Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 06.08.2012, 02:16   #1
soulbrotha
 
Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig - Böse

Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig



Hallo zusammen...

nun habe wohl auch ich mir den BKA-Trojaner eingefangen. Ich hab schon einiges versucht... Malwarebytes Update...danach Full Scan - AntiVir Full Scan.... nach auffälligen Dateien in der Reg oder im Autostart gesucht. Doch alles blieb bisher ohne Erfolg. Nach drei Std. erfolgloser Suche, seit nun ihr die letzte Hoffnung: Ich bitte euch um Hilfe.

Hier meine Logfiles:

OTL

Zitat:
OTL logfile created on: 06.08.2012 01:49:06 - Run 1
OTL by OldTimer - Version 3.2.56.0 Folder = C:\Users\Soulbrotha\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

19,99 Gb Total Physical Memory | 18,57 Gb Available Physical Memory | 92,86% Memory free
39,98 Gb Paging File | 38,58 Gb Available in Paging File | 96,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,76 Gb Total Space | 243,65 Gb Free Space | 52,31% Space Free | Partition Type: NTFS
Drive D: | 465,75 Gb Total Space | 77,33 Gb Free Space | 16,60% Space Free | Partition Type: NTFS
Drive E: | 465,75 Gb Total Space | 259,30 Gb Free Space | 55,67% Space Free | Partition Type: NTFS
Drive F: | 465,76 Gb Total Space | 83,10 Gb Free Space | 17,84% Space Free | Partition Type: NTFS

Computer Name: PC-BÜRO | User Name: Soulbrotha | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.08.06 01:48:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL.exe
PRC - [2012.08.03 16:18:07 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe
PRC - [2012.04.15 00:10:46 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Internet\Java\bin\java.exe
PRC - [2012.04.15 00:10:46 | 000,023,328 | ---- | M] (Sun Microsystems, Inc.) -- C:\Internet\Java\bin\jp2launcher.exe
PRC - [2012.02.18 14:09:41 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Internet\Mozilla Firefox\firefox.exe
PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2012.08.03 16:18:07 | 009,465,032 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_270.dll
MOD - [2012.04.15 00:10:46 | 000,008,192 | ---- | M] () -- C:\Internet\Java\bin\jp2native.dll
MOD - [2012.02.18 14:09:41 | 001,911,768 | ---- | M] () -- C:\Internet\Mozilla Firefox\mozjs.dll
MOD - [2011.03.17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Programme\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Multimedia\PS3 Media Server\win32\service\wrapper.exe -- (PS3 Media Server)
SRV - [2012.08.03 16:18:10 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.05.08 20:34:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Sicherheit\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.08 20:34:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Sicherheit\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.04.26 16:44:06 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.02.23 12:40:40 | 002,886,528 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.09.23 19:37:42 | 000,641,832 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011.06.12 11:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Disabled | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [Disabled | Stopped] -- C:\Programme\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2010.10.26 15:46:10 | 001,483,072 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Sicherheit\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010.10.26 15:43:56 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.03.09 12:45:29 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010.02.19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010.01.09 22:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 22:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006.05.24 08:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) [Auto | Stopped] -- C:\Windows\System32\StkASv2K.exe -- (StkASSrv)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Boot | Stopped] -- system32\DRIVERS\vsmraid.sys -- (vsmraid)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Soulbrotha\Desktop\vfd21-050404\vfd.sys -- (VirtualFD)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2012.07.30 16:55:25 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pssdk41.sys -- (PsSdk41)
DRV - [2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.06.04 09:59:20 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2012.06.04 09:59:20 | 000,080,824 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2012.05.08 20:34:50 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.08 20:34:50 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.12.15 16:00:00 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.03.25 15:54:31 | 000,117,752 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2010.12.29 12:26:08 | 000,087,536 | ---- | M] (CyberLink Corp.) [2011/03/22 13:32:15] [Kernel | Auto | Stopped] -- C:\Multimedia\PowerDVD10\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})
DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.10.22 08:23:05 | 010,084,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010.10.07 14:34:32 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Sicherheit\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2010.09.07 22:08:56 | 000,123,496 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.04.27 10:28:46 | 000,146,568 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV - [2010.04.27 10:27:50 | 000,064,904 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nusb3hub.sys -- (nusb3hub)
DRV - [2010.04.16 13:59:44 | 001,521,544 | ---- | M] (Syntek) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkCMini.sys -- (StkCMini)
DRV - [2009.11.26 01:06:34 | 000,034,384 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2007.03.20 12:33:28 | 000,028,672 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\libusb0.sys -- (libusb0)
DRV - [2007.02.16 02:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006.09.27 05:01:36 | 000,241,628 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkAMini.sys -- (StkAMini)
DRV - [2006.08.02 08:44:04 | 000,004,772 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkScan.sys -- (StkScan)
DRV - [1999.09.10 14:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\aspi32.sys -- (Aspi32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A8 C3 1B DD AB 5E CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.xrel.to/home.html"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Internet\Java\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Tools\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Internet\Mozilla Firefox\components [2012.06.23 22:38:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Internet\Mozilla Firefox\plugins [2012.06.23 22:38:13 | 000,000,000 | ---D | M]

