Hallo zusammen...

nun habe wohl auch ich mir den BKA-Trojaner eingefangen. Ich hab schon einiges versucht... Malwarebytes Update...danach Full Scan - AntiVir Full Scan.... nach auffälligen Dateien in der Reg oder im Autostart gesucht. Doch alles blieb bisher ohne Erfolg. Nach drei Std. erfolgloser Suche, seit nun ihr die letzte Hoffnung: Ich bitte euch um Hilfe.

Hier meine Logfiles:

OTL

OTL logfile created on: 06.08.2012 01:49:06 - Run 1
OTL by OldTimer - Version 3.2.56.0 Folder = C:\Users\Soulbrotha\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

19,99 Gb Total Physical Memory | 18,57 Gb Available Physical Memory | 92,86% Memory free
39,98 Gb Paging File | 38,58 Gb Available in Paging File | 96,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,76 Gb Total Space | 243,65 Gb Free Space | 52,31% Space Free | Partition Type: NTFS
Drive D: | 465,75 Gb Total Space | 77,33 Gb Free Space | 16,60% Space Free | Partition Type: NTFS
Drive E: | 465,75 Gb Total Space | 259,30 Gb Free Space | 55,67% Space Free | Partition Type: NTFS
Drive F: | 465,76 Gb Total Space | 83,10 Gb Free Space | 17,84% Space Free | Partition Type: NTFS

Computer Name: PC-BÜRO | User Name: Soulbrotha | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.08.06 01:48:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL.exe
PRC - [2012.08.03 16:18:07 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe
PRC - [2012.04.15 00:10:46 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Internet\Java\bin\java.exe
PRC - [2012.04.15 00:10:46 | 000,023,328 | ---- | M] (Sun Microsystems, Inc.) -- C:\Internet\Java\bin\jp2launcher.exe
PRC - [2012.02.18 14:09:41 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Internet\Mozilla Firefox\firefox.exe
PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2012.08.03 16:18:07 | 009,465,032 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_270.dll
MOD - [2012.04.15 00:10:46 | 000,008,192 | ---- | M] () -- C:\Internet\Java\bin\jp2native.dll
MOD - [2012.02.18 14:09:41 | 001,911,768 | ---- | M] () -- C:\Internet\Mozilla Firefox\mozjs.dll
MOD - [2011.03.17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Programme\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Multimedia\PS3 Media Server\win32\service\wrapper.exe -- (PS3 Media Server)
SRV - [2012.08.03 16:18:10 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.05.08 20:34:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Sicherheit\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.08 20:34:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Sicherheit\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.04.26 16:44:06 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.02.23 12:40:40 | 002,886,528 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.09.23 19:37:42 | 000,641,832 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011.06.12 11:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Disabled | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [Disabled | Stopped] -- C:\Programme\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2010.10.26 15:46:10 | 001,483,072 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Sicherheit\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010.10.26 15:43:56 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2010.10.16 12:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.03.09 12:45:29 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010.02.19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010.01.09 22:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 22:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006.05.24 08:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) [Auto | Stopped] -- C:\Windows\System32\StkASv2K.exe -- (StkASSrv)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Boot | Stopped] -- system32\DRIVERS\vsmraid.sys -- (vsmraid)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Soulbrotha\Desktop\vfd21-050404\vfd.sys -- (VirtualFD)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2012.07.30 16:55:25 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pssdk41.sys -- (PsSdk41)
DRV - [2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.06.04 09:59:20 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2012.06.04 09:59:20 | 000,080,824 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2012.05.08 20:34:50 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.08 20:34:50 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.12.15 16:00:00 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.03.25 15:54:31 | 000,117,752 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2010.12.29 12:26:08 | 000,087,536 | ---- | M] (CyberLink Corp.) [2011/03/22 13:32:15] [Kernel | Auto | Stopped] -- C:\Multimedia\PowerDVD10\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})
DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.10.22 08:23:05 | 010,084,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010.10.07 14:34:32 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Sicherheit\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2010.09.07 22:08:56 | 000,123,496 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.04.27 10:28:46 | 000,146,568 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV - [2010.04.27 10:27:50 | 000,064,904 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nusb3hub.sys -- (nusb3hub)
DRV - [2010.04.16 13:59:44 | 001,521,544 | ---- | M] (Syntek) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkCMini.sys -- (StkCMini)
DRV - [2009.11.26 01:06:34 | 000,034,384 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2007.03.20 12:33:28 | 000,028,672 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\libusb0.sys -- (libusb0)
DRV - [2007.02.16 02:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006.09.27 05:01:36 | 000,241,628 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkAMini.sys -- (StkAMini)
DRV - [2006.08.02 08:44:04 | 000,004,772 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkScan.sys -- (StkScan)
DRV - [1999.09.10 14:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\aspi32.sys -- (Aspi32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A8 C3 1B DD AB 5E CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.xrel.to/home.html"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Internet\Java\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Tools\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Internet\Mozilla Firefox\components [2012.06.23 22:38:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Internet\Mozilla Firefox\plugins [2012.06.23 22:38:13 | 000,000,000 | ---D | M]

