windows\System32\nvhda.nvu [2010.11.19 19:35:44 | 000,010,155 | ---- | C] () -- C:\Windows\System32\nvdisp.nvu [2010.11.18 23:29:40 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.11.18 23:19:46 | 000,001,098 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.11.18 23:19:43 | 000,001,094 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.11.18 23:00:44 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll [2010.11.18 23:00:44 | 000,121,232 | ---- | C] () -- C:\Windows\System32\IScrNB.bmp [2010.11.18 21:51:25 | 000,383,832 | RHS- | C] () -- C:\bootmgr [2009.08.03 00:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009.08.03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009.08.03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys ========== LOP Check ========== [2010.11.28 11:13:41 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\AIMP [2010.11.21 21:03:18 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Component Factory [2010.11.27 12:10:04 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\FileZilla [2010.11.28 01:14:51 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenCandy [2010.11.25 16:18:45 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenOffice.org [2010.11.18 23:09:32 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\TeamViewer [2009.07.14 05:53:46 | 000,005,668 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2010.11.27 21:01:15 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\ABBYY [2010.11.19 19:42:40 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Adobe [2010.11.28 11:13:41 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\AIMP [2010.11.21 21:23:09 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Apple Computer [2010.11.27 21:02:10 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Avira [2010.11.21 21:03:18 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Component Factory [2010.11.27 12:10:04 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\FileZilla [2010.11.18 22:42:39 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Identities [2010.11.18 23:15:00 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Macromedia [2010.11.27 23:52:38 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Malwarebytes [2009.07.14 09:56:41 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Media Center Programs [2010.11.27 13:44:14 | 000,000,000 | --SD | M] -- C:\Users\Dominik\AppData\Roaming\Microsoft [2010.11.21 20:23:26 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Mozilla [2010.11.28 01:14:51 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenCandy [2010.11.25 16:18:45 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\OpenOffice.org [2010.11.25 18:11:32 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Skype [2010.11.25 16:30:29 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\skypePM [2010.11.18 23:09:32 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\TeamViewer [2010.11.28 01:14:51 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\vlc [2010.11.20 22:32:00 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\WinRAR < %APPDATA%\*.exe /s > [2010.11.27 13:44:14 | 000,010,134 | R--- | M] () -- C:\Users\Dominik\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe [2010.11.18 23:19:31 | 000,659,048 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\OpenCandy\OpenCandy_491F238FD8D54385AB4F14A48D158D9F\Chrome_p2v1wr.exe [2010.11.18 23:19:26 | 000,349,296 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\OpenCandy\OpenCandy_491F238FD8D54385AB4F14A48D158D9F\DLMgr_3_1.6.87.exe [2010.08.25 03:58:52 | 000,579,824 | ---- | M] () -- C:\Users\Dominik\AppData\Roaming\OpenCandy\OpenCandy_491F238FD8D54385AB4F14A48D158D9F\opencandy_08232010_SIGNED.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: EXPLORER.EXE > [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=0D5FBE7A10141460C61791510EB5F5F9 -- C:\Windows\explorer.exe [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe < MD5 for: IASTORV.SYS > [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\System32\user32.dll [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll < MD5 for: USERINIT.EXE > [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WINLOGON.EXE > [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < End of report > Code:
ATTFilter OTL Extras logfile created on: 28.11.2010 12:32:21 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Dominik\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 70,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 126,07 Gb Free Space | 84,59% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 448,62 Gb Free Space | 96,32% Space Free | Partition Type: NTFS
Drive F: | 99,00 Gb Total Space | 91,34 Gb Free Space | 92,27% Space Free | Partition Type: NTFS
Computer Name: DOMINIK-PC | User Name: Dominik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1928760412-1669202804-1752954967-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox 4.0 Beta 7\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Program Files\3973B01543C57F53FFF87DDDA6F61020\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Program Files\3973B01543C57F53FFF87DDDA6F61020\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}" = Microsoft SQL Server System CLR Types
"{616C6F39-4CE1-3434-A665-2F6A04C09A7F}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{639673E9-D53F-44F4-A046-485C8A6ADA15}" = Paint.NET v3.5.6
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
"{8EDD94AF-CB8E-42FB-8B9A-DA6D3920D4A7}" = Krypton Toolkit 4.3.0
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A106D33E-6B43-42C0-9BFC-D03303261FA7}" = Microsoft SQL Server 2008 R2 Management Objects
