| |
| |||||||
Log-Analyse und Auswertung: Internet Explorer öffnet ständig WerbungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
29.12.2009, 21:39
| #3 |
| |  Internet Explorer öffnet ständig Werbung ich hoffe mal das ich alles richtig gemacht habe
__________________Code:
ATTFilter ----- Root -----------------------------
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\
29.12.2009 20:58 43 filelist.txt
29.12.2009 13:41 2.145.386.496 pagefile.sys
27.10.2009 17:01 90 plap.txt
----- Windows --------------------------
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\WINDOWS
29.12.2009 18:24 39 popcinfo.dat
29.12.2009 13:47 1.147.978 WindowsUpdate.log
29.12.2009 13:41 0 0.log
29.12.2009 13:41 2.048 bootstat.dat
29.12.2009 00:29 32.506 SchedLgU.Txt
28.12.2009 00:00 216 wiadebug.log
27.12.2009 10:53 47 wiaservc.log
27.12.2009 10:35 7.680 Thumbs.db
09.12.2009 10:42 348.153 iis6.log
09.12.2009 10:42 107.137 comsetup.log
09.12.2009 10:42 18.696 KB970430.log
09.12.2009 10:42 16.056 tabletoc.log
09.12.2009 10:42 146.048 tsoc.log
09.12.2009 10:42 17.784 ocmsn.log
09.12.2009 10:42 64.823 ntdtcsetup.log
09.12.2009 10:42 1.374 imsins.log
09.12.2009 10:42 56.316 netfxocm.log
09.12.2009 10:42 21.893 MedCtrOC.log
09.12.2009 10:42 16.042 msgsocm.log
09.12.2009 10:42 153.491 ocgen.log
09.12.2009 10:42 321.515 FaxSetup.log
09.12.2009 10:42 98.466 msmqinst.log
09.12.2009 10:42 60.808 updspapi.log
09.12.2009 10:42 1.374 imsins.BAK
09.12.2009 10:42 16.993 KB974318.log
09.12.2009 10:42 14.477 KB976325-IE8.log
09.12.2009 10:42 8.563 KB973904.log
09.12.2009 10:42 12.181 KB974392.log
09.12.2009 10:41 11.953 KB971737.log
07.12.2009 20:56 674 KB918997.log
07.12.2009 20:52 310.510 setupapi.log
05.12.2009 12:19 483 setupact.log
25.11.2009 01:29 5.328 KB976098-v2.log
25.11.2009 01:29 8.717 KB973687.log
11.11.2009 12:02 11.330 KB969947.log
04.11.2009 15:20 7.767 KB976749-IE8.log
02.11.2009 20:33 327.515 DirectX.log
02.11.2009 19:28 0 Sti_Trace.log
28.10.2009 22:29 104 ChssBase.ini
27.10.2009 00:30 573 win.ini
22.10.2009 14:16 13.703 KB974455-IE8.log
17.10.2009 08:39 32 CD_Start.INI
16.10.2009 17:26 4.983 KB958869.log
16.10.2009 17:25 11.963 KB969059.log
16.10.2009 17:25 7.457 KB954155.log
16.10.2009 17:25 11.964 KB974112.log
16.10.2009 17:25 11.896 KB975025.log
16.10.2009 17:25 12.267 KB974571.log
16.10.2009 17:25 8.612 KB971486.log
16.10.2009 17:25 6.969 KB973525.log
16.10.2009 17:25 12.048 KB975467.log
12.10.2009 19:37 3.622 KB968389.log
06.09.2009 08:55 10.370 wmsetup.log
21.08.2009 14:12 33 CMSurround.ini
21.08.2009 13:17 411 CMISETUP.INI
21.08.2009 13:17 26 CMCDPLAY.INI
21.08.2009 13:17 4.333 mixerdef.ini
15.08.2009 10:11 1.032 disney.ini
15.08.2009 10:04 10.907 spupdsvc.log
15.08.2009 10:02 46.850 ie8_main.log
15.08.2009 10:01 85.949 ie8.log
----- System ---
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\WINDOWS\system
sind alle älter als 6 monate
