Trojaner auf mein Netbook

farida

So das sollte ich dir posten.Ich hab den stick jetzt an ein anderen Laptop angeschlossen.ich hoffe,dass er ihn jetzt nicht auch infiziert?

Scan result of Farbars Recovery Tool (FRST written by farbar) Version: 24-01-2012
Ran by saliha at 2012-01-24 19:22:53
Running from E:\
(X86) OS Language: German Standard
Attention: Could not load system hive.FEHLER: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

========================== Registry (Whitelisted) =============

HKLM\...\Winlogon: [Userinit] [x]
HKLM\...\Winlogon: [Shell]

================================ Services (Whitelisted) ==================


========================== Drivers (Whitelisted) =============


========================== NetSvcs (Whitelisted) ===========

============ One Month Created Files and Folders ==============

2012-01-24 19:13 - 2012-01-24 19:13 - 0000000 ____D C:\Users\saliha\AppData\Local\{F3A3CC18-9B76-4340-9DFE-0AAF063363B2}
2012-01-24 18:55 - 2012-01-24 18:55 - 0000000 ____D C:\Users\saliha\AppData\Local\{C024A112-19DF-499E-A1D8-664DF3CFAFB7}
2012-01-24 18:47 - 2012-01-24 18:47 - 0000000 ____D C:\Users\saliha\AppData\Local\{3CFDBB1F-B6DE-415A-A9DC-7BC69385941D}
2012-01-24 18:36 - 2012-01-24 19:22 - 0000000 ____D C:\FRST
2012-01-24 18:33 - 2012-01-24 18:33 - 0000000 ____D C:\Users\saliha\AppData\Local\{EB4B2084-1B22-4190-B560-97F857520599}
2012-01-23 00:23 - 2012-01-23 00:23 - 0000000 ____D C:\Users\saliha\AppData\Local\{CB4F5197-4E8A-492A-AF32-817E4E11F8FD}
2012-01-14 22:11 - 2012-01-14 22:11 - 0001075 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\Users\saliha\AppData\Roaming\Malwarebytes
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\Users\All Users\Malwarebytes
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\ProgramData\Malwarebytes
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2012-01-14 22:11 - 2011-12-10 15:24 - 0020464 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2012-01-14 22:04 - 2012-01-14 22:05 - 0000000 ____D C:\Users\saliha\Documents\antibotcd0112_chip[1]
2012-01-14 21:54 - 2012-01-14 21:54 - 0000000 ____D C:\Users\saliha\AppData\Local\{F27399F7-2B82-4377-89A9-A9CF6A39C5D3}
2012-01-14 21:54 - 2012-01-14 21:54 - 0000000 ____D C:\Users\saliha\AppData\Local\{A755919E-1172-4683-8572-6CFDAC9588EB}
2012-01-13 21:57 - 2012-01-14 21:52 - 0000000 ____D C:\1f46ce212972cb18796329d23666adad
2012-01-13 19:10 - 2012-01-13 19:10 - 0002033 ____A C:\Users\saliha\Desktop\Entfernen des Avira DE-Cleaners.lnk
2012-01-13 19:10 - 2012-01-13 19:10 - 0001962 ____A C:\Users\saliha\Desktop\Avira DE-Cleaner.lnk
2012-01-13 18:42 - 2012-01-13 18:42 - 0000000 ____D C:\Users\saliha\AppData\Local\{D507EAA4-93E1-4B99-9B79-6E1821D7C26C}
2012-01-13 18:42 - 2012-01-13 18:42 - 0000000 ____D C:\Users\saliha\AppData\Local\{04E23234-F08B-4205-8705-8C9FA4812F2C}
2012-01-12 20:24 - 2012-01-12 20:24 - 0000000 ____D C:\Users\saliha\AppData\Local\ElevatedDiagnostics
2012-01-12 20:00 - 2012-01-12 20:00 - 0000000 ____D C:\Program Files\PriceGong
2012-01-12 19:57 - 2012-01-12 19:57 - 0459568 ____A (SweetIM Technologies, Ltd.) C:\Users\saliha\Desktop\SweetImSetup.exe