[2011.01.06 20:26:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soulbrotha\AppData\Roaming\mozilla\Extensions
[2012.07.04 15:23:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soulbrotha\AppData\Roaming\mozilla\Firefox\Profiles\zz6ze0mv.default\extensions
[2011.01.06 21:42:28 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Soulbrotha\AppData\Roaming\mozilla\Firefox\Profiles\zz6ze0mv.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2012.04.15 00:10:55 | 000,000,000 | ---D | M] (Java Console) -- C:\INTERNET\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2012.07.04 15:23:16 | 000,743,290 | ---- | M] () (No name found) -- C:\USERS\SOULBROTHA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZZ6ZE0MV.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

O1 HOSTS File: ([2012.04.26 16:38:41 | 000,001,331 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 hxxp://www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 activate.adobe.com:443
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 192.150.18.108
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 13 more lines...
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Internet\Java\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Internet\Java\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Sicherheit\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BDRegion] C:\Programme\Cyberlink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Handy\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [SyncCenter] C:\Users\Soulbrotha\AppData\Local\Microsoft\Windows\1871\SyncCenter.exe ()
O4 - HKLM..\Run: [TrayServer] C:\Multimedia\MAGIX\Video_deluxe_MX_Premium\Trayserver_DE.exe (MAGIX AG)
O4 - HKCU..\Run: [KiesPDLR] C:\Handy\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesPreload] C:\Handy\Kies\Kies.exe (Samsung)
O4 - HKCU..\Run: [RocketDock] C:\Tools\RocketDock\RocketDock.exe ()
O4 - Startup: C:\Users\Soulbrotha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Soulbrotha\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Internet\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Internet\ICQ7.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1F5F18E-184D-4398-AA03-6048DC612159}: NameServer = 192.168.0.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O27 - HKLM IFEO\cdprinter.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\lightscribecontrolpanel.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\lslauncher.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\musiceditor.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nvstlink.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nvstview.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\photodesigner.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\video_deluxe_mx_premium_de-de_setup.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\videodeluxe.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.08.06 01:48:40 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL.exe
[2012.08.06 01:32:26 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL(1).exe
[2012.08.06 01:20:08 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.08.05 22:49:20 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\hellomoto
[2012.08.05 20:44:55 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\[ Street Tracks ]
[2012.08.05 20:36:36 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix Short Cutz 06
[2012.08.05 20:33:12 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix Short Cutz 13
[2012.08.05 20:29:59 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix - Classics The Best Of
[2012.08.04 22:00:22 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\X-Mix Short Cutz 05
[2012.08.04 17:50:17 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\cl_wb_bks_vct
[2012.08.04 16:45:19 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\GameTuts
[2012.08.03 19:03:22 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\5 Beautiful Wedding DVD Ver 3.0
[2012.08.01 14:09:34 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Documents\Visual Studio 2010
[2012.08.01 14:09:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
[2012.08.01 14:08:11 | 000,000,000 | ---D | C] -- C:\Windows\symbols
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 10.0
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SDKs
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer
[2012.08.01 14:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Merge Modules
[2012.08.01 14:00:50 | 000,827,728 | ---- | C] (Microsoft Corporation) -- C:\Users\Soulbrotha\msvcr100.dll
[2012.07.31 19:35:59 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E7058808-8C97-4A08-99A2-015D24FDC13B}
[2012.07.31 19:35:47 | 000,000,000 | -H-D | C] -- C:\ProgramData\{C081E8AB-3AD3-4F73-A2C4-BB04BB77DB08}
[2012.07.31 19:35:39 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E6FD2223-C904-40C1-A119-7C0A8A7FE045}
[2012.07.31 19:35:33 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E176482F-0DEA-4B06-9697-D12D614FECB9}
[2012.07.31 19:35:28 | 000,000,000 | -H-D | C] -- C:\ProgramData\{447B4BF8-DCC8-4693-A8CD-A6A63F5BC176}
[2012.07.31 19:35:24 | 000,000,000 | -H-D | C] -- C:\ProgramData\{7CAFEB17-971D-44F2-91C0-1EEC4F54E1DB}
[2012.07.31 19:35:19 | 000,000,000 | -H-D | C] -- C:\ProgramData\{6B992C6A-E6B0-418F-9B21-FE4BF85AD3BE}
[2012.07.31 19:35:13 | 000,000,000 | -H-D | C] -- C:\ProgramData\{3C2CC1BA-EC03-48E5-A0EF-A0B455E1343F}
[2012.07.31 19:35:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Labs
[2012.07.31 19:35:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Topaz Labs
[2012.07.30 17:26:49 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\RnB Germany Vol.1 - 2007
[2012.07.30 10:58:40 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\vlc
[2012.07.30 10:58:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012.07.30 10:58:05 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2012.07.29 17:57:44 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\40 Sommer Oldies
[2012.07.29 11:55:27 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\NeverDead Unendlich Munition
[2012.07.27 01:30:26 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\Adobe_illustrator_CS6_v16.0.0.682
[2012.07.15 16:34:13 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\Chriz
[2012.07.13 20:39:10 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\Siavi
[2012.07.13 20:39:10 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\Ebri
[2012.07.13 20:39:10 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\Bouxm
[2012.07.11 10:08:57 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Desktop\Winrar
[2012.07.10 18:04:14 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Local\JollyBear
[2012.07.10 18:04:14 | 000,000,000 | ---D | C] -- C:\ProgramData\JollyBear
[2012.07.09 21:29:45 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Documents\Calibre Library
[2012.07.09 21:29:26 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\Documents\Calibre Bibliothek
[2012.07.09 21:29:22 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\calibre
[2012.07.07 19:19:40 | 000,181,432 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\System32\drivers\ssudmdm.sys
[2012.07.07 19:19:40 | 000,080,824 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\System32\drivers\ssudbus.sys
[2012.07.07 19:06:44 | 000,172,032 | ---- | C] (Musiccity Co.Ltd.) -- C:\Windows\System32\muzapp.exe
[2011.01.06 22:56:02 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Soulbrotha\AppData\Roaming\pcouffin.sys
[1 C:\Users\Soulbrotha\AppData\Roaming\*.tmp files -> C:\Users\Soulbrotha\AppData\Roaming\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.08.06 01:50:26 | 000,614,903 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\adwcleaner.exe
[2012.08.06 01:48:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL.exe
[2012.08.06 01:44:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.06 01:44:43 | 3214,483,453 | -HS- | M] () -- C:\hiberfil.sys
