| |
| |||||||
Log-Analyse und Auswertung: tr/atraps.gen2Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
27.06.2012, 22:03
| #1 |
| |  tr/atraps.gen2 Guten Abend, ich hoffe, ich bin in diesem Unterforum richtig! Heute bekam ich von meinem AntiVir Programm die Meldung, es sein eine Malware gefunden worden, und zwar ein Trojaner tr/atraps.gen2 Sobald ich auf entfernen klickte, kam diese Meldung nach kurzer Zeit wieder, und auch den beschriebenen Pfad unter C:\Windows\Installer\...\80000032.@ konnte ich auf meinem PC nicht finden. Im Netz fand ich folgende zwei Lösungsmöglichkeiten: 1) Komplett die ganze Festplatte neu aufsetzen oder 2) mit dem Programm Malwarebytes -Anti-malware die Daten scannen und entfernen. Doch dieses Programm konnte den Trojaner leider auch nicht erfolgreich bekämpfen. Nun hab ich die benötigten Scans gemacht, damit mir hier hoffentlich jemand helfen kann. Ich hoffe, ich hab das alles richtig gemacht  Achso: Es gibt hier ja schon ein (oder mehr?) Thema zu dem Virus, jedoch steht ja in der Einleitung, dass man nicht die Anweisung anderer benutzen kann, wiel das nicht aunbedingt auf jedes Problem zutrifft, ich hoffe, ich hab das richtig verstanden OTL-txt:OTL Logfile: Code:
ATTFilter OTL logfile created on: 27.06.2012 21:11:21 - Run 1 OTL by OldTimer - Version 3.2.53.0 Folder = C:\Users\Amelie\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,75 Gb Total Physical Memory | 0,82 Gb Available Physical Memory | 47,05% Memory free 3,50 Gb Paging File | 2,16 Gb Available in Paging File | 61,67% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 68,68 Gb Total Space | 3,60 Gb Free Space | 5,25% Space Free | Partition Type: NTFS Drive D: | 74,55 Gb Total Space | 25,34 Gb Free Space | 34,00% Space Free | Partition Type: NTFS Drive E: | 84,71 Gb Total Space | 20,61 Gb Free Space | 24,33% Space Free | Partition Type: NTFS Unable to calculate disk information. Drive H: | 7,39 Gb Total Space | 2,92 Gb Free Space | 39,46% Space Free | Partition Type: FAT32 Computer Name: AMME | User Name: Amelie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.06.27 21:05:46 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Amelie\Desktop\OTL.exe PRC - [2012.06.24 19:05:21 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe PRC - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012.04.04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2011.06.29 08:45:24 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Programme\Common Files\MAGIX Services\Database\bin\FABS.exe PRC - [2011.04.30 13:50:52 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2011.03.28 21:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE PRC - [2011.03.28 21:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010.12.13 09:39:19 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2010.11.20 14:17:41 | 001,174,016 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe PRC - [2010.10.29 14:49:28 | 000,505,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Common Files\Java\Java Update\jucheck.exe PRC - [2010.10.21 14:53:56 | 001,211,216 | ---- | M] (Logitech, Inc.) -- C:\Programme\Logitech\LWS\LU\LogitechUpdate.exe PRC - [2010.10.21 14:53:48 | 000,341,328 | ---- | M] (Logitech, Inc.) -- C:\Programme\Logitech\LWS\LU\LULnchr.exe PRC - [2010.09.06 19:56:38 | 000,247,096 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe PRC - [2010.07.21 18:07:04 | 001,778,064 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliType Pro\itype.exe PRC - [2010.07.04 19:13:56 | 000,095,576 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe PRC - [2010.07.04 19:07:40 | 000,238,952 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe PRC - [2010.05.07 19:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe PRC - [2010.05.07 19:43:52 | 000,651,096 | ---- | M] () -- C:\Programme\Common Files\logishrd\LQCVFX\COCIManager.exe PRC - [2010.05.07 19:35:22 | 000,165,208 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\LWS\Webcam Software\LWS.exe PRC - [2010.05.07 19:34:58 | 000,168,792 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\CameraHelperShell.exe PRC - [2010.02.02 18:31:56 | 000,279,296 | ---- | M] (Motorola) -- C:\Programme\Motorola\MotoConnectService\MotoConnect.exe PRC - [2010.01.27 