2012-01-12 19:49 - 2012-01-24 19:18 - 1029112 ____A C:\Windows\ntbtlog.txt
2012-01-12 18:50 - 2012-01-12 18:50 - 0000000 ____D C:\Users\saliha\AppData\Roaming\Avira
2012-01-12 18:07 - 2012-01-12 18:07 - 0000000 ____D C:\Users\saliha\AppData\Local\{73D0459D-B613-4205-9565-F0FD453405F2}
2012-01-12 18:07 - 2012-01-12 18:07 - 0000000 ____D C:\Users\saliha\AppData\Local\{0E35760C-C11F-4C9B-9E5E-4062494B85CA}
2012-01-11 18:15 - 2011-11-19 15:06 - 0067072 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll
2012-01-11 18:15 - 2011-11-17 06:41 - 1288984 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2012-01-11 18:15 - 2011-10-26 05:28 - 1328640 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll
2012-01-11 18:15 - 2011-10-26 05:28 - 0514560 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2012-01-11 18:15 - 2011-10-14 05:42 - 0716800 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-01-11 18:08 - 2012-01-11 18:08 - 0000000 ____D C:\Users\saliha\AppData\Local\{989BC29A-656C-4761-8420-532B82E3D3CF}
2012-01-09 18:08 - 2012-01-09 18:08 - 0000000 ____D C:\Users\saliha\AppData\Local\{1D531BC1-DC24-4750-92A2-9E0745D4F484}
2012-01-09 17:15 - 2012-01-09 17:15 - 0000000 ____D C:\Users\saliha\AppData\Local\{B8C0C2F3-7F81-4B9C-A4A1-0417128EF064}
2012-01-08 13:25 - 2012-01-08 13:25 - 0000000 ____D C:\Users\saliha\AppData\Local\{9C682E12-26BD-44B5-97ED-37A5D42C8997}
2012-01-08 13:24 - 2012-01-08 13:25 - 0000000 ____D C:\Users\saliha\AppData\Local\{3C4E2D2B-DDB2-4CDF-8891-9B2AFAD762C5}
2012-01-08 12:22 - 2012-01-08 12:22 - 0000000 ____D C:\Users\saliha\AppData\Local\{6B21F5F9-5526-434A-869F-1A446F275A96}
2012-01-07 18:53 - 2012-01-07 18:53 - 0000000 ____D C:\Users\saliha\AppData\Local\{0BF5B351-D057-435A-843B-8D7ED79DDE0D}
2012-01-07 18:52 - 2012-01-07 18:53 - 0000000 ____D C:\Users\saliha\AppData\Local\{750667E9-9FC5-4112-9FC2-166FB146923F}
2011-12-31 21:32 - 2011-12-31 21:32 - 0000000 ____D C:\Users\saliha\AppData\Local\{A60C007F-B9D8-4834-81A7-5F4991AB101B}
2011-12-30 21:33 - 2011-12-30 21:33 - 0000000 ____D C:\Users\saliha\AppData\Local\{A5DF7854-B697-4892-8683-1A75E695E855}
2011-12-30 21:33 - 2011-12-30 21:33 - 0000000 ____D C:\Users\saliha\AppData\Local\{323FF4D1-2CB0-435A-A06E-3EF15C72936F}
2011-12-30 15:07 - 2011-12-30 15:07 - 0002310 ____A C:\Users\saliha\Documents\Mein Film.wlmp
2011-12-30 15:05 - 2011-12-30 15:05 - 0000000 ____D C:\Users\saliha\AppData\Local\{A1AA8B62-847B-49BD-9C1D-368AC7D0125E}
2011-12-30 14:58 - 2011-12-30 14:58 - 0000000 ____D C:\Users\saliha\AppData\Local\{64A7E85E-3C74-4A69-932C-50B2A299E04D}
2011-12-27 19:17 - 2011-12-27 19:24 - 0000000 ____D C:\Users\saliha\Documents\Youcam
2011-12-27 19:17 - 2011-12-27 19:17 - 0000000 ____D C:\Users\saliha\AppData\Roaming\CyberLink
2011-12-27 19:17 - 2011-12-27 19:17 - 0000000 ____D C:\Users\saliha\AppData\Local\CyberLink
2011-12-27 18:06 - 2011-12-27 18:06 - 0000000 ____D C:\Users\saliha\AppData\Local\{BA46FFFB-3D07-47CF-A941-695AF86BDE44}
2011-12-27 18:05 - 2011-12-27 18:06 - 0000000 ____D C:\Users\saliha\AppData\Local\{5FD07E8D-5F6E-4512-896A-9ECDB62263F5}