[2011.01.06 20:26:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soulbrotha\AppData\Roaming\mozilla\Extensions
[2012.07.04 15:23:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soulbrotha\AppData\Roaming\mozilla\Firefox\Profiles\zz6ze0mv.default\extensions
[2011.01.06 21:42:28 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Soulbrotha\AppData\Roaming\mozilla\Firefox\Profiles\zz6ze0mv.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2012.04.15 00:10:55 | 000,000,000 | ---D | M] (Java Console) -- C:\INTERNET\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2012.07.04 15:23:16 | 000,743,290 | ---- | M] () (No name found) -- C:\USERS\SOULBROTHA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZZ6ZE0MV.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

O1 HOSTS File: ([2012.04.26 16:38:41 | 000,001,331 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 hxxp://www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 activate.adobe.com:443
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 13 more lines...
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Internet\Java\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Internet\Java\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Sicherheit\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BDRegion] C:\Programme\Cyberlink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Handy\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [SyncCenter] C:\Users\Soulbrotha\AppData\Local\Microsoft\Windows\1871\SyncCenter.exe ()
O4 - HKLM..\Run: [TrayServer] C:\Multimedia\MAGIX\Video_deluxe_MX_Premium\Trayserver_DE.exe (MAGIX AG)
O4 - HKCU..\Run: [KiesPDLR] C:\Handy\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesPreload] C:\Handy\Kies\Kies.exe (Samsung)
O4 - HKCU..\Run: [RocketDock] C:\Tools\RocketDock\RocketDock.exe ()
O4 - Startup: C:\Users\Soulbrotha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Soulbrotha\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Internet\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Internet\ICQ7.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1F5F18E-184D-4398-AA03-6048DC612159}: NameServer = 192.168.0.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O27 - HKLM IFEO\cdprinter.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\lightscribecontrolpanel.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\lslauncher.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\musiceditor.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nvstlink.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nvstview.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\photodesigner.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\video_deluxe_mx_premium_de-de_setup.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\videodeluxe.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.08.06 01:48:40 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL.exe
[2012.08.06 01:32:26 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL(1).exe
[2012.08.06 01:20:08 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.08.05 22:49:20 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\hellomoto
[2012.08.05 20:44:55 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\[ Street Tracks ]
[2012.08.05 20:36:36 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix Short Cutz 06
[2012.08.05 20:33:12 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix Short Cutz 13
[2012.08.05 20:29:59 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix - Classics The Best Of
[2012.08.04 22:00:22 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix Short Cutz 05
[2012.08.04 17:50:17 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\cl_wb_bks_vct
[2012.08.04 16:45:19 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\GameTuts
[2012.08.03 19:03:22 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\5 Beautiful Wedding DVD Ver 3.0
[2012.08.01 14:09:34 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Documents\Visual Studio 2010
[2012.08.01 14:09:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
[2012.08.01 14:08:11 | 000,000,000 | ---D | C] -- C:\Windows\symbols
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 10.0
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SDKs
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Merge Modules
[2012.08.01 14:00:50 | 000,827,728 | ---- | C] (Microsoft Corporation) -- C:\Users\Soulbrotha\msvcr100.dll
[2012.07.31 19:35:59 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E7058808-8C97-4A08-99A2-015D24FDC13B}
[2012.07.31 19:35:47 | 000,000,000 | -H-D | C] -- C:\ProgramData\{C081E8AB-3AD3-4F73-A2C4-BB04BB77DB08}
[2012.07.31 19:35:39 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E6FD2223-C904-40C1-A119-7C0A8A7FE045}
[2012.07.31 19:35:33 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E176482F-0DEA-4B06-9697-D12D614FECB9}
[2012.07.31 19:35:28 | 000,000,000 | -H-D | C] -- C:\ProgramData\{447B4BF8-DCC8-4693-A8CD-A6A63F5BC176}
[2012.07.31 19:35:24 | 000,000,000 | -H-D | C] -- C:\ProgramData\{7CAFEB17-971D-44F2-91C0-1EEC4F54E1DB}
[2012.07.31 19:35:19 | 000,000,000 | -H-D | C] -- C:\ProgramData\{6B992C6A-E6B0-418F-9B21-FE4BF85AD3BE}