12:37:22 | 000,091,392 | ---- | M] () -- C:\Programme\Motorola\MotoConnectService\MotoConnectService.exe PRC - [2010.01.14 22:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe PRC - [2009.10.12 11:46:34 | 000,087,336 | ---- | M] (Nero AG) -- C:\Programme\Motorola Media Link\NServiceEntry.exe PRC - [2009.07.14 03:14:42 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\ink\TabTip.exe PRC - [2009.07.14 03:14:21 | 000,294,400 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\ink\InputPersonalization.exe PRC - [2009.03.04 14:04:22 | 000,069,632 | ---- | M] (Tablet Driver) -- C:\Windows\System32\drivers\WTSrv.exe PRC - [2009.02.26 19:36:46 | 000,030,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2009.02.26 16:24:50 | 000,097,680 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE PRC - [2007.04.11 18:27:00 | 000,040,960 | ---- | M] (Tablet Driver) -- C:\Windows\System32\WTClient.exe ========== Modules (No Company Name) ========== MOD - [2012.06.24 19:05:21 | 002,042,848 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll MOD - [2011.09.15 15:27:41 | 006,277,280 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll MOD - [2010.11.20 14:19:56 | 000,232,448 | ---- | M] () -- \\?\globalroot\systemroot\system32\mswsock.DLL MOD - [2010.11.20 14:19:56 | 000,232,448 | ---- | M] () -- \\.\globalroot\systemroot\system32\mswsock.dll MOD - [2010.11.17 14:16:56 | 000,067,872 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2010.11.12 10:23:44 | 000,330,584 | ---- | M] () -- C:\Programme\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll MOD - [2010.05.07 19:43:52 | 000,651,096 | ---- | M] () -- C:\Programme\Common Files\logishrd\LQCVFX\COCIManager.exe MOD - [2010.05.07 19:37:40 | 000,126,808 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll MOD - [2010.05.07 19:37:40 | 000,027,480 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll MOD - [2010.05.07 19:36:54 | 000,340,824 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTXml4.dll MOD - [2010.05.07 19:36:20 | 000,921,944 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QtNetwork4.dll MOD - [2010.05.07 19:35:56 | 007,954,776 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTGui4.dll MOD - [2010.05.07 19:35:44 | 002,143,576 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTCore4.dll MOD - [2010.05.07 19:34:58 | 000,168,792 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\CameraHelperShell.exe MOD - [2009.03.18 19:15:32 | 000,184,320 | ---- | M] () -- C:\Windows\System32\WinTab32.dll ========== Win32 Services (SafeList) ========== SRV - [2012.06.24 19:05:21 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011.10.29 12:47:51 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2011.06.29 08:45:24 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs) SRV - [2011.04.30 13:50:52 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance) SRV - [2011.03.28 21:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc) SRV - [2010.09.06 19:56:38 | 000,247,096 | ---- | M] () [Auto | Running] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service) SRV - [2010.07.04 19:07:40 | 000,238,952 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2010.05.07 19:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv) SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2010.01.27 12:37:22 | 000,091,392 | ---- | M] () [Auto | Running] -- C:\Programme\Motorola\MotoConnectService\MotoConnectService.exe -- (MotoConnect Service) SRV - [2009.10.12 11:46:34 | 000,087,336 | ---- | M] (Nero AG) [Auto | Running] -- C:\Programme\Motorola Media Link\NServiceEntry.exe -- (DeviceMonitorService) SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009.03.04 14:04:22 | 000,069,632 | ---- | M] (Tablet Driver) [Auto | Running] -- C:\Windows\System32\drivers\WTSrv.exe -- (WinTabService) SRV - [2009.02.26 19:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2006.10.26 15:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\Tablet2k.sys -- (Tablet2k) DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc) DRV - [2012.06.27 21:08:22 | 000,054,016 | ---- | M] () [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\eqcemdu.sys -- (bjypu) DRV - [2012.04.04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011.06.29 