============ 3 Months Modified Files and Folders ===============

2012-01-24 19:22 - 2012-01-24 18:36 - 0000000 ____D C:\FRST
2012-01-24 19:18 - 2012-01-12 19:49 - 1029112 ____A C:\Windows\ntbtlog.txt
2012-01-24 19:16 - 2011-09-19 02:50 - 797581312 __ASH C:\hiberfil.sys
2012-01-24 19:15 - 2011-01-07 15:40 - 0000000 ____D C:\Users\All Users\BullGuard
2012-01-24 19:15 - 2011-01-07 15:40 - 0000000 ____D C:\ProgramData\BullGuard
2012-01-24 19:14 - 2011-09-19 01:51 - 0001098 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2012-01-24 19:13 - 2012-01-24 19:13 - 0000000 ____D C:\Users\saliha\AppData\Local\{F3A3CC18-9B76-4340-9DFE-0AAF063363B2}
2012-01-24 19:13 - 2011-09-19 01:51 - 0001094 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2012-01-24 19:13 - 2011-01-07 13:24 - 0000004 ____A C:\Users\All Users\RELED.INI
2012-01-24 19:13 - 2011-01-07 13:24 - 0000004 ____A C:\ProgramData\RELED.INI
2012-01-24 19:13 - 2011-01-07 13:22 - 0000035 ____A C:\Users\Public\Documents\AtherosServiceConfig.ini
2012-01-24 19:13 - 2009-07-14 05:53 - 0000006 ___AH C:\Windows\Tasks\SA.DAT
2012-01-24 19:13 - 2009-07-14 05:39 - 0033975 ____A C:\Windows\setupact.log
2012-01-24 19:03 - 2011-09-19 01:51 - 1474846 ____A C:\Windows\WindowsUpdate.log
2012-01-24 19:03 - 2009-07-14 05:34 - 0009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-01-24 19:03 - 2009-07-14 05:34 - 0009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-01-24 18:55 - 2012-01-24 18:55 - 0000000 ____D C:\Users\saliha\AppData\Local\{C024A112-19DF-499E-A1D8-664DF3CFAFB7}
2012-01-24 18:52 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\System32\LogFiles
2012-01-24 18:47 - 2012-01-24 18:47 - 0000000 ____D C:\Users\saliha\AppData\Local\{3CFDBB1F-B6DE-415A-A9DC-7BC69385941D}
2012-01-24 18:37 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\System32\config\TxR
2012-01-24 18:36 - 2011-01-07 08:42 - 0005414 ____A C:\Windows\System32\PerfStringBackup.INI
2012-01-24 18:33 - 2012-01-24 18:33 - 0000000 ____D C:\Users\saliha\AppData\Local\{EB4B2084-1B22-4190-B560-97F857520599}
2012-01-23 00:23 - 2012-01-23 00:23 - 0000000 ____D C:\Users\saliha\AppData\Local\{CB4F5197-4E8A-492A-AF32-817E4E11F8FD}
2012-01-14 22:11 - 2012-01-14 22:11 - 0001075 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\Users\saliha\AppData\Roaming\Malwarebytes
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\Users\All Users\Malwarebytes
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\ProgramData\Malwarebytes
2012-01-14 22:11 - 2012-01-14 22:11 - 0000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2012-01-14 22:05 - 2012-01-14 22:04 - 0000000 ____D C:\Users\saliha\Documents\antibotcd0112_chip[1]
2012-01-14 21:55 - 2011-09-21 16:46 - 0000000 ____D C:\Users\saliha\AppData\Local\Windows Live
2012-01-14 21:54 - 2012-01-14 21:54 - 0000000 ____D C:\Users\saliha\AppData\Local\{F27399F7-2B82-4377-89A9-A9CF6A39C5D3}
2012-01-14 21:54 - 2012-01-14 21:54 - 0000000 ____D C:\Users\saliha\AppData\Local\{A755919E-1172-4683-8572-6CFDAC9588EB}
2012-01-14 21:53 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\System32\wfp
2012-01-14 21:52 - 2012-01-13 21:57 - 0000000 ____D C:\1f46ce212972cb18796329d23666adad
2012-01-14 21:52 - 2011-09-19 01:55 - 0000000 ____D C:\users\saliha
2012-01-14 21:52 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\System32\DriverStore
2012-01-14 21:52 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\registration