[2012.08.06 01:32:26 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Soulbrotha\Desktop\OTL(1).exe
[2012.08.06 01:21:26 | 012,090,234 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.08.06 01:21:26 | 003,797,564 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.08.06 01:21:26 | 000,335,876 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.08.06 01:21:26 | 000,052,292 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.08.06 01:18:09 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.08.06 01:17:50 | 000,020,880 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.06 01:17:49 | 000,020,880 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.05 23:21:47 | 000,192,322 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\cc_20120805_232133.reg
[2012.08.04 22:50:50 | 2172,956,834 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Die Tribute von Panem [1080p].mkv
[2012.08.04 14:31:35 | 006,860,359 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Nathi No. 1.mp3
[2012.08.04 11:11:51 | 1976,438,781 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Battleship [1080p].mkv
[2012.08.02 12:17:33 | 3576,894,707 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Offroad [1080p].mkv
[2012.08.01 23:15:30 | 001,122,668 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Soulbrotha.png
[2012.08.01 23:15:18 | 000,000,132 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012.07.30 16:55:25 | 000,036,928 | ---- | M] (microOLAP Technologies LTD) -- C:\Windows\System32\drivers\pssdk41.sys
[2012.07.27 01:41:56 | 000,235,570 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Untitled-1.png
[2012.07.24 19:18:18 | 000,001,057 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\vso_ts_preview.xml
[2012.07.23 13:13:20 | 000,000,084 | -HS- | M] () -- C:\ProgramData\.zreglib
[2012.07.22 20:30:00 | 000,603,538 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Verkaufe.jpg
[2012.07.22 12:22:18 | 000,938,390 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Project X Disc.jpg
[2012.07.17 23:29:30 | 001,600,783 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Marvin Gaye - What's Going On (NiT GriT Dubstep Remix) [HD].mp3
[2012.07.17 18:34:59 | 000,565,715 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\ProjectX.jpg
[2012.07.14 21:12:11 | 002,285,969 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\DeadIslandGOTY_360_Label_PAL.jpg
[2012.07.14 16:16:41 | 000,216,664 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\papier.jpg
[2012.07.11 09:48:23 | 000,000,051 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\blckdom.res
[2012.07.10 23:09:43 | 003,843,272 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.07.10 17:29:30 | 000,416,827 | ---- | M] () -- C:\Users\Soulbrotha\Desktop\Namensschild.psd
[1 C:\Users\Soulbrotha\AppData\Roaming\*.tmp files -> C:\Users\Soulbrotha\AppData\Roaming\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.08.06 01:50:25 | 000,614,903 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\adwcleaner.exe
[2012.08.05 23:21:38 | 000,192,322 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\cc_20120805_232133.reg
[2012.08.05 14:49:04 | 2172,956,834 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Die Tribute von Panem [1080p].mkv
[2012.08.05 14:18:08 | 3576,894,707 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Offroad [1080p].mkv
[2012.08.04 17:33:52 | 1976,438,781 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Battleship [1080p].mkv
[2012.08.04 14:31:27 | 006,860,359 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Nathi No. 1.mp3
[2012.08.01 23:15:17 | 001,122,668 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Soulbrotha.png
[2012.08.01 13:20:39 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.27 01:41:51 | 000,235,570 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Untitled-1.png
[2012.07.22 20:03:30 | 001,600,783 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Marvin Gaye - What's Going On (NiT GriT Dubstep Remix) [HD].mp3
[2012.07.22 12:22:16 | 000,938,390 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Project X Disc.jpg
[2012.07.17 18:34:57 | 000,565,715 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\ProjectX.jpg
[2012.07.15 12:32:25 | 000,603,538 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Verkaufe.jpg
[2012.07.14 21:12:01 | 002,285,969 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\DeadIslandGOTY_360_Label_PAL.jpg
[2012.07.14 16:16:40 | 000,216,664 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\papier.jpg
[2012.07.10 17:29:27 | 000,416,827 | ---- | C] () -- C:\Users\Soulbrotha\Desktop\Namensschild.psd
[2012.07.06 15:10:58 | 000,000,051 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\blckdom.res
[2012.06.22 19:47:15 | 000,049,233 | ---- | C] () -- C:\Users\Soulbrotha\fat32format.exe
[2012.05.30 18:58:44 | 000,000,046 | ---- | C] () -- C:\Windows\Speed.INI
[2012.04.26 20:37:47 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI
[2012.04.21 14:38:13 | 000,272,629 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2012.04.13 22:37:41 | 000,000,028 | ---- | C] () -- C:\Windows\Robota.INI
[2012.04.04 23:11:30 | 000,197,648 | ---- | C] () -- C:\Windows\System32\drivers\StkCSF.sys
[2012.04.03 16:26:42 | 000,084,616 | ---- | C] () -- C:\Windows\StkUnist.exe
[2012.02.20 15:18:23 | 000,001,057 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\vso_ts_preview.xml
[2012.01.03 09:28:06 | 002,570,286 | ---- | C] () -- C:\Windows\System32\abgx360.exe
[2011.12.18 13:55:40 | 000,000,032 | ---- | C] () -- C:\Windows\CD_Start.INI
[2011.11.16 22:23:38 | 000,077,892 | ---- | C] () -- C:\Users\Soulbrotha\.TransferManager.db
[2011.09.16 12:54:48 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011.09.16 12:54:44 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011.09.16 12:54:44 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011.09.16 12:54:44 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011.09.16 12:54:44 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2011.08.16 19:18:13 | 000,000,132 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011.08.04 16:13:02 | 000,679,936 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011.08.04 16:13:02 | 000,155,648 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011.06.17 14:22:47 | 000,032,768 | R--- | C] () -- C:\Windows\System32\delentry.exe
[2011.06.17 14:22:47 | 000,000,703 | R--- | C] () -- C:\Windows\System32\iconcfg.ini
[2011.06.17 14:22:46 | 000,036,864 | R--- | C] () -- C:\Windows\System32\deluidrv.exe
[2011.06.13 21:20:03 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011.06.13 21:18:44 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.05.18 03:21:31 | 000,000,084 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.04.28 21:29:06 | 000,001,456 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2011.02.07 17:35:20 | 000,000,132 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe AIFF Format CS5 Prefs
[2011.02.04 16:57:24 | 000,057,344 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011.01.21 01:16:51 | 000,000,132 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011.01.15 16:34:28 | 000,000,486 | RHS- | C] () -- C:\Users\Soulbrotha\ntuser.pol
[2011.01.13 21:59:36 | 000,003,584 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.11 21:21:58 | 000,000,207 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\FontAgent Pro.ini
[2011.01.07 00:52:52 | 000,007,643 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Local\resmon.resmoncfg
[2011.01.06 22:56:02 | 000,007,887 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\pcouffin.cat
[2011.01.06 22:56:02 | 000,001,144 | ---- | C] () -- C:\Users\Soulbrotha\AppData\Roaming\pcouffin.inf
[2011.01.06 20:25:53 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.01.06 19:32:22 | 000,080,488 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll

========== LOP Check ==========

[2012.07.26 23:29:23 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\abgx360
[2012.06.17 18:44:17 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\aignes
[2012.07.31 18:57:54 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Alien Skin
[2011.01.10 00:25:07 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\AVCWare
[2011.02.04 16:57:38 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\BDREBUILDER
[2012.07.15 11:57:33 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Bouxm
[2012.07.09 21:32:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\calibre
[2011.12.09 21:09:26 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\CannyGames
[2012.07.11 18:07:52 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Canon
[2011.01.07 11:34:19 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\CD-LabelPrint
[2011.03.11 16:21:51 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Charles
[2011.01.12 18:09:00 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.01.12 19:47:01 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Datel
[2012.08.06 01:42:49 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Dropbox
[2012.07.15 11:57:00 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Ebri
[2012.03.24 22:21:05 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Eliwo
[2011.04.18 14:15:09 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\FileZilla
[2011.11.12 12:01:22 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\GaDaBaMa
[2012.08.04 16:45:19 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\GameTuts
[2012.03.23 12:39:55 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Guqo
[2012.08.05 22:49:31 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\hellomoto
[2011.01.14 20:07:18 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Hex Replace
[2011.06.20 01:25:06 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\HTML Executable
[2012.06.30 13:58:32 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\ICQ
[2011.02.24 21:19:53 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\ImgBurn
[2011.12.09 15:28:14 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\iWin
[2012.07.06 15:10:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\kock
[2011.01.07 00:02:20 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\KS-SW
[2012.04.13 12:09:50 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\MAGIX
[2011.01.11 22:10:12 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\mkvtoolnix
[2011.01.07 01:33:44 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Mp3tag
[2012.06.15 22:17:15 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\MumboJumbo
[2011.01.06 21:50:39 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Pamela
[2011.01.07 01:39:10 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Publish Providers
[2011.11.10 17:11:50 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Samsung
[2011.01.26 14:39:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Screaming Bee
[2012.07.13 20:39:10 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Siavi
[2012.05.03 17:38:25 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Sony
[2011.01.09 14:53:00 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011.08.31 00:19:46 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Steinberg
[2011.09.27 07:50:03 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\TeamViewer
[2012.04.23 16:36:17 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Temp
[2011.01.06 22:23:19 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\TuneUp Software