---- System 32 (Achtung: Zeitfenster beachten!) ---
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\WINDOWS\system32
29.12.2009 13:41 13.702 wpa.dbl
29.12.2009 13:41 204.581 nvapps.xml
12.12.2009 16:01 848 KGyGaAvL.sys
09.12.2009 14:15 67.700 perfc009.dat
09.12.2009 14:15 432.936 perfh009.dat
09.12.2009 14:15 449.404 perfh007.dat
09.12.2009 14:15 80.608 perfc007.dat
09.12.2009 14:15 1.043.910 PerfStringBackup.INI
01.12.2009 21:06 25.966.024 MRT.exe
25.11.2009 01:29 216.686 TZLog.log
11.11.2009 23:37 130.888 FNTCACHE.DAT
29.10.2009 08:40 916.480 wininet.dll
29.10.2009 08:40 206.848 occache.dll
29.10.2009 08:40 5.940.736 mshtml.dll
29.10.2009 08:40 1.208.832 urlmon.dll
29.10.2009 08:40 594.432 msfeeds.dll
29.10.2009 08:40 55.296 msfeedsbs.dll
29.10.2009 08:40 25.600 jsproxy.dll
29.10.2009 08:40 1.469.440 inetcpl.cpl
29.10.2009 08:40 1.985.536 iertutil.dll
29.10.2009 08:40 11.069.952 ieframe.dll
29.10.2009 08:40 184.320 iepeers.dll
29.10.2009 08:40 387.584 iedkcs32.dll
28.10.2009 16:07 46.080 tzchange.exe
28.10.2009 15:40 173.056 ie4uinit.exe
27.10.2009 17:01 108.144 CmdLineExt.dll
21.10.2009 06:38 75.776 strmfilt.dll
21.10.2009 06:38 25.088 httpapi.dll
17.10.2009 08:44 506 mapisvc.inf
13.10.2009 11:32 271.360 oakley.dll
12.10.2009 14:38 79.872 raschap.dll
12.10.2009 14:38 150.528 rastls.dll
11.09.2009 15:17 136.192 msv1_0.dll
04.09.2009 22:03 58.880 msasn1.dll
01.09.2009 15:46 282.654 msaud32.acm
26.08.2009 09:00 247.326 strmdll.dll
25.08.2009 10:17 354.816 winhttp.dll
21.08.2009 13:16 23.392 nscompat.tlb
21.08.2009 13:16 16.832 amcompat.tlb
14.08.2009 16:10 1.850.752 win32k.sys
09.08.2009 18:45 2.272 w95inf16.dll
09.08.2009 18:45 4.608 w95inf32.dll
06.08.2009 18:24 209.632 wuweb.dll
06.08.2009 18:24 327.896 wucltui.dll
06.08.2009 18:24 18.144 wuaueng.dll.mui
06.08.2009 18:24 44.768 wups2.dll
06.08.2009 18:24 217.816 wuaucpl.cpl
06.08.2009 18:24 15.584 wuapi.dll.mui
06.08.2009 18:24 35.552 wups.dll
06.08.2009 18:24 53.472 wuauclt.exe
06.08.2009 18:24 15.584 wuaucpl.cpl.mui
06.08.2009 18:24 96.480 cdm.dll
06.08.2009 18:24 23.264 wucltui.dll.mui
06.08.2009 18:23 575.704 wuapi.dll
06.08.2009 18:23 1.929.952 wuaueng.dll
06.08.2009 18:23 215.920 muweb.dll
06.08.2009 18:23 17.776 mucltui.dll.mui
06.08.2009 18:23 274.288 mucltui.dll
05.08.2009 09:59 206.336 mswebdvd.dll
04.08.2009 18:26 2.147.840 ntoskrnl.exe
04.08.2009 18:25 2.026.496 ntkrnlpa.exe
31.07.2009 10:02 1.372.672 msxml6.dll
31.07.2009 05:32 1.172.480 msxml3.dll
26.07.2009 15:44 48.448 sirenacm.dll
17.07.2009 20:01 58.880 atl.dll
17.07.2009 17:15 1.441.792 query.dll
13.07.2009 22:43 10.841.088 wmp.dll
13.07.2009 22:43 286.208 wmpdxm.dll
29.06.2009 16:55 133.120 extmgr.dll
29.06.2009 09:40 57.667 ieuinit.inf
----- Prefetch -------------------------
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\WINDOWS\Prefetch
29.12.2009 20:58 10.886 FIND.EXE-0EC32F1E.pf
29.12.2009 20:58 13.366 CMD.EXE-087B4001.pf