[2012.07.31 19:35:13 | 000,000,000 | -H-D | C] -- C:\ProgramData\{3C2CC1BA-EC03-48E5-A0EF-A0B455E1343F}
[2012.07.31 19:35:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Labs
[2012.07.31 19:35:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Topaz Labs
[2012.07.30 17:26:49 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\RnB Germany Vol.1 - 2007
[2012.07.30 10:58:40 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\vlc
[2012.07.30 10:58:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012.07.30 10:58:05 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2012.07.29 17:57:44 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\40 Sommer Oldies
[2012.07.29 11:55:27 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\NeverDead Unendlich Munition
[2012.07.27 01:30:26 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\Adobe_illustrator_CS6_v16.0.0.682
[2012.07.15 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\Chriz
[2012.07.13 20:39:10 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\Siavi
[2012.07.13 20:39:10 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\Ebri
[2012.07.13 20:39:10 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\Bouxm
[2012.07.11 10:08:57 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\Winrar
[2012.07.10 18:04:14 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Local\JollyBear
[2012.07.10 18:04:14 | 000,000,000 | ---D | C] -- C:\ProgramData\JollyBear
[2012.07.09 21:29:45 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Documents\Calibre Library
[2012.07.09 21:29:26 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Documents\Calibre Bibliothek
[2012.07.09 21:29:22 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\calibre
[2012.07.07 19:19:40 | 000,181,432 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\System32\drivers\ssudmdm.sys
[2012.07.07 19:19:40 | 000,080,824 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\System32\drivers\ssudbus.sys
[2012.07.07 19:06:44 | 000,172,032 | ---- | C] (Musiccity Co.Ltd.) -- C:\Windows\System32\muzapp.exe
[2011.01.06 22:56:02 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Soulbrotha\AppData\Roaming\pcouffin.sys
[1 C:\Users\Soulbrotha\AppData\Roaming\*.tmp files -> C:\Users\Soulbrotha\AppData\Roaming\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.08.06 01:50:26 | 000,614,903 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\adwcleaner.exe
[2012.08.06 01:48:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL.exe
[2012.08.06 01:44:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.06 01:44:43 | 3214,483,453 | -HS- | M] () -- C:\hiberfil.sys
[2012.08.06 01:32:26 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL(1).exe
[2012.08.06 01:21:26 | 012,090,234 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.08.06 01:21:26 | 003,797,564 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.08.06 01:21:26 | 000,335,876 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.08.06 01:21:26 | 000,052,292 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.08.06 01:18:09 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.08.06 01:17:50 | 000,020,880 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.06 01:17:49 | 000,020,880 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.05 23:21:47 | 000,192,322 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\cc_20120805_232133.reg
[2012.08.04 22:50:50 | 2172,956,834 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Die Tribute von Panem [1080p].mkv
[2012.08.04 14:31:35 | 006,860,359 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Nathi No. 1.mp3
[2012.08.04 11:11:51 | 1976,438,781 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Battleship [1080p].mkv
[2012.08.02 12:17:33 | 3576,894,707 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Offroad [1080p].mkv
[2012.08.01 23:15:30 | 001,122,668 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Soulbrotha.png
[2012.08.01 23:15:18 | 000,000,132 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012.07.30 16:55:25 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) -- C:\Windows\System32\drivers\pssdk41.sys
[2012.07.27 01:41:56 | 000,235,570 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Untitled-1.png
[2012.07.24 19:18:18 | 000,001,057 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\vso_ts_preview.xml
[2012.07.23 13:13:20 | 000,000,084 | -HS- | M] () -- C:\ProgramData\.zreglib
[2012.07.22 20:30:00 | 000,603,538 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Verkaufe.jpg
[2012.07.22 12:22:18 | 000,938,390 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Project X Disc.jpg
[2012.07.17 23:29:30 | 001,600,783 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Marvin Gaye - What's Going On (NiT GriT Dubstep Remix) [HD].mp3
[2012.07.17 18:34:59 | 000,565,715 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\ProjectX.jpg
[2012.07.14 21:12:11 | 002,285,969 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\DeadIslandGOTY_360_Label_PAL.jpg
[2012.07.14 16:16:41 | 000,216,664 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\papier.jpg
[2012.07.11 09:48:23 | 000,000,051 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\blckdom.res