08:45:26 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011.06.29 08:45:26 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010.11.20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2010.11.10 03:49:50 | 004,323,040 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC) Logitech Webcam C160(UVC) DRV - [2010.11.10 03:48:12 | 000,283,744 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS) DRV - [2010.06.17 15:27:02 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2010.06.14 09:32:54 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2010.05.07 19:43:30 | 000,025,824 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVPr2Mon.sys -- (LVPr2Mon) DRV - [2010.04.27 04:25:16 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2010.04.27 04:25:16 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2010.04.27 04:25:16 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2010.04.08 07:34:18 | 000,051,200 | ---- | M] (Generic USB smartcard reader) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MHIKEY10.sys -- (MHIKEY10) DRV - [2010.01.25 20:56:44 | 000,009,472 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motusbdevice.sys -- (motusbdevice) DRV - [2009.12.22 11:00:26 | 000,023,552 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Motousbnet.sys -- (Motousbnet) DRV - [2009.10.27 13:02:14 | 000,023,936 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem) DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD) DRV - [2009.06.19 17:59:34 | 000,019,712 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motccgp.sys -- (motccgp) DRV - [2009.06.10 23:19:48 | 009,853,248 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009.01.29 18:18:00 | 000,008,320 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motccgpfl.sys -- (motccgpfl) DRV - [2009.01.29 18:11:20 | 000,006,016 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motfilt.sys -- (BTCFilterService) DRV - [2008.09.08 16:10:22 | 000,014,848 | ---- | M] (Tablet Driver) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UCTblHid.sys -- (UCTblHid) DRV - [2007.11.02 16:51:30 | 000,006,400 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motswch.sys -- (MotoSwitchService) DRV - [2007.07.27 12:46:06 | 000,251,680 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acehlp10.sys -- (acehlp10) DRV - [2007.07.27 10:13:08 | 000,330,144 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\ACEDRV10.sys -- (acedrv10) DRV - [2007.06.07 19:16:28 | 000,018,944 | ---- | M] (PenTablet Driver) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PTSimBus.sys -- (PTSimBus) DRV - [2007.04.23 17:28:56 | 000,018,432 | ---- | M] (Tablet Driver) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TClass2k.sys -- (TClass2k) DRV - [2007.04.23 17:28:56 | 000,010,752 | ---- | M] (PenTablet Driver) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PTSimHid.sys -- (PTSimHid) DRV - [2004.08.13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Programme\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {5786d022-540e-4699-b350-b4be0ae94b79} - C:\Programme\Ashampoo_DE\prxtbAsha.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481020 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=110819&tt=060612_6_&babsrc=HP_ss&mntrId=b49048e600000000000020cf30451eb3 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BC 53 5D CD FB A5 CB 01 [binary data] IE - HKCU\..\URLSearchHook: - No CLSID value found IE - HKCU\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Programme\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {5786d022-540e-4699-b350-b4be0ae94b79} - C:\Programme\Ashampoo_DE\prxtbAsha.