2012-01-13 19:10 - 2012-01-13 19:10 - 0002033 ____A C:\Users\saliha\Desktop\Entfernen des Avira DE-Cleaners.lnk
2012-01-13 19:10 - 2012-01-13 19:10 - 0001962 ____A C:\Users\saliha\Desktop\Avira DE-Cleaner.lnk
2012-01-13 18:42 - 2012-01-13 18:42 - 0000000 ____D C:\Users\saliha\AppData\Local\{D507EAA4-93E1-4B99-9B79-6E1821D7C26C}
2012-01-13 18:42 - 2012-01-13 18:42 - 0000000 ____D C:\Users\saliha\AppData\Local\{04E23234-F08B-4205-8705-8C9FA4812F2C}
2012-01-12 20:24 - 2012-01-12 20:24 - 0000000 ____D C:\Users\saliha\AppData\Local\ElevatedDiagnostics
2012-01-12 20:00 - 2012-01-12 20:00 - 0000000 ____D C:\Program Files\PriceGong
2012-01-12 19:57 - 2012-01-12 19:57 - 0459568 ____A (SweetIM Technologies, Ltd.) C:\Users\saliha\Desktop\SweetImSetup.exe
2012-01-12 18:50 - 2012-01-12 18:50 - 0000000 ____D C:\Users\saliha\AppData\Roaming\Avira
2012-01-12 18:07 - 2012-01-12 18:07 - 0000000 ____D C:\Users\saliha\AppData\Local\{73D0459D-B613-4205-9565-F0FD453405F2}
2012-01-12 18:07 - 2012-01-12 18:07 - 0000000 ____D C:\Users\saliha\AppData\Local\{0E35760C-C11F-4C9B-9E5E-4062494B85CA}
2012-01-12 18:04 - 2011-09-20 15:06 - 0007198 ____A C:\Windows\PFRO.log
2012-01-11 18:08 - 2012-01-11 18:08 - 0000000 ____D C:\Users\saliha\AppData\Local\{989BC29A-656C-4761-8420-532B82E3D3CF}
2012-01-11 18:08 - 2011-09-21 16:45 - 0000000 ____D C:\Users\saliha\Tracing
2012-01-09 18:08 - 2012-01-09 18:08 - 0000000 ____D C:\Users\saliha\AppData\Local\{1D531BC1-DC24-4750-92A2-9E0745D4F484}
2012-01-09 17:15 - 2012-01-09 17:15 - 0000000 ____D C:\Users\saliha\AppData\Local\{B8C0C2F3-7F81-4B9C-A4A1-0417128EF064}
2012-01-08 13:25 - 2012-01-08 13:25 - 0000000 ____D C:\Users\saliha\AppData\Local\{9C682E12-26BD-44B5-97ED-37A5D42C8997}
2012-01-08 13:25 - 2012-01-08 13:24 - 0000000 ____D C:\Users\saliha\AppData\Local\{3C4E2D2B-DDB2-4CDF-8891-9B2AFAD762C5}
2012-01-08 12:22 - 2012-01-08 12:22 - 0000000 ____D C:\Users\saliha\AppData\Local\{6B21F5F9-5526-434A-869F-1A446F275A96}
2012-01-07 18:53 - 2012-01-07 18:53 - 0000000 ____D C:\Users\saliha\AppData\Local\{0BF5B351-D057-435A-843B-8D7ED79DDE0D}
2012-01-07 18:53 - 2012-01-07 18:52 - 0000000 ____D C:\Users\saliha\AppData\Local\{750667E9-9FC5-4112-9FC2-166FB146923F}
2011-12-31 22:10 - 2011-09-19 01:57 - 0000000 ____D C:\Users\saliha\Documents\Bluetooth Folder
2011-12-31 21:32 - 2011-12-31 21:32 - 0000000 ____D C:\Users\saliha\AppData\Local\{A60C007F-B9D8-4834-81A7-5F4991AB101B}
2011-12-30 21:33 - 2011-12-30 21:33 - 0000000 ____D C:\Users\saliha\AppData\Local\{A5DF7854-B697-4892-8683-1A75E695E855}
2011-12-30 21:33 - 2011-12-30 21:33 - 0000000 ____D C:\Users\saliha\AppData\Local\{323FF4D1-2CB0-435A-A06E-3EF15C72936F}
2011-12-30 15:07 - 2011-12-30 15:07 - 0002310 ____A C:\Users\saliha\Documents\Mein Film.wlmp
2011-12-30 15:05 - 2011-12-30 15:05 - 0000000 ____D C:\Users\saliha\AppData\Local\{A1AA8B62-847B-49BD-9C1D-368AC7D0125E}
2011-12-30 14:58 - 2011-12-30 14:58 - 0000000 ____D C:\Users\saliha\AppData\Local\{64A7E85E-3C74-4A69-932C-50B2A299E04D}
2011-12-27 19:24 - 2011-12-27 19:17 - 0000000 ____D C:\Users\saliha\Documents\Youcam
2011-12-27 19:19 - 2011-09-21 18:13 - 0000000 ____D C:\Users\saliha\AppData\Local\CrashDumps
2011-12-27 19:18 - 2011-01-07 15:13 - 0000000 ____D C:\Users\All Users\CyberLink
2011-12-27 19:18 - 2011-01-07 15:13 - 0000000 ____D C:\ProgramData\CyberLink
2011-12-27 19:17 - 2011-12-27 19:17 - 0000000 ____D C:\Users\saliha\AppData\Roaming\CyberLink
2011-12-27 19:17 - 2011-12-27 19:17 - 0000000 ____D C:\Users\saliha\AppData\Local\CyberLink