[2012.07.10 23:09:43 | 003,843,272 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.07.10 17:29:30 | 000,416,827 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Namensschild.psd
[1 C:\Users\Soulbrotha\AppData\Roaming\*.tmp files -> C:\Users\Soulbrotha\AppData\Roaming\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.08.06 01:50:25 | 000,614,903 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\adwcleaner.exe
[2012.08.05 23:21:38 | 000,192,322 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\cc_20120805_232133.reg
[2012.08.05 14:49:04 | 2172,956,834 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Die Tribute von Panem [1080p].mkv
[2012.08.05 14:18:08 | 3576,894,707 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Offroad [1080p].mkv
[2012.08.04 17:33:52 | 1976,438,781 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Battleship [1080p].mkv
[2012.08.04 14:31:27 | 006,860,359 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Nathi No. 1.mp3
[2012.08.01 23:15:17 | 001,122,668 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Soulbrotha.png
[2012.08.01 13:20:39 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.27 01:41:51 | 000,235,570 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Untitled-1.png
[2012.07.22 20:03:30 | 001,600,783 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Marvin Gaye - What's Going On (NiT GriT Dubstep Remix) [HD].mp3
[2012.07.22 12:22:16 | 000,938,390 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Project X Disc.jpg
[2012.07.17 18:34:57 | 000,565,715 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\ProjectX.jpg
[2012.07.15 12:32:25 | 000,603,538 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Verkaufe.jpg
[2012.07.14 21:12:01 | 002,285,969 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\DeadIslandGOTY_360_Label_PAL.jpg
[2012.07.14 16:16:40 | 000,216,664 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\papier.jpg
[2012.07.10 17:29:27 | 000,416,827 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Namensschild.psd
[2012.07.06 15:10:58 | 000,000,051 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\blckdom.res
[2012.06.22 19:47:15 | 000,049,233 | ---- | C] () -- C:\Users\Soulbrotha\fat32format.exe
[2012.05.30 18:58:44 | 000,000,046 | ---- | C] () -- C:\Windows\Speed.INI
[2012.04.26 20:37:47 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI
[2012.04.21 14:38:13 | 000,272,629 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2012.04.13 22:37:41 | 000,000,028 | ---- | C] () -- C:\Windows\Robota.INI
[2012.04.04 23:11:30 | 000,197,648 | ---- | C] () -- C:\Windows\System32\drivers\StkCSF.sys
[2012.04.03 16:26:42 | 000,084,616 | ---- | C] () -- C:\Windows\StkUnist.exe
[2012.02.20 15:18:23 | 000,001,057 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\vso_ts_preview.xml
[2012.01.03 09:28:06 | 002,570,286 | ---- | C] () -- C:\Windows\System32\abgx360.exe
[2011.12.18 13:55:40 | 000,000,032 | ---- | C] () -- C:\Windows\CD_Start.INI
[2011.11.16 22:23:38 | 000,077,892 | ---- | C] () -- C:\Users\Soulbrotha\.TransferManager.db
[2011.09.16 12:54:48 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011.09.16 12:54:44 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011.09.16 12:54:44 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011.09.16 12:54:44 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011.09.16 12:54:44 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2011.08.16 19:18:13 | 000,000,132 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011.08.04 16:13:02 | 000,679,936 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011.08.04 16:13:02 | 000,155,648 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011.06.17 14:22:47 | 000,032,768 | R--- | C] () -- C:\Windows\System32\delentry.exe
[2011.06.17 14:22:47 | 000,000,703 | R--- | C] () -- C:\Windows\System32\iconcfg.ini
[2011.06.17 14:22:46 | 000,036,864 | R--- | C] () -- C:\Windows\System32\deluidrv.exe
[2011.06.13 21:20:03 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011.06.13 21:18:44 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.05.18 03:21:31 | 000,000,084 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.04.28 21:29:06 | 000,001,456 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2011.02.07 17:35:20 | 000,000,132 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe AIFF Format CS5 Prefs
[2011.02.04 16:57:24 | 000,057,344 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011.01.21 01:16:51 | 000,000,132 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011.01.15 16:34:28 | 000,000,486 | RHS- | C] () -- C:\Users\Soulbrotha\ntuser.pol
[2011.01.13 21:59:36 | 000,003,584 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.11 21:21:58 | 000,000,207 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\FontAgent Pro.ini
[2011.01.07 00:52:52 | 000,007,643 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Local\resmon.resmoncfg
[2011.01.06 22:56:02 | 000,007,887 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\pcouffin.cat
[2011.01.06 22:56:02 | 000,001,144 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\pcouffin.inf
[2011.01.06 20:25:53 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.01.06 19:32:22 | 000,080,488 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll

========== LOP Check ==========

[2012.07.26 23:29:23 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\abgx360
[2012.06.17 18:44:17 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\aignes
[2012.07.31 18:57:54 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Alien Skin
[2011.01.10 00:25:07 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\AVCWare
[2011.02.04 16:57:38 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\BDREBUILDER
[2012.07.15 11:57:33 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Bouxm
[2012.07.09 21:32:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\calibre
[2011.12.09 21:09:26 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\CannyGames
[2012.07.11 18:07:52 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Canon
[2011.01.07 11:34:19 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\CD-LabelPrint
[2011.03.11 16:21:51 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Charles
[2011.01.12 18:09:00 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.01.12 19:47:01 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Datel
[2012.08.06 01:42:49 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Dropbox
[2012.07.15 11:57:00 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Ebri
[2012.03.24 22:21:05 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Eliwo
[2011.04.18 14:15:09 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\FileZilla
[2011.11.12 12:01:22 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\GaDaBaMa
[2012.08.04 16:45:19 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\GameTuts
[2012.03.23 12:39:55 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Guqo
[2012.08.05 22:49:31 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\hellomoto
[2011.01.14 20:07:18 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Hex Replace
[2011.06.20 01:25:06 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\HTML Executable
[2012.06.30 13:58:32 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\ICQ
[2011.02.24 21:19:53 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\ImgBurn
[2011.12.09 15:28:14 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\iWin
[2012.07.06 15:10:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\kock
[2011.01.07 00:02:20 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\KS-SW
[2012.04.13 12:09:50 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\MAGIX
[2011.01.11 22:10:12 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\mkvtoolnix
[2011.01.07 01:33:44 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Mp3tag
[2012.06.15 22:17:15 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\MumboJumbo
[2011.01.06 21:50:39 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Pamela
[2011.01.07 01:39:10 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Publish Providers
[2011.11.10 17:11:50 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Samsung
[2011.01.26 14:39:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Screaming Bee
[2012.07.13 20:39:10 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Siavi
[2012.05.03 17:38:25 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Sony
[2011.01.09 14:53:00 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011.08.31 00:19:46 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Steinberg
[2011.09.27 07:50:03 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\TeamViewer
[2012.04.23 16:36:17 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Temp
[2011.01.06 22:23:19 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\TuneUp Software
[2012.07.10 16:54:06 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\UAs
[2012.04.04 12:46:50 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Ulead Systems