29.12.2009 20:56 14.828 NOTEPAD.EXE-336351A9.pf
29.12.2009 20:56 128.912 IEXPLORE.EXE-2CA9778D.pf
29.12.2009 20:56 16.154 VERCLSID.EXE-3667BD89.pf
29.12.2009 20:44 20.888 AVK.EXE-39941251.pf
29.12.2009 20:16 551.678 Layout.ini
29.12.2009 20:12 77.092 LOGON.SCR-151EFAEA.pf
29.12.2009 20:02 31.834 WLCOMM.EXE-222494DB.pf
29.12.2009 20:02 72.766 MSNMSGR.EXE-3ACF7E89.pf
29.12.2009 20:00 23.132 SOFTSHIMUSER.EXE-16C55390.pf
29.12.2009 19:34 21.622 RUNDLL32.EXE-2A94BB85.pf
29.12.2009 19:34 21.730 RUNDLL32.EXE-2E5AF1D7.pf
29.12.2009 19:17 24.968 TASKMGR.EXE-20256C55.pf
29.12.2009 18:32 29.526 MANAGER07.EXE-014DA63F.pf
29.12.2009 18:32 16.528 SETUP.EXE-0F40F254.pf
29.12.2009 18:32 24.418 IMAPI.EXE-0BF740A4.pf
29.12.2009 18:31 13.174 RUNDLL32.EXE-451FC2C0.pf
29.12.2009 18:03 37.320 ZUMA.EXE-231A6AB6.pf
29.12.2009 15:14 68.472 WMIPRVSE.EXE-28F301A9.pf
29.12.2009 15:14 102.614 HELPSVC.EXE-2878DDA2.pf
29.12.2009 13:47 30.872 WUAUCLT.EXE-399A8E72.pf
29.12.2009 13:42 28.388 SVCHOST.EXE-3530F672.pf
29.12.2009 13:42 26.500 ADMIN.EXE-049D00C8.pf
29.12.2009 13:42 43.232 GDFWSVC.EXE-0F3E3E86.pf
29.12.2009 13:42 1.389.180 NTOSBOOT-B00DFAAD.pf
29.12.2009 00:29 21.232 LOGONUI.EXE-0AF22957.pf
28.12.2009 23:57 44.872 WLLOGINPROXY.EXE-33926225.pf
28.12.2009 23:56 56.230 INFOCARD.EXE-14622E55.pf
28.12.2009 23:17 20.976 HIJACKTHIS.EXE-02A2D55A.pf
28.12.2009 23:13 44.920 MSIEXEC.EXE-2F8A8CAE.pf
28.12.2009 20:30 59.998 GDSC.EXE-19C9B849.pf
28.12.2009 19:17 63.654 SKATPROF.EXE-2E851ABD.pf
28.12.2009 17:30 59.092 GAMEMODULE.ELB-148A0A05.pf
28.12.2009 17:30 5.992 ASTERIX.EXE-350BB9BE.pf
27.12.2009 22:44 50.838 WINBEJ.EXE-3635B34F.pf
27.12.2009 18:50 63.672 DFRGNTFS.EXE-269967DF.pf
27.12.2009 18:50 15.106 DEFRAG.EXE-273F131E.pf
27.12.2009 18:18 17.896 RUNDLL32.EXE-26F3FF16.pf
27.12.2009 13:09 16.456 SNDVOL32.EXE-383480B7.pf
27.12.2009 13:07 155.370 VLC.EXE-29851A71.pf
27.12.2009 10:51 37.792 WIAACMGR.EXE-212ED878.pf
27.12.2009 10:37 13.778 RUNDLL32.EXE-494047CF.pf
27.12.2009 10:37 14.042 RUNDLL32.EXE-1F201F35.pf
27.12.2009 10:34 14.202 RUNDLL32.EXE-2876A0C6.pf
25.12.2009 14:29 29.978 MANAGER07.EXE-0F331A6B.pf
25.12.2009 12:17 30.392 NTVDM.EXE-1A10A423.pf
24.12.2009 09:32 12.524 UPDATEGUI.EXE-228DB4AE.pf
24.12.2009 09:32 17.224 REGSVR32.EXE-25EEFE2F.pf
24.12.2009 09:32 52.580 IUPDATEAVK.EXE-32EA503B.pf
23.12.2009 22:56 17.510 SETUP.EXE-393E66AE.pf
23.12.2009 19:56 8.986 ASTERIX.EXE-122663AA.pf
23.12.2009 19:07 58.086 GAMEMODULE.ELB-256E28CE.pf
23.12.2009 19:07 46.924 ASTERIX2.EXE-1F53B1F2.pf
17.12.2009 18:55 14.166 AVKWCTL.EXE-2C2061D4.pf
16.12.2009 22:42 52.224 MANAGER10.EXE-2935176B.pf
16.12.2009 22:36 10.484 MANAGER_10_UPDATE_2.EXE-314512A2.pf
16.12.2009 22:36 10.524 PROXYINSTALLER.EXE-16D9DFCE.pf
16.12.2009 22:36 61.882 VPATCH.EXE-160CB5B5.pf
16.12.2009 22:34 54.074 CORE.EXE-322F54F1.pf
16.12.2009 22:33 12.232 AUTORUN.EXE-08A9DED1.pf
13.12.2009 19:23 111.160 QPW.EXE-3955AA3C.pf