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110819&tt=060612_6_&babsrc=SP_ss&mntrId=b49048e600000000000020cf30451eb3 IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481020 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultthis.engineName: "Ashampoo DE Customized Web Search" FF - prefs.js..browser.search.defaulturl: "hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "anderes-wort.de" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.de" FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: exif_viewer@mozilla.doslash.org:1.70 FF - prefs.js..extensions.enabledItems: youtubeunblocker@unblocker.yt:0.2.0 FF - prefs.js..keyword.URL: "hxxp://search.babylon.com/?affID=110819&tt=060612_6_&babsrc=KW_ss&mntrId=b49048e600000000000020cf30451eb3&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Amelie\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Amelie\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.06.24 19:05:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.06.20 22:03:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011.12.16 20:02:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.06.24 19:05:22 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.06.20 22:03:05 | 000,000,000 | ---D | M] [2010.12.27 21:37:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Amelie\AppData\Roaming\mozilla\Extensions [2012.06.27 19:08:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Amelie\AppData\Roaming\mozilla\Firefox\Profiles\3o7u81fy.default\extensions [2012.06.21 21:22:50 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Amelie\AppData\Roaming\mozilla\Firefox\Profiles\3o7u81fy.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2011.04.21 15:01:13 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Amelie\AppData\Roaming\mozilla\Firefox\Profiles\3o7u81fy.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011.01.25 14:35:53 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Amelie\AppData\Roaming\mozilla\Firefox\Profiles\3o7u81fy.default\extensions\engine@conduit.com [2012.04.30 11:22:56 | 000,000,000 | ---D | M] ("YouTube Unblocker") -- C:\Users\Amelie\AppData\Roaming\mozilla\Firefox\Profiles\3o7u81fy.default\extensions\youtubeunblocker@unblocker.yt [2011.06.12 13:15:10 | 000,002,341 | ---- | M] () -- C:\Users\Amelie\AppData\Roaming\Mozilla\Firefox\Profiles\3o7u81fy.default\searchplugins\anderes-wortde.xml [2012.03.07 19:53:24 | 000,001,832 | ---- | M] () -- C:\Users\Amelie\AppData\Roaming\Mozilla\Firefox\Profiles\3o7u81fy.default\searchplugins\bing.xml [2011.10.25 11:18:06 | 000,000,925 | ---- | M] () -- C:\Users\Amelie\AppData\Roaming\Mozilla\Firefox\Profiles\3o7u81fy.default\searchplugins\conduit.xml [2012.06.24 23:32:21 | 000,001,056 | ---- | M] () -- C:\Users\Amelie\AppData\Roaming\Mozilla\Firefox\Profiles\3o7u81fy.default\searchplugins\icqplugin.xml [2012.06.20 22:03:06 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2010.12.27 23:38:36 | 000,000,000 | ---D | M] (Skype extension) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2012.06.20 22:24:37 | 000,208,985 | ---- | M] () (No name found) -- C:\USERS\AMELIE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\3O7U81FY.DEFAULT\EXTENSIONS\EXIF_VIEWER@MOZILLA.DOSLASH.ORG.XPI [2012.06.24 19:05:22 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011.05.31 20:05:05 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012.06.24 19:05:19 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.06.27 18:40:57 | 000,002,352 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012.06.24 19:05:19 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.06.24 19:05:19 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2012.06.24 19:05:19 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2012.06.24 19:05:19 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2012.06.24 19:05:19 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Softonic-Eng7 Toolbar) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Programme\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) O2 - BHO: (Ashampoo DE Toolbar) - {5786d022-540e-4699-b350-b4be0ae94b79} - C:\Programme\Ashampoo_DE\prxtbAsha.dll (Conduit Ltd.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (QUICKfind BHO Object) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Programme\IDM\QUICKfind\PlugIns\IEHelp.dll (IDM) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Softonic-Eng7 Toolbar) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Programme\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ashampoo DE Toolbar) - {5786d022-540e-4699-b350-b4be0ae94b79} - C:\Programme\Ashampoo_DE\prxtbAsha.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (Softonic-Eng7 Toolbar) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - C:\Programme\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [EasyDownloads] "C:\Program Files\Easy Downloads\easydownloads.exe" -tray File not found O4 - HKLM..