[2012.07.10 16:54:06 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\UAs
[2012.04.04 12:46:50 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Ulead Systems
[2012.07.24 19:18:18 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\Vso
[2012.03.30 19:22:32 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\XLink Kai
[2012.07.10 16:54:48 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\xmldm
[2012.07.21 22:19:22 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2012.05.15 23:09:48 | 000,001,178 | ---- | M] ()(C:\Windows\System32\??????????????????????????????…?????????????????????????????????4????.?iK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*⁉慷瑮琠敧⁴睡祡⠠眠.耀īĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2012.05.15 23:09:48 | 000,001,178 | ---- | C] ()(C:\Windows\System32\??????????????????????????????…?????????????????????????????????4????.?iK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*⁉慷瑮琠敧⁴睡祡⠠眠.耀īĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2012.05.15 23:08:25 | 000,001,186 | ---- | M] ()(C:\Windows\System32\??????????????????????????????…????????????????????????????????????.?#K?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*畇整潍杲湥䈠牥楬.耀#Ķ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰ĵ藠 ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴꆰĴ.lnk
[2012.05.15 23:08:25 | 000,001,186 | ---- | C] ()(C:\Windows\System32\??????????????????????????????…????????????????????????????????????.?#K?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*畇整潍杲湥䈠牥楬.耀#Ķ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰ĵ藠 ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴꆰĴ.lnk
[2012.05.15 23:05:10 | 000,001,178 | ---- | M] ()(C:\Windows\System32\??????????????????????????????…??????????????????????????????????????.?eK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*敂楬癥⁥湩礠畯⁲敢瑳䰠.耀eĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2012.05.15 23:05:10 | 000,001,178 | ---- | C] ()(C:\Windows\System32\??????????????????????????????…??????????????????????????????????????.?eK?K?K?K?K?K?j?j?j?j?j?j?j?j?K?j?j?j?j?j?j?j?j?j?j?j?j?j ?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?j?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J?J.lnk) -- C:\Windows\System32\㩄繜䐠睯汮慯獤縠孜䴠㍐搠牵档써状湥崠䅜汬䤠湏⁥慐瑲批敲歡⁺…敒業數☠䈠慬正嘠⁳潈獵⁥䄨牰汩㈠㄰⤲䵜獡畨⵰敇浲湡⁹*敂楬癥⁥湩礠畯⁲敢瑳䰠.耀eĶ켘Ķ쿨Ķ칈Ķ쵸Ķ첨Ķ颐ĵ韀ĵ雰ĵ阠ĵ镐ĵ钀ĵ鎰ĵ鋠ĵ휸Ķ酀ĵ遰ĵ辠ĵ贰ĵ軐ĵ踀ĵ豠ĵ讐ĵ諀ĵ觰ĵ褠ĵ葀ĵ衐ĵ螀ĵ蚰 ĵ藠ĵ蔐ĵ荰ĵ芠ĵ臐ĵ脀ĵ耰ĵ罠ĵ纐ĵ緀ĵ糰ĵ簠ĵ禰ĵ筐ĵ窀ĵ꺰Ĵ꾀Ĵ균Ĵ괐ĴꭰĴ걀ĴꪠĴ꧐Ĵ꤀Ĵ꠰ĴꝠĴꚐĴꗀĴꓰĴꐠĴꍐĴꊀĴ.lnk
[2011.08.14 15:26:05 | 000,001,182 | ---- | M] ()(C:\Windows\System32\????????????????????????????????????????????????????????????????????????????3.??3?yt?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?????t?t? t?t?t?t?t?t?T?T?T?T?????????T?T?T?T?T?T?T?T?T?T?T?T?T?T?????T?T?????.lnk) -- C:\Windows\System32\㩃啜敳獲卜畯扬潲桴屡敄歳潴屰楍瑸灡獥䑜⹪⹄瑓汹⁥潃汬捥楴湯嘠汯ㄠ尴⹁⁋瑆*楌牆敥⁳*慌䰠⁡慌⠠橄䐮匮祴敬☠删潯敂敒業⥸笠〸䈠䵐⁽
睷⹷牂慥婫甮⁳⸩灭3.遱⽫3耀yţ꾈ţ끘ţ귨ţ꺸ţ괘ţꭸţ걈ţꪨţ꧘ţ꤈ţ꠸ţꝨţꚘţꗈţꓸţꐨţꍘţ遻⽫ꆸ耀‚ţꀘţ齈ţ鹸ţ鶨ţ鳘ţ鰈ţ鬸ţ齠Ţ麐Ţ鳰Ţ鷀Ţ遀⽫魐耀Š⽫馰耀’Ţ預Ţ靀Ţ陰Ţ閠Ţ鐀Ţ铐Ţ錰Ţ醐Ţ鉠Ţ郀Ţ述Ţ輠Ţ謐Ţ運⽫趀耀’Ţ诠Ţ掝⾕詀耀￿.lnk
[2011.08.14 15:26:05 | 000,001,182 | ---- | C] ()(C:\Windows\System32\????????????????????????????????????????????????????????????????????????????3.??3?yt?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?t?????t?t? t?t?t?t?t?t?T?T?T?T?????????T?T?T?T?T?T?T?T?T?T?T?T?T?T?????T?T?????.lnk) -- C:\Windows\System32\㩃啜敳獲卜畯扬潲桴屡敄歳潴屰楍瑸灡獥䑜⹪⹄瑓汹⁥潃汬捥楴湯嘠汯ㄠ尴⹁⁋瑆*楌牆敥⁳*慌䰠⁡慌⠠橄䐮匮祴敬☠删潯敂敒業⥸笠〸䈠䵐⁽
睷⹷牂慥婫甮⁳⸩灭3.遱⽫3耀yţ꾈ţ끘ţ귨ţ꺸ţ괘ţꭸţ걈ţꪨţ꧘ţ꤈ţ꠸ţꝨţꚘţꗈţꓸţꐨţꍘţ遻⽫ꆸ耀‚ţꀘţ齈ţ鹸ţ鶨ţ鳘ţ鰈ţ鬸ţ齠Ţ麐Ţ鳰Ţ鷀Ţ遀⽫魐耀Š⽫馰耀’Ţ預Ţ靀Ţ陰Ţ閠Ţ鐀Ţ铐Ţ錰Ţ醐Ţ鉠Ţ郀Ţ述Ţ輠Ţ謐Ţ運⽫趀耀’Ţ诠Ţ掝⾕詀耀￿.lnk