13.12.2009 13:37 50.624 IDRIVER.EXE-085BB391.pf
13.12.2009 13:37 17.780 SETUP.EXE-0A3FB56C.pf
12.12.2009 17:48 39.106 DRWTSN32.EXE-2B4B52AC.pf
12.12.2009 17:47 80.912 DWWIN.EXE-30875ADC.pf
11.12.2009 16:14 14.476 NOTEPAD.EXE-189578DA.pf
11.12.2009 16:09 9.880 ASTERIX.EXE-2027462A.pf
11.12.2009 16:09 5.030 ELBDRIVERS.EXE-2AFA9D50.pf
10.12.2009 21:48 19.710 ~E5D141.TMP-3472DD3B.pf
10.12.2009 21:48 26.502 GAME.EXE-1B1F735F.pf
09.12.2009 14:15 32.420 WMIADAP.EXE-2DF425B2.pf
09.12.2009 10:42 68.754 UPDATE.EXE-1934D336.pf
09.12.2009 10:42 65.786 UPDATE.EXE-1B23E93C.pf
09.12.2009 10:42 67.330 UPDATE.EXE-27FEEF62.pf
09.12.2009 10:42 64.094 UPDATE.EXE-00793824.pf
09.12.2009 10:42 73.506 UPDATE.EXE-27CC13F0.pf
09.12.2009 10:41 68.822 UPDATE.EXE-3889CEBA.pf
09.12.2009 10:40 21.244 WINDOWS-KB890830-V3.2-DELTA.E-2524A72A.pf
09.12.2009 10:40 53.634 MRT.EXE-1B4A8D49.pf
09.12.2009 10:40 50.868 MRTSTUB.EXE-073A3362.pf
09.12.2009 09:06 69.158 UPDATE.EXE-238ABA3D.pf
09.12.2009 09:06 69.016 UPDATE.EXE-3304E510.pf
09.12.2009 09:06 69.596 UPDATE.EXE-36B3A1D1.pf
09.12.2009 09:06 73.564 UPDATE.EXE-380B4A18.pf
09.12.2009 00:53 61.134 DUMPREP.EXE-1B46F901.pf
08.12.2009 01:02 15.438 WEBMOV~1.EXE-2E39834F.pf
07.12.2009 20:53 60.202 LUCOMSERVER_3_4.EXE-34438721.pf
07.12.2009 20:51 62.592 AVP.EXE-25CF3FB6.pf
07.12.2009 20:49 21.740 AUPDATE.EXE-089630E1.pf
07.12.2009 09:19 17.230 ALG.EXE-0F138680.pf
07.12.2009 09:19 24.700 RUNDLL32.EXE-35A483DA.pf
07.12.2009 09:19 19.420 RUNDLL32.EXE-1619A94E.pf
93 Datei(en) 5.611.416 Bytes
0 Verzeichnis(se), 62.630.408.192 Bytes frei
----- Tasks ----------------------------
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\WINDOWS\tasks
29.12.2009 20:00 260 AD0C137C91878710.job
29.12.2009 13:41 6 SA.DAT
----- Windows/Temp -----------------------
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\WINDOWS\Temp
29.12.2009 20:26 483 WGAErrLog.txt
20.12.2009 20:05 16.384 Perflib_Perfdata_350.dat
20.12.2009 20:00 16.384 Perflib_Perfdata_194.dat
13.12.2009 20:00 16.384 Perflib_Perfdata_1a4.dat
25.10.2009 12:09 8.192 cch~1441af43.htp
25.10.2009 12:09 8.192 cch~1441a248.htp
21.10.2009 22:01 8.192 cch~5d1a4981a.htp
21.10.2009 22:01 8.192 cch~5d1a48c7b.htp
21.10.2009 20:06 8.192 cch~17273aa8.htp
21.10.2009 20:06 8.192 cch~17271abe.htp
16.10.2009 17:28 5.158 ASPNETSetup_00000.log
----- Temp -----------------------------
Datentr„ger in Laufwerk C: ist ACER
Volumeseriennummer: 3C27-D820
Verzeichnis von C:\DOKUME~1\Jenny\LOKALE~1\Temp
29.12.2009 20:57 24.576 ~DF595.tmp
29.12.2009 20:31 16.384 ~DF191B.tmp
29.12.2009 18:32 13.592 temp.ani
29.12.2009 13:47 512 ~DF700F.tmp
29.12.2009 13:47 32.768 ~DF6FF2.tmp
29.12.2009 13:47 512 ~DF6EB8.tmp
29.12.2009 13:47 16.384 ~DF6E9E.tmp
29.12.2009 13:47 512 ~DF6DF5.tmp
29.12.2009 13:47 32.768 ~DF6D5B.tmp
29.12.2009 13:47 0 ~DF256C.tmp
20.12.2009 22:15 20.480 ~DF5A43.tmp
20.12.2009 22:11 512 ~DFBCA4.tmp
20.12.2009 22:11 32.768 ~