[2012.07.24 19:18:18 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Vso
[2012.03.30 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\XLink Kai
[2012.07.10 16:54:48 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\xmldm
[2012.07.21 22:19:22 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2012.05.15 23:09:48 | 000,001,178 | ---- | M] ()(C:\Windows\System32\??????????????????????????????…?????????????????????????????????4????.?iK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*⁉慷瑮琠敧⁴睡祡⠠眠.耀īĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2012.05.15 23:09:48 | 000,001,178 | ---- | C] ()(C:\Windows\System32\??????????????????????????????…?????????????????????????????????4????.?iK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*⁉慷瑮琠敧⁴睡祡⠠眠.耀īĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2012.05.15 23:08:25 | 000,001,186 | ---- | M] ()(C:\Windows\System32\??????????????????????????????…????????????????????????????????????.?#K?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*畇整潍杲湥䈠牥楬.耀#Ķ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰ĵ藠 ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴꆰĴ.lnk
[2012.05.15 23:08:25 | 000,001,186 | ---- | C] ()(C:\Windows\System32\??????????????????????????????…????????????????????????????????????.?#K?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*畇整潍杲湥䈠牥楬.耀#Ķ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰ĵ藠 ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴꆰĴ.lnk
[2012.05.15 23:05:10 | 000,001,178 | ---- | M] ()(C:\Windows\System32\??????????????????????????????…??????????????????????????????????????.?eK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*敂楬癥⁥湩礠畯⁲敢瑳䰠.耀eĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2012.05.15 23:05:10 | 000,001,178 | ---- | C] ()(C:\Windows\System32\??????????????????????????????…??????????????????????????????????????.?eK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*敂楬癥⁥湩礠畯⁲敢瑳䰠.耀eĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2011.08.14 15:26:05 | 000,001,182 | ---- | M] ()(C:\Windows\System32\????????????????????????????????????????????????????????????????????????????3.??3?yt?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?????t?t? t?t?t?t?t?t?T?T?T?T?????????T?T?T?T?T?T?T?T?T?T?T?T?T?T?????T?T?????.lnk) -- C:\Windows\System32\㩃啜敳獲卜畯扬潲桴屡敄歳潴屰楍瑸灡獥䑜⹪⹄瑓汹⁥潃汬捥楴湯嘠汯ㄠ尴⹁⁋瑆*楌牆敥⁳*慌䰠⁡慌⠠橄䐮匮祴敬☠删潯敂敒業⥸笠〸䈠䵐⁽
睷⹷牂慥婫甮⁳⸩灭3.遱⽫3耀yţ꾈ţ끘ţ귨ţ꺸ţ괘ţꭸţ걈ţꪨţ꧘ţ꤈ţ꠸ţꝨţꚘţꗈţꓸţꐨţꍘţ遻⽫ꆸ耀‚ţꀘţ齈ţ鹸ţ鶨ţ鳘ţ鰈ţ鬸ţ齠Ţ麐Ţ鳰Ţ鷀Ţ遀⽫魐耀Š⽫馰耀’Ţ預Ţ靀Ţ陰Ţ閠Ţ鐀Ţ铐Ţ錰Ţ醐Ţ鉠Ţ郀Ţ述Ţ輠Ţ謐Ţ運⽫趀耀’Ţ诠Ţ掝⾕詀耀￿.lnk
[2011.08.14 15:26:05 | 000,001,182 | ---- | C] ()(C:\Windows\System32\????????????????????????????????????????????????????????????????????????????3.??3?yt?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?????t?t? t?t?t?t?t?t?T?T?T?T?????????T?T?T?T?T?T?T?T?T?T?T?T?T?T?????T?T?????.lnk) -- C:\Windows\System32\㩃啜敳獲卜畯扬潲桴屡敄歳潴屰楍瑸灡獥䑜⹪⹄瑓汹⁥潃汬捥楴湯嘠汯ㄠ尴⹁⁋瑆*楌牆敥⁳*慌䰠⁡慌⠠橄䐮匮祴敬☠删潯敂敒業⥸笠〸䈠䵐⁽
睷⹷牂慥婫甮⁳⸩灭3.遱⽫3耀yţ꾈ţ끘ţ귨ţ꺸ţ괘ţꭸţ걈ţꪨţ꧘ţ꤈ţ꠸ţꝨţꚘţꗈţꓸţꐨţꍘţ遻⽫ꆸ耀‚ţꀘţ齈ţ鹸ţ鶨ţ鳘ţ鰈ţ鬸ţ齠Ţ麐Ţ鳰Ţ鷀Ţ遀⽫魐耀Š⽫馰耀’Ţ預Ţ靀Ţ陰Ţ閠Ţ鐀Ţ铐Ţ錰Ţ醐Ţ鉠Ţ郀Ţ述Ţ輠Ţ謐Ţ運⽫趀耀’Ţ诠Ţ掝⾕詀耀￿.lnk

< End of report >
ADW Cleaner

Zitat:
# AdwCleaner v1.800 - Logfile created 08/06/2012 at 03:10:32
# Updated 01/08/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Soulbrotha - PC-BÜRO
# Running from : C:\Users\Soulbrotha\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Mozilla Firefox v10.0.2 (de)

Profile name : default
File : C:\Users\Soulbrotha\AppData\Roaming\Mozilla\Firefox\Profiles\zz6ze0mv.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [975 octets] - [06/08/2012 01:50:32]
AdwCleaner[S1].txt - [1143 octets] - [06/08/2012 01:50:48]
AdwCleaner[R2].txt - [833 octets] - [06/08/2012 03:10:32]

########## EOF - C:\AdwCleaner[R2].txt - [960 octets] ##########

Wenn ihr noch mehr Logs oder andere Angaben braucht... so lasst es mich wissen.