2011-12-27 19:14 - 2011-01-07 15:13 - 0000000 ____D C:\Program Files\CyberLink
2011-12-27 18:06 - 2011-12-27 18:06 - 0000000 ____D C:\Users\saliha\AppData\Local\{BA46FFFB-3D07-47CF-A941-695AF86BDE44}
2011-12-27 18:06 - 2011-12-27 18:05 - 0000000 ____D C:\Users\saliha\AppData\Local\{5FD07E8D-5F6E-4512-896A-9ECDB62263F5}
2011-12-24 18:56 - 2011-12-24 18:56 - 0000000 ____D C:\Users\saliha\AppData\Local\{E981D599-5907-49B5-9CD3-A931DE859BCE}
2011-12-24 18:56 - 2011-12-24 18:56 - 0000000 ____D C:\Users\saliha\AppData\Local\{16DF0B9F-DD52-47F9-BB78-7DB572520E93}
2011-12-24 15:59 - 2011-12-24 15:59 - 0000000 ____D C:\Users\saliha\AppData\Local\{414E87E0-AA1C-4A5B-AA01-041B4E13CAA7}
2011-12-21 13:02 - 2011-12-21 13:02 - 0000000 ____D C:\Users\saliha\AppData\Local\{5ECDA144-C411-44E5-B02C-F39AF1697713}
2011-12-21 13:02 - 2011-12-21 13:02 - 0000000 ____D C:\Users\saliha\AppData\Local\{0DE2E428-0E02-43C9-825B-D61F9718685A}
2011-12-17 15:37 - 2011-12-17 15:37 - 0000000 ____D C:\Users\saliha\AppData\Local\{43EAAF49-BB0B-4AFE-83B0-F5FCB45BA6AA}
2011-12-17 15:37 - 2011-12-17 15:36 - 0000000 ____D C:\Users\saliha\AppData\Local\{DCC69DB9-8779-4C8D-B52D-2AD2EC5FA718}
2011-12-17 15:35 - 2009-07-14 05:53 - 0032630 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2011-12-16 18:58 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\rescache
2011-12-16 17:45 - 2009-07-14 05:33 - 0269184 ____A C:\Windows\System32\FNTCACHE.DAT
2011-12-16 13:43 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\System32\de-DE
2011-12-16 13:17 - 2011-12-16 13:16 - 0000000 ____D C:\Users\saliha\AppData\Local\{941704E3-9297-4AE4-8F0A-8A51B59FE13D}
2011-12-16 13:16 - 2011-12-16 13:16 - 0000000 ____D C:\Users\saliha\AppData\Local\{F93A3E15-B10E-44B3-8954-1A4C6EFB9D08}
2011-12-14 17:01 - 2011-12-14 17:01 - 0000000 ____D C:\Users\saliha\AppData\Local\{99558AFE-B930-4BB8-AB44-1AAC24F38DB2}
2011-12-14 17:01 - 2011-12-14 17:01 - 0000000 ____D C:\Users\saliha\AppData\Local\{650438B3-EB3C-4146-BA76-C22AC8F464B6}
2011-12-13 12:57 - 2011-12-13 12:56 - 0000000 ____D C:\Users\saliha\AppData\Local\{D6FC4799-4F83-4E7E-8749-E5FDFA4B86A3}
2011-12-13 12:56 - 2011-12-13 12:56 - 0000000 ____D C:\Users\saliha\AppData\Local\{7C18EFEF-7206-4EDA-8A92-3161E9384078}
2011-12-12 18:51 - 2011-12-12 18:51 - 0000000 ____D C:\Users\saliha\AppData\Local\{86B0168E-73EC-40A3-BD1A-717B4257EBB9}
2011-12-12 18:51 - 2011-12-12 18:51 - 0000000 ____D C:\Users\saliha\AppData\Local\{529A5C7A-3E17-44B6-9C4F-60DD430B566A}
2011-12-11 16:38 - 2011-12-11 16:38 - 0000000 ____D C:\Users\saliha\AppData\Local\{20083A5D-C189-486E-8BB4-2D15C18E8BB7}
2011-12-10 15:24 - 2012-01-14 22:11 - 0020464 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2011-12-09 13:32 - 2011-12-09 13:32 - 0000000 ____D C:\Users\saliha\AppData\Local\{11BC62B0-DD14-4998-9D3B-88EFA2C3B74A}
2011-12-09 13:32 - 2011-12-09 13:31 - 0000000 ____D C:\Users\saliha\AppData\Local\{D079650F-F05E-427E-A7C1-3CB94EA6C8A9}
2011-12-08 17:29 - 2011-12-08 17:28 - 0000000 ____D C:\Users\saliha\AppData\Local\{CDDEB7C2-A9EB-4A51-86FF-6C9F5417A6C3}
2011-12-08 17:28 - 2011-12-08 17:28 - 0000000 ____D C:\Users\saliha\AppData\Local\{077A2E39-A333-413E-AAD6-594B9C4BB3E1}
2011-12-05 13:16 - 2011-12-05 13:16 - 0000000 ____D C:\Users\saliha\AppData\Local\{0FE99463-2C7F-4EA7-8AE6-877B669E574B}
2011-12-05 13:16 - 2011-12-05 13:15 - 0000000 ____D C:\Users\saliha\AppData\Local\{7859EC40-C125-4A0B-8F1F-625FBEE4084F}