\Run: [HFALoader] C:\Program Files\Hamster Soft\Hamster Free Zip Archiver\HamsterArc.exe (Hamster Soft) O4 - HKLM..\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NPSStartup] File not found O4 - HKLM..\Run: [SwitchBoard] C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [TrayServer] C:\Programme\MAGIX\Video_deluxe_MX_Download-Version\Trayserver_DE.exe (MAGIX AG) O4 - HKLM..\Run: [WTClient] C:\Windows\System32\WTClient.exe (Tablet Driver) O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [AshSnap] C:\Programme\Ashampoo\Ashampoo Snap 4\ashsnap.exe (ashampoo GmbH & Co. KG) O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKCU..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray File not found O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll (Malwarebytes Corporation) O4 - Startup: C:\Users\Amelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Amelie\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{63AE0063-0605-43DB-8172-6A8619AC0456}: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{3a1c0864-58b7-11e1-9911-20cf30451eb3}\Shell - "" = AutoRun O33 - MountPoints2\{3a1c0864-58b7-11e1-9911-20cf30451eb3}\Shell\AutoRun\command - "" = H:\setup.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.06.27 21:05:45 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Users\Amelie\Desktop\OTL.exe [2012.06.27 19:14:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt [2012.06.27 18:50:12 | 000,000,000 | ---D | C] -- C:\Users\Amelie\AppData\Roaming\Malwarebytes [2012.06.27 18:49:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012.06.27 18:49:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012.06.27 18:49:56 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012.06.27 18:41:05 | 000,000,000 | ---D | C] -- C:\Program Files\BabylonToolbar [2012.06.27 17:30:29 | 000,000,000 | ---D | C] -- C:\Users\Amelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameWiz32 [2012.06.27 17:30:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameWiz32 [2012.06.27 17:22:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder [2012.06.27 17:22:38 | 000,000,000 | ---D | C] -- C:\Users\Amelie\AppData\Roaming\Media Finder [2012.06.27 16:57:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fish Tycoon [2012.06.27 16:44:37 | 000,000,000 | ---D | C] -- C:\BigFishGamesCache [2012.06.23 14:49:01 | 000,000,000 | ---D | C] -- C:\Users\Amelie\AppData\Roaming\Titanium [2012.06.20 22:03:08 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service [2012.06.20 22:03:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2012.06.18 22:43:23 | 000,000,000 | ---D | C] -- C:\Users\Amelie\Documents\MAGIX Downloads [2012.06.18 22:43:23 | 000,000,000 | ---D | C] -- C:\Users\Amelie\Documents\MAGIX [2012.06.18 22:14:56 | 000,000,000 | ---D | C] -- C:\Users\Amelie\AppData\Roaming\MAGIX [2012.06.18 22:12:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX [2012.06.18 22:12:49 | 000,000,000 | ---D | C] -- C:\Program Files\MAGIX [2012.06.18 22:12:41 | 000,000,000 | ---D | C] -- C:\ProgramData\MAGIX [2012.06.18 22:12:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MAGIX Services [2012.03.03 17:12:48 | 001,291,624 | ---- | C] (Microsoft Corporation) -- C:\Users\Amelie\wlsetup-web__1_.exe [2011.04.21 14:59:33 | 022,229,776 | ---- | C] (DVDVideoSoft Limited. ) -- C:\Users\Amelie\FreeYouTubeToMP3Converter3935.exe ========== Files - Modified Within 30 Days ========== [2012.06.27 21:09:43 | 000,000,000 | ---- | M] () -- C:\Users\Amelie\defogger_reenable [2012.06.27 21:08:22 | 000,054,016 | ---- | M] () -- C:\Windows\System32\drivers\eqcemdu.sys [2012.06.27 21:05:46 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Amelie\Desktop\OTL.exe [2012.06.27 21:05:38 | 000,050,477 | ---- | M] () -- C:\Users\Amelie\Desktop\Defogger.exe [2012.06.27 20:52:13 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.06.27 20:39:02 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3783372001-826603275-2424898749-1000UA.job [2012.06.27 19:11:49 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.06.27 19:11:49 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.06.27 19:07:01 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.06.27 19:06:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.06.27 19:06:06 | 000,000,000 | ---- | M] () -- C:\Windows\System32\drivers\lvuvc.hs [2012.06.27 19:06:00 | 1408,626,688 | -HS- | M] () -- C:\hiberfil.sys [2012.06.27 18:49:59 | 000,000,796 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.06.27 18:41:06 | 000,000,250 | ---- | M] () -- C:\user.js [2012.06.27 17:30:29 | 000,000,553 | ---- | M] () -- C:\Users\Amelie\Desktop\GameWiz32.lnk [2012.06.27 16:57:24 | 011,966,606 | ---- | M] () -- C:\Users\Amelie\Desktop\FTsetup1_00_de.exe [2012.06.27 16:39:00 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3783372001-826603275-2424898749-1000Core.job [2012.06.23 14:45:23 | 002,682,496 | ---- | M] () -- C:\Users\Amelie\Desktop\Camstudio-2.6c.7z [2012.06.21 23:23:08 | 000,657,438 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2012.06.21 23:23:08 | 000,618,714 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012.06.21 23:23:08 | 000,130,810 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2012.06.21 23:23:08 | 000,107,034 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012.06.20 03:20:04 | 003,925,264 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012.06.18 22:14:49 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\MAGIX Video deluxe MX Download-Version.lnk [2012.06.18 22:06:03 | 000,008,192 | ---- | M] () -- C:\Users\Amelie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012.06.12 18:42:23 | 000,002,370 | ---- | M] () -- C:\Users\Amelie\Desktop\Google Chrome.lnk ========== Files Created - No Company Name ========== [2012.06.27 21:10:43 | 000,232,960 | ---- | C] () -- C:\Windows\Installer\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\U\00000008.@ [2012.06.27 21:10:41 | 000,088,064 | ---- | C] () -- C:\Windows\Installer\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\U\80000032.@ [2012.06.27 21:10:36 | 000,012,288 | ---- | C] () -- C:\Windows\Installer\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\U\80000000.@ [2012.06.27 21:09:43 | 000,000,000 | ---- | C] () -- C:\Users\Amelie\defogger_reenable [2012.06.27 21:08:22 | 000,054,016 | ---- | C] () -- C:\Windows\System32\drivers\eqcemdu.sys [2012.06.27 21:05:37 | 000,050,477 | ---- | C] () -- C:\Users\Amelie\Desktop\Defogger.exe [2012.06.27 18:49:59 | 000,000,796 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk [2012.06.27 18:41:05 | 000,000,250 | ---- | C] () -- C:\user.js [2012.06.27 17:30:29 | 000,073,728 | ---- | C] () -- C:\Windows\System32\GkSui18.EXE [2012.06.27 17:30:29 | 000,000,553 | ---- | C] () -- C:\Users\Amelie\Desktop\GameWiz32.lnk [2012.06.27 17:26:57 | 000,002,048 | ---- | C] () -- C:\Windows\Installer\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\U\00000004.@ [2012.06.27 17:26:57 | 000,001,632 | ---- | C] () -- C:\Windows\Installer\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\U\000000cb.@ [2012.06.27 16:57:21 | 011,966,606 | ---- | C] () -- C:\Users\Amelie\Desktop\FTsetup1_00_de.exe [2012.06.23 14:45:19 | 002,682,496 | ---- | C] () -- C:\Users\Amelie\Desktop\Camstudio-2.6c.7z [2012.06.20 22:03:06 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012.06.18 22:14:49 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\MAGIX Video deluxe MX Download-Version.lnk [2012.03.30 13:20:50 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2012.03.30 13:20:50 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2012.03.05 21:57:29 | 000,000,035 | ---- | C] () -- C:\Users\Amelie\AppData\Local\installLang.ini [2012.03.05 21:57:18 | 000,000,432 | ---- | C] () -- C:\Users\Amelie\AppData\Local\HamsterVideoConverterSettings.cfg [2012.03.04 13:19:13 | 000,008,192 | ---- | C] () -- C:\Users\Amelie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012.03.03 13:02:02 | 002,141,193 | ---- | C] () -- C:\Users\Amelie\Illustrator-Setup.exe [2012.01.27 16:17:09 | 000,000,032 | ---- | C] () -- C:\Users\Amelie\.simfy [2012.01.11 21:44:45 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\@ [2012.01.11 21:44:45 | 000,002,048 | -HS- | C] () -- C:\Users\Amelie\AppData\Local\{680f8d44-7fcf-ea4c-e758-2ccaf0b7e4e7}\@ [2011.09.18 11:12:21 | 000,000,016 | ---- | C] () -- C:\Users\Amelie\persistent_state [2011.09.13 21:08:53 | 224,794,479 | ---- | C] () -- C:\Users\Amelie\kalender.cpr [2011.09.07 19:12:30 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll [2011.09.07 19:12:30 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys [2011.07.02 08:26:42 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2011.07.02 08:25:40 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2011.06.25 19:25:22 | 000,036,864 | ---- | C] () -- C:\Windows\System32\Hooks.dll [2011.03.28 18:50:02 | 000,101,376 | ---- | C] () -- C:\Users\Amelie\01074921.vst [2011.01.24 17:10:12 | 000,000,256 | ---- | C] () -- C:\Windows\MyHeritage.INI [2011.01.24 17:08:57 | 000,454,656 | ---- | C] () -- C:\Windows\System32\PaintX.dll [2011.01.02 02:53:30 | 000,001,931 | ---- | C] () -- C:\Windows\Tablet8000x6000.ini [2010.12.31 15:04:51 | 000,000,142 | ---- | C] () -- C:\Windows\PenSign.INI [2010.12.27 23:40:46 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.11.10 03:45:32 | 000,102,744 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe [2010.11.10 03:45:30 | 010,871,128 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll [2010.11.10 03:45:20 | 000,316,248 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll [2010.11.10 03:31:42 | 000,026,286 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini ========== LOP Check ========== [2011.05.02 16:16:42 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Ambient Design [2011.10.30 21:03:43 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Babylon [2011.05.19 17:37:08 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Canon [2011.10.26 14:59:17 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2011.10.28 18:13:00 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\com.schroedel.bioheuteeinleger [2011.06.25 19:30:58 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\doas [2012.03.04 13:25:48 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\DVDVideoSoft [2011.04.21 15:01:12 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\DVDVideoSoftIEHelpers [2012.03.05 20:41:03 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Ebog [2012.01.30 18:48:08 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Esmoefw [2012.03.05 21:57:29 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\HamsterSoft [2012.06.02 22:06:49 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\ICQ [2010.12.27 23:35:35 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Leadertech [2012.06.18 22:43:28 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\MAGIX [2012.06.27 19:15:15 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Media Finder [2011.09.07 19:41:25 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\ML [2012.02.29 20:30:14 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\motorola [2012.03.04 18:58:10 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Music Editor Free [2011.01.24 17:09:32 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\MyHeritage [2011.10.30 20:03:06 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Origin [2012.03.08 16:56:56 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Pezyo [2011.09.07 19:12:12 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Samsung [2012.01.27 16:17:07 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Simfy [2011.01.24 17:08:57 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\The Complete Genealogy Reporter - FTB [2011.12.16 20:02:56 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Thunderbird [2012.06.23 14:49:01 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Titanium [2012.01.27 12:52:20 | 000,000,000 | ---D | M] -- C:\Users\Amelie\AppData\Roaming\Yxult [2009.07.14 06:53:46 | 000,022,300 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > Ich hoffe auf schnelle Hilfe und bedanke mich schon einmal recht herzlich! Geändert von Mell (27.06.2012 um 22:09 Uhr) |
| Themen zu tr/atraps.gen2 |
| adobe, antivir, autorun, avira, babylon toolbar, babylontoolbar, bho, bonjour, conduit, converter, entfernen, explorer, festplatte, firefox, firefox 13.0.1, format, google earth, langs, logfile, malware, malware gefunden, mozilla, mp3, neu aufsetzen, object, plug-in, programm, registry, scan, search the web, searchscopes, senden, software, tablet, trojaner, trojaner tr/atraps.gen, version=1.0, windows |
Baum-Darstellung