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}" = Microsoft Visual Basic 2010 Express - DEU
"{CFCB8616-A5D1-4281-80E8-389F685BFAE2}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FAE36873-1941-4076-A9A5-48812B5EA0B7}" = iTunes
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CCleaner" = CCleaner
"FileZilla Client" = FileZilla Client 3.3.5.1
"GamersFirst War Rock" = War Rock
"Google Chrome" = Google Chrome
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Incomedia WebSite X5 v8 - Evolution" = Incomedia WebSite X5 v8 - Evolution
"Inno Setup 5_is1" = Inno Setup Version 5.4.0
"Install Creator Pro" = Install Creator Pro
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft Visual Basic 2010 Express - DEU" = Microsoft Visual Basic 2010 Express - DEU
"Mozilla Firefox 4.0b7 (x86 de)" = Mozilla Firefox 4.0b7 (x86 de)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"RocketDock_is1" = RocketDock 1.3.5
"SpeedFan" = SpeedFan (remove only)
"TeamViewer 5" = TeamViewer 5
"TVWiz" = Intel(R) TV Wizard
"VLC media player" = VLC media player 1.1.5
"WinRAR archiver" = WinRAR
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 27.11.2010 20:25:21 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description =
Error - 27.11.2010 20:25:22 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description =
Error - 27.11.2010 20:25:22 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description =
Error - 27.11.2010 20:25:25 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description =
Error - 27.11.2010 20:25:30 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7600.16450,
Zeitstempel: 0x4aeba271 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x02360000 ID des fehlerhaften
Prozesses: 0x3c8 Startzeit der fehlerhaften Anwendung: 0x01cb8e91719b51d8 Pfad der
fehlerhaften Anwendung: C:\Windows\Explorer.EXE Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
010ea971-fa86-11df-acf9-00252204656a
Error - 27.11.2010 20:26:10 | Computer Name = Dominik-PC | Source = MsiInstaller | ID = 11311
Description =
Error - 27.11.2010 20:52:23 | Computer Name = Dominik-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "D:\Program Files\VS2010\Common7\Packages\Debugger\X64\msvsmon.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 27.11.2010 22:13:23 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7600.16450,
Zeitstempel: 0x4aeba271 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x01fc0003 ID des fehlerhaften
Prozesses: 0xf68 Startzeit der fehlerhaften Anwendung: 0x01cb8e92c4f50b01 Pfad der
fehlerhaften Anwendung: C:\Windows\explorer.exe Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
1339cbcd-fa95-11df-acf9-00252204656a
Error - 28.11.2010 05:54:34 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7600.16450,
Zeitstempel: 0x4aeba271 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x01df0000 ID des fehlerhaften
Prozesses: 0x7f4 Startzeit der fehlerhaften Anwendung: 0x01cb8ea1e1e20f90 Pfad der
fehlerhaften Anwendung: C:\Windows\explorer.exe Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
806e1009-fad5-11df-acf9-00252204656a
Error - 28.11.2010 07:27:48 | Computer Name = Dominik-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7600.16450,
Zeitstempel: 0x4aeba271 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x02010009 ID des fehlerhaften
Prozesses: 0x978 Startzeit der fehlerhaften Anwendung: 0x01cb8ee245ac36aa Pfad der
fehlerhaften Anwendung: C:\Windows\explorer.exe Pfad des fehlerhaften Moduls: unknown
Berichtskennung:
86b3be18-fae2-11df-acf9-00252204656a
[ System Events ]
Error - 26.11.2010 23:00:08 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
Status gemeldet: 32
Error - 27.11.2010 05:48:55 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error - 27.11.2010 07:10:11 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
Status gemeldet: 32
Error - 27.11.2010 08:22:26 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error - 27.11.2010 12:07:49 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-General | ID = 5
Description =
Error - 27.11.2010 18:40:31 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
Status gemeldet: 32
Error - 27.11.2010 18:40:41 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error - 27.11.2010 20:12:34 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7016
Description = Der Dienst "NVIDIA Display Driver Service" hat einen ungültigen aktuellen
Status gemeldet: 32
Error - 27.11.2010 20:15:44 | Computer Name = Dominik-PC | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden
im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich
an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error - 27.11.2010 20:27:54 | Computer Name = Dominik-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.
< End of report >
|
|
28.11.2010, 15:58
| #4 |
| /// Malware-holic | Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet bitte erstelle und poste ein combofix log. Ein Leitfaden und Tutorium zur Nutzung von ComboFix
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
| Themen zu Externe Links werden auf falsche Seiten (z.B. find-here) weitergeleitet |
| antivir, antivir guard, aufrufe, avira, bho, bonjour, bootmgr, browser, c:\hiberfil.sys, cache.dat, desktop, desktop.ini, falsche seite, firefox, flash player, gomeo, google, hiberfil.sys, hijack, hijackthis, home, home premium, install.exe, logfile, media center, notepad.exe, object, plug-in, problem, programdata, realtek, registry, software, studio, suchmaschine, system, team viewer, trojaner, trojaner board, twain.dll, twunk_32.exe, virus, vista, visual studio, weiterleitungen, windows, windows 7 home, windows 7 home premium, wscript.exe |
Linear-Darstellung