< End of report >

ADW Cleaner

# AdwCleaner v1.800 - Logfile created 08/06/2012 at 03:10:32
# Updated 01/08/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Soulbrotha - PC-BÜRO
# Running from : C:\Users\Soulbrotha\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Mozilla Firefox v10.0.2 (de)

Profile name : default
File : C:\Users\Soulbrotha\AppData\Roaming\Mozilla\Firefox\Profiles\zz6ze0mv.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [975 octets] - [06/08/2012 01:50:32]
AdwCleaner[S1].txt - [1143 octets] - [06/08/2012 01:50:48]
AdwCleaner[R2].txt - [833 octets] - [06/08/2012 03:10:32]

########## EOF - C:\AdwCleaner[R2].txt - [960 octets] ##########

Wenn ihr noch mehr Logs oder andere Angaben braucht... so lasst es mich wissen.

Vielen Dank

euer Soulbrotha

Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

• Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
• Starte die OTL.exe.
  Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
• Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:

:OTL
SRV - File not found [On_Demand | Stopped] -- C:\Multimedia\PS3 Media Server\win32\service\wrapper.exe -- (PS3 Media Server) 
DRV - File not found [Kernel | Boot | Stopped] -- system32\DRIVERS\vsmraid.sys -- (vsmraid) 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Soulbrotha\Desktop\vfd21-050404\vfd.sys -- (VirtualFD) 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU) 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub) 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc) 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\dgderdrv.sys -- (dgderdrv) 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC 
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
FF - prefs.js..browser.search.update: false 
FF - prefs.js..browser.startup.homepage: "http://www.xrel.to/home.html" 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found 
O4 - HKLM..\Run: [SyncCenter] C:\Users\Soulbrotha\AppData\Local\Microsoft\Windows\1871\SyncCenter.exe () 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177 
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found 
O27 - HKLM IFEO\cdprinter.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\lightscribecontrolpanel.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\lslauncher.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\musiceditor.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\nvstlink.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\nvstview.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\photodesigner.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\video_deluxe_mx_premium_de-de_setup.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O27 - HKLM IFEO\videodeluxe.exe: Debugger - C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe (TuneUp Software) 
O32 - HKLM CDRom: AutoRun - 1 
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] 