2011-12-02 16:54 - 2011-12-02 16:54 - 0000000 ____D C:\Users\saliha\AppData\Local\{07043F2D-F2A5-42F4-9F25-3E703B2C8287}
2011-12-02 16:53 - 2011-12-02 16:53 - 0000000 ____D C:\Users\saliha\AppData\Local\{6404611D-FB3D-4395-A786-EA12D9CD0E28}
2011-11-29 13:48 - 2011-11-29 13:48 - 0000000 ____D C:\Users\saliha\AppData\Local\{68566F0E-E75E-4EB1-8AE2-8686BC49C0DF}
2011-11-27 22:27 - 2011-11-27 22:27 - 0000000 ____D C:\Users\saliha\AppData\Local\{F0D11A7B-108D-4545-B76F-F71628C4C577}
2011-11-27 22:27 - 2011-11-27 22:27 - 0000000 ____D C:\Users\saliha\AppData\Local\{B49057A7-F6B2-479A-9C1E-86399C4F7533}
2011-11-26 17:10 - 2011-11-26 17:10 - 0000000 ____D C:\Users\saliha\AppData\Local\{D7EE7E7F-4AD6-4C03-9B2B-81906969B5FD}
2011-11-26 17:10 - 2011-11-26 17:10 - 0000000 ____D C:\Users\saliha\AppData\Local\{95CCD99C-CFF2-4262-8782-86978FC45575}
2011-11-25 23:02 - 2011-10-24 17:37 - 0000000 ____D C:\Users\saliha\AppData\Local\Microsoft Games
2011-11-25 22:27 - 2011-11-25 22:27 - 0000000 ____D C:\Users\saliha\AppData\Local\{730F32F1-843D-40B0-AA6F-BEA4D2E3F2EC}
2011-11-24 12:54 - 2011-11-24 12:53 - 0000000 ____D C:\Users\saliha\AppData\Local\{F0D8F908-101B-417B-9FAE-57C3CBAC5C9F}
2011-11-24 12:53 - 2011-11-24 12:53 - 0000000 ____D C:\Users\saliha\AppData\Local\{582F1CA6-0F9D-402E-9D00-5F0D83337449}
2011-11-24 05:23 - 2011-12-14 17:20 - 2340352 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2011-11-22 12:41 - 2011-11-22 12:40 - 0000000 ____D C:\Users\saliha\AppData\Local\{A42F7E31-59D7-490D-AE60-E26880F1CB07}
2011-11-22 12:40 - 2011-11-22 12:40 - 0000000 ____D C:\Users\saliha\AppData\Local\{EEEBF94D-9EDB-499A-9556-5231C49C3CA1}
2011-11-20 19:25 - 2011-11-20 19:25 - 0000000 ____D C:\Users\saliha\AppData\Local\{50394585-E040-4C1F-B60D-7116DC758526}
2011-11-20 19:25 - 2011-11-20 19:24 - 0000000 ____D C:\Users\saliha\AppData\Local\{4889ABB5-14C0-4012-A22F-11F3E68D3673}
2011-11-19 21:37 - 2011-11-19 21:37 - 0000000 ____D C:\Users\saliha\AppData\Local\{859CC8F8-29D6-4F78-88AC-7D2403521354}
2011-11-19 21:36 - 2011-11-19 21:36 - 0000000 ____D C:\Users\saliha\AppData\Local\{00BD1039-20DA-4422-9C08-F94F53829255}
2011-11-19 21:32 - 2011-11-19 21:32 - 0000000 ____D C:\Users\saliha\AppData\Local\{2CCD19D3-5264-4429-8AAC-32653A1517ED}
2011-11-19 21:28 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\System32\NDF
2011-11-19 21:25 - 2011-11-19 21:25 - 0000000 ____D C:\Users\saliha\AppData\Local\{1A9B26A7-E876-4438-AA3B-FF3BD3A64067}
2011-11-19 15:06 - 2012-01-11 18:15 - 0067072 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll
2011-11-18 21:28 - 2009-07-14 03:37 - 0000000 ____D C:\Windows\Microsoft.NET
2011-11-18 20:45 - 2011-11-18 20:45 - 0000000 ____D C:\Users\saliha\AppData\Local\{81F03172-D4D5-4537-8579-C09D626A23DE}
2011-11-18 20:45 - 2011-11-18 20:45 - 0000000 ____D C:\Users\saliha\AppData\Local\{025BE8B8-7F1B-4434-AC31-86089B6FFB4D}
2011-11-17 19:58 - 2011-11-17 19:58 - 0000000 ____D C:\Users\saliha\AppData\Local\{9EED3E49-0B89-41AD-B968-AC8D8B94E856}
2011-11-17 19:58 - 2011-11-17 19:57 - 0000000 ____D C:\Users\saliha\AppData\Local\{B8A0ADDC-489F-4D12-9EB7-0BC3102FD692}
2011-11-17 06:41 - 2012-01-11 18:15 - 1288984 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2011-11-16 20:30 - 2011-11-16 20:29 - 0000000 ____D C:\Users\saliha\AppData\Local\{4EDCE6B4-59B6-4345-A20F-184CC60865B1}
2011-11-16 20:29 - 2011-11-16 20:29 - 0000000 ____D C:\Users\saliha\AppData\Local\{69A8FEED-78F9-4E95-A357-8B99BCCEA2F5}
2011-11-15 20:22 - 2011-11-15 20:22 - 0000000 ____D C:\Users\saliha\AppData\Local\{C2779538-C215-4915-9A6A-B551D5999932}