Vielen Dank

euer Soulbrotha

 

Themen zu Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig
adobe, adobe flash player, antivir, avira, bho, computer, defender, document, explorer, firefox, flash player, format, helper, langs, libusb0.sys, mozilla, nodrives, nvidia, opera, plug-in, programme, registry, scan, server, sicherheit, software, suche, usb 3.0, virus, visual studio, windows, wmp




Ähnliche Themen: Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig


  1. UKASH-Virus/ Ihr Computer wurde gesperrt!
    Plagegeister aller Art und deren Bekämpfung - 04.03.2013 (14)
  2. Polizei-Virus (Der Computer ist für die Verletzung der Gesetze der Rebublik Österreich blockiert worden)
    Log-Analyse und Auswertung - 16.12.2012 (12)
  3. Ukash Virus Der Computer ist für die Verletzung der Gesetze der BRD..
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (2)
  4. "Der Computer ist für die Verletzung.. österreichische BPolizei..." 100 Euro ukash
    Log-Analyse und Auswertung - 31.10.2012 (15)
  5. Der Computer ist für die Verletzung der Gesetze der Bundesrepublik Österreich (Ukash)
    Plagegeister aller Art und deren Bekämpfung - 23.10.2012 (8)
  6. Ukash schlägt zu "Der Computer ist für die Verletzung der Gesetze der Bundesrepublik Deutschland wurde blockiert"
    Plagegeister aller Art und deren Bekämpfung - 13.10.2012 (2)
  7. Der Computer ist für die Verletzung der Gesetze der Bundesrepublik Deutschland... - Virus
    Plagegeister aller Art und deren Bekämpfung - 07.10.2012 (17)
  8. auswertung Logdatei des Trojaner "der Computer ist für die Verletzung der Gesetze der Bundesrepublik deutschland wurde Blockert" Ukash
    Log-Analyse und Auswertung - 03.10.2012 (13)
  9. spezifisches Problem mit dem Ukash Trojaner "Der Computer ist für die Verletzung der Gesezte der Bundesrepublik....
    Log-Analyse und Auswertung - 25.09.2012 (28)
  10. UKASH-Trojaner "Der Computer ist für die Verletzung der Gesetze der Bundesrepublik Deutschland wurde blockiert"
    Log-Analyse und Auswertung - 08.09.2012 (14)
  11. Ukash Der Computer ist für die Verletzung der Gesetze der Bundesrepublik Deutschland wurde blockiert
    Plagegeister aller Art und deren Bekämpfung - 24.08.2012 (2)
  12. Computer mit Bundespolizei-Virus (Ukash) infiziert
    Plagegeister aller Art und deren Bekämpfung - 22.08.2012 (3)
  13. Ein paar (grundsätzliche) Fragen zu "UKASH/BKA/computer ist für die verletzung der gesetze der BRD blockiert"
    Plagegeister aller Art und deren Bekämpfung - 20.08.2012 (7)
  14. Computer gesperrt mit der Nachricht: Der Computer ist für die Verletzung der BRD wurde bockiert!
    Plagegeister aller Art und deren Bekämpfung - 19.08.2012 (6)
  15. Der Computer ist für die Verletzung der Gesetze der Bundesrepublik Deutschland... - Standard Der Computer ist für die Verletzung der Gesetz
    Log-Analyse und Auswertung - 15.08.2012 (5)
  16. Der Computer ist für die Verletzung....Ukash Virus
    Log-Analyse und Auswertung - 08.08.2012 (5)
  17. Computer gesperrt mit der Nachricht: Der Computer ist für die Verletzung der BRD wurde bockiert!
    Antiviren-, Firewall- und andere Schutzprogramme - 29.07.2012 (1)

Zum Thema Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig - Hallo zusammen... nun habe wohl auch ich mir den BKA-Trojaner eingefangen. Ich hab schon einiges versucht... Malwarebytes Update...danach Full Scan - AntiVir Full Scan.... nach auffälligen Dateien in der Reg - Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig...
Archiv
Du betrachtest: Der Computer ist für die Verletzung....bla bla Ukash Virus - Hartnäckig auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.