[2012.07.07 19:06:44 | 000,172,032 | ---- | C] (Musiccity Co.Ltd.) -- C:\Windows\System32\muzapp.exe 
 
[2012.08.05 22:49:20 | 000,000,000 | ---D | C] -- C:\Users\Soulbrotha\AppData\Roaming\hellomoto 

[2012.08.06 01:18:09 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job 
[2012.07.11 09:48:23 | 000,000,051 | ---- | M] () -- C:\Users\Soulbrotha\AppData\Roaming\blckdom.res 
[2012.07.06 15:10:47 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\kock 
[2012.07.10 16:54:06 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\UAs 
[2012.07.10 16:54:48 | 000,000,000 | ---D | M] -- C:\Users\Soulbrotha\AppData\Roaming\xmldm 
:Files

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
         

• Schließe alle Programme.
• Klicke auf den Fix Button.
• Wenn OTL einen Neustart verlangt, bitte zulassen.
• Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
  Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

Hier das Logfile

Error: Unable to interpret <# AdwCleaner v1.800 - Logfile created 08/06/2012 at 03:10:32> in the current context!
Error: Unable to interpret <# Updated 01/08/2012 by Xplode> in the current context!
Error: Unable to interpret <# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)> in the current context!
Error: Unable to interpret <# User : Soulbrotha - PC-BÜRO> in the current context!
Error: Unable to interpret <# Running from : C:\Users\Soulbrotha\Desktop\adwcleaner.exe> in the current context!
Error: Unable to interpret <# Option [Search]> in the current context!
Error: Unable to interpret <***** [Services] *****> in the current context!
Error: Unable to interpret <***** [Files / Folders] *****> in the current context!
Error: Unable to interpret <***** [Registry] *****> in the current context!
Error: Unable to interpret <***** [Registre - GUID] *****> in the current context!
Error: Unable to interpret <***** [Internet Browsers] *****> in the current context!
Error: Unable to interpret <-\\ Internet Explorer v8.0.7601.17514> in the current context!
Error: Unable to interpret <[OK] Registry is clean.> in the current context!
Error: Unable to interpret <-\\ Mozilla Firefox v10.0.2 (de)> in the current context!
Error: Unable to interpret <Profile name : default > in the current context!
Error: Unable to interpret <File : C:\Users\Soulbrotha\AppData\Roaming\Mozilla\Firefox\Profiles\zz6ze0mv.default\prefs.js> in the current context!
Error: Unable to interpret <[OK] File is clean.> in the current context!
Error: Unable to interpret <*************************> in the current context!
Error: Unable to interpret <AdwCleaner[R1].txt - [975 octets] - [06/08/2012 01:50:32]> in the current context!
Error: Unable to interpret <AdwCleaner[S1].txt - [1143 octets] - [06/08/2012 01:50:48]> in the current context!
Error: Unable to interpret <AdwCleaner[R2].txt - [833 octets] - [06/08/2012 03:10:32]> in the current context!
Error: Unable to interpret <########## EOF - C:\AdwCleaner[R2].txt - [960 octets] ##########> in the current context!

OTL by OldTimer - Version 3.2.56.0 log created on 08062012_091426

Da hat sich nicht viel getan. Hab deinen Text dann per Hand kopiert und in OTL gepostet, anschließend gefixt. Und nach nen Neustart komm ich nun endlich wieder auf meinen Desktop. Aber hier zunächst die Log Datei:

All processes killed
========== OTL ==========
Service PS3 Media Server stopped successfully!
Service PS3 Media Server deleted successfully!
File C:\Multimedia\PS3 Media Server\win32\service\wrapper.exe not found.
Service vsmraid stopped successfully!
Service vsmraid deleted successfully!
File system32\DRIVERS\vsmraid.sys not found.
Service VirtualFD stopped successfully!
Service VirtualFD deleted successfully!
File C:\Users\Soulbrotha\Desktop\vfd21-050404\vfd.sys not found.
Service VGPU stopped successfully!
Service VGPU deleted successfully!
File System32\drivers\rdvgkmd.sys not found.
Service tsusbhub stopped successfully!
Service tsusbhub deleted successfully!
File system32\drivers\tsusbhub.sys not found.
Service Synth3dVsc stopped successfully!
Service Synth3dVsc deleted successfully!
File System32\drivers\synth3dvsc.sys not found.
Service dgderdrv stopped successfully!
Service dgderdrv deleted successfully!
File System32\drivers\dgderdrv.sys not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: false removed from browser.search.update
Prefs.js: "hxxp://www.xrel.to/home.html" removed from browser.startup.homepage
Prefs.js: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SyncCenter deleted successfully.
C:\Users\Soulbrotha\AppData\Local\Microsoft\Windows\1871\SyncCenter.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\PromptOnSecureDesktop deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cdprinter.exe\ deleted successfully.
C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lightscribecontrolpanel.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lslauncher.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\musiceditor.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstlink.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstview.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\photodesigner.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\video_deluxe_mx_premium_de-de_setup.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\videodeluxe.exe\ deleted successfully.
File C:\Sicherheit\TuneUp Utilities 2011\TUAutoReactivator32.exe not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\autoexec.bat moved successfully.
C:\Windows\System32\muzapp.exe moved successfully.
C:\Users\Soulbrotha\AppData\Roaming\hellomoto folder moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\Users\Soulbrotha\AppData\Roaming\blckdom.res moved successfully.
C:\Users\Soulbrotha\AppData\Roaming\kock folder moved successfully.
C:\Users\Soulbrotha\AppData\Roaming\UAs folder moved successfully.
C:\Users\Soulbrotha\AppData\Roaming\xmldm folder moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\Soulbrotha\Desktop\cmd.bat deleted successfully.
C:\Users\Soulbrotha\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41620 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56502 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Microsoft
->Temp folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Soulbrotha
->Temp folder emptied: 83947924 bytes
->Temporary Internet Files folder emptied: 1430125 bytes
->Java cache emptied: 30135 bytes
->FireFox cache emptied: 207782524 bytes
->Flash cache emptied: 57731 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 73842377 bytes
RecycleBin emptied: 32355498 bytes

Total Files Cleaned = 381,00 mb


[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Microsoft

User: Public

User: Soulbrotha
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.56.0 log created on 08062012_093342

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Kannst du mir bitte sagen wo Sich das Drecksding fest gefressen hatte? Ich hab das Tausend Programme durchlaufen lassen. Die Registry durchsucht, Autostart, etc. Nichts gefunden.

Ist mein PC nun Clean oder muss ich nun noch was machen ???

PS: Tausend Dank für die rasche Hilfe.... Super Arbeit. DANKE

Wir sind noch nicht fertig.


Sehr gut!

Wie laeuft der Rechner?

1. Schritt

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktualisiere die Datenbank!
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

danach:

2. Schritt

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Starte die adwcleaner.exe mit einem Doppelklick.
• Klicke auf Search.
• Nach Ende des Suchlaufs öffnet sich eine Textdatei.
• Poste mir den Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

gesagt - getan - hier das Ergebnis:

# AdwCleaner v1.800 - Logfile created 08/07/2012 at 17:31:22
# Updated 01/08/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Soulbrotha - PC-BÜRO
# Running from : C:\Users\Soulbrotha\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\ProgramData\boost_interprocess

***** [Registry] *****


***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Registry is clean.

-\\ Mozilla Firefox v10.0.2 (de)

Profile name : default
File : C:\Users\Soulbrotha\AppData\Roaming\Mozilla\Firefox\Profiles\zz6ze0mv.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [975 octets] - [06/08/2012 01:50:32]
AdwCleaner[S1].txt - [1143 octets] - [06/08/2012 01:50:48]
AdwCleaner[R2].txt - [960 octets] - [06/08/2012 03:10:32]
AdwCleaner[R3].txt - [1070 octets] - [07/08/2012 17:30:53]
AdwCleaner[R4].txt - [1002 octets] - [07/08/2012 17:31:22]

########## EOF - C:\AdwCleaner[R4].txt - [1130 octets] ##########

Malwarebytes Log?

oh Sorry, hier nochmal:

Malwarebytes Anti-Malware (PRO) 1.62.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2012.08.07.09

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
Soulbrotha :: PC-BÜRO [Administrator]

Schutz: Aktiviert

08.08.2012 00:03:03
mbam-log-2012-08-08 (00-03-03).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 667044
Laufzeit: 2 Stunde(n), 26 Minute(n), 40 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Gabs auch Logs mit Funden?
(Reiter Scan Berichte)

Sorry aber diesen Reiter finde ich bei mir nicht

Wie? Was hast du fuer Reiter zur Verfuegung?

Fehlende Rückmeldung

Gibt es Probleme beim Abarbeiten obiger Anleitung?

Um Kapazitäten für andere Hilfesuchende freizumachen, lösche ich dieses Thema aus meinen Benachrichtigungen.

Solltest Du weitermachen wollen, schreibe mir eine PN oder eröffne ein neues Thema.
http://www.trojaner-board.de/69886-a...-beachten.html


Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner sauber ist.