2011-11-15 20:22 - 2011-11-15 20:22 - 0000000 ____D C:\Users\saliha\AppData\Local\{6B5299C8-291D-4346-BB3A-56A9B3FCFB1F}
2011-11-14 20:40 - 2011-11-14 20:40 - 0000000 ____D C:\Users\saliha\AppData\Local\{6EDFB4B1-70FD-4E15-B230-D37AD3F01693}
2011-11-14 20:39 - 2011-11-14 20:39 - 0000000 ____D C:\Users\saliha\AppData\Local\{ED1EE2CC-E767-4769-9B22-EDDE9C139215}
2011-11-14 13:20 - 2011-11-14 13:20 - 0000000 ____D C:\Users\saliha\AppData\Local\{9E4B7C8C-9275-4AA4-B469-333DE1946506}
2011-11-14 13:20 - 2011-11-14 13:20 - 0000000 ____D C:\Users\saliha\AppData\Local\{7A2F80A2-C1CA-40DF-91B8-E40C1D18DA17}
2011-11-13 20:15 - 2011-11-13 20:15 - 0000000 ____D C:\Users\saliha\AppData\Local\{51BDD3BC-26EE-49BA-BAEF-06BBDA43972D}
2011-11-13 12:21 - 2011-11-13 12:21 - 0000000 ____D C:\Users\saliha\AppData\Local\{9DC9EFB9-7AA6-4D8F-880A-0F2CBBF724E0}
2011-11-12 15:56 - 2011-11-12 15:55 - 0000000 ____D C:\Users\saliha\AppData\Local\{2B2FEED6-7106-41E6-A483-5FF2CC4069B4}
2011-11-12 15:55 - 2011-11-12 15:55 - 0000000 ____D C:\Users\saliha\AppData\Local\{B772ECDE-91B3-4A3B-98EC-5E3FF41E66DD}
2011-11-11 14:15 - 2009-07-14 03:37 - 0000000 ____D C:\Program Files\Common Files\System
2011-11-11 13:16 - 2011-11-11 13:16 - 0000000 ____D C:\Users\saliha\AppData\Local\{6DD14BC8-0E14-4A21-87A4-6A98692165F1}
2011-11-11 13:16 - 2011-11-11 13:16 - 0000000 ____D C:\Users\saliha\AppData\Local\{5D17E382-AE6F-4DDC-A709-7971261DA918}
2011-11-11 06:50 - 2011-12-14 17:20 - 10990080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2011-11-11 06:50 - 2011-12-14 17:20 - 0176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2011-11-10 11:41 - 2011-11-10 11:41 - 0000000 ____D C:\Users\saliha\AppData\Local\{8D68677F-BB5D-4E68-9820-56B57C9D7DE9}
2011-11-10 11:41 - 2011-11-10 11:41 - 0000000 ____D C:\Users\saliha\AppData\Local\{5B48BC9B-EBAF-4303-8046-BB77FBE65C86}
2011-11-08 12:58 - 2011-11-08 12:58 - 0000000 ____D C:\Users\saliha\AppData\Local\{E00A9A71-54FD-482C-AB67-4211E6A10A97}
2011-11-08 12:58 - 2011-11-08 12:57 - 0000000 ____D C:\Users\saliha\AppData\Local\{66EB0B9B-0A2F-4A70-AA8E-33AB20654D8D}
2011-11-07 13:14 - 2011-11-07 13:14 - 0000000 ____D C:\Users\saliha\AppData\Local\{0CC27395-D59B-4AB8-BBBA-D01420B76B1C}
2011-11-07 13:13 - 2011-11-07 13:13 - 0000000 ____D C:\Users\saliha\AppData\Local\{655B213F-FF31-40E6-9266-90D8B7BE65E0}
2011-11-05 20:14 - 2011-11-05 20:14 - 0000000 ____D C:\Users\saliha\AppData\Local\{EBE36C18-5C03-432B-8E3A-64F7C4528281}
2011-11-05 05:35 - 2011-12-14 17:20 - 1230336 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2011-11-05 05:35 - 2011-12-14 17:20 - 0981504 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2011-11-05 05:35 - 2011-12-14 17:20 - 0132096 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 5997568 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 2072576 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0606208 ____A (Microsoft Corporation) C:\Windows\System32\mstime.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0599552 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0185856 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0067072 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0064512 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0048128 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2011-11-05 05:34 - 2011-12-14 17:20 - 0044544 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2011-11-05 05:33 - 2011-12-14 17:20 - 0381440 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2011-11-05 05:32 - 2011-12-14 17:20 - 0012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2011-11-05 05:30 - 2011-12-14 17:19 - 0002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2011-11-05 04:28 - 2011-12-14 17:20 - 0386048 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2011-11-05 03:55 - 2011-12-14 17:20 - 1638912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2011-11-04 13:49 - 2011-11-04 13:49 - 0000000 ____D C:\Users\saliha\AppData\Local\{EF5F6530-2D67-4D80-8D55-C8CBFA50B0FC}
2011-11-04 13:49 - 2011-11-04 13:48 - 0000000 ____D C:\Users\saliha\AppData\Local\{A3749E68-F361-4E6C-ABA2-5032CA1D5F88}
2011-11-03 20:27 - 2011-11-03 20:26 - 0000000 ____D C:\Users\saliha\AppData\Local\{C5F098A4-A2E3-4C35-913B-615B6B029D02}
2011-11-03 20:26 - 2011-11-03 20:26 - 0000000 ____D C:\Users\saliha\AppData\Local\{81921924-9BEF-45E0-A3C9-C00A4F930162}
2011-11-02 13:38 - 2011-11-02 13:38 - 0000000 ____D C:\Users\saliha\AppData\Local\{C2F741C5-59E7-4932-9452-F67C64D195AE}
2011-11-02 13:38 - 2011-11-02 13:38 - 0000000 ____D C:\Users\saliha\AppData\Local\{50F384FB-ED69-4EAD-AB28-C1FF7C3D7685}
2011-11-02 13:29 - 2011-11-02 13:29 - 0000000 ____D C:\Users\saliha\AppData\Local\{619692C6-BD3D-4750-B766-A55B697049F0}
2011-11-02 13:29 - 2011-11-02 13:28 - 0000000 ____D C:\Users\saliha\AppData\Local\{69CCE766-CB3B-4A6C-A7B8-5FF632F71241}
2011-11-01 08:04 - 2011-11-01 08:04 - 0000000 ____D C:\Users\saliha\AppData\Local\{E7DFBA66-BAB5-403D-9A79-1BC835E75673}
2011-10-31 16:12 - 2011-10-31 16:12 - 0000000 ____D C:\Users\saliha\AppData\Local\{15E32537-5AE8-44EA-B46B-5ABCE61C04A7}
2011-10-31 16:12 - 2011-10-31 16:11 - 0000000 ____D C:\Users\saliha\AppData\Local\{E7D5639C-2CAC-4D73-A290-3E6BD9837F4A}
2011-10-28 16:07 - 2011-10-28 16:06 - 0000000 ____D C:\Users\saliha\AppData\Local\{D8ED9AF2-BE7B-409B-B852-1D044DE2191C}
2011-10-28 16:06 - 2011-10-28 16:06 - 0000000 ____D C:\Users\saliha\AppData\Local\{5D7C3C49-B685-4E14-B5B3-CFAA5CA98D28}
2011-10-28 14:49 - 2011-10-28 14:49 - 0000000 ____D C:\Users\saliha\AppData\Local\{0CC605D8-E604-420B-8780-3D607F02770D}
2011-10-27 14:28 - 2011-10-27 14:27 - 0000000 ____D C:\Users\saliha\AppData\Local\{001CF2BA-E479-4B68-9816-DE93DD3E032A}
2011-10-27 14:27 - 2011-10-27 14:27 - 0000000 ____D C:\Users\saliha\AppData\Local\{E1F92E4A-E856-4786-8BE7-10F8581DFB4C}

========================= Known DLLs (Whitelisted) ============


========================= Bamital & volsnap Check ============

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

========================= Memory info ======================

Percentage of memory in use: 21%
Total physical RAM: 1014.18 MB
Available physical RAM: 793.31 MB
Total Pagefile: 2038.18 MB
Available Pagefile: 1826.38 MB
Total Virtual: 2047.88 MB
Available Virtual: 1949.53 MB

======================= Partitions =========================

1 Drive c: (BOOT) (Fixed) (Total:191.78 GB) (Free:159.96 GB) NTFS
2 Drive d: (Recover) (Fixed) (Total:37.99 GB) (Free:26.11 GB) NTFS
3 Drive e: () (Removable) (Total:0.94 GB) (Free:0.94 GB) FAT

Datentr„ger ### Status Gr”áe Frei Dyn GPT
--------------- ------------- ------- ------- --- ---
Datentr„ger 0 Online 232 GB 6144 KB
Datentr„ger 1 Online 961 MB 0 B

Datentr„gerpartitionierung wird beendet...


==========================================================

Last Boot: 2011-12-27 18:33

======================= End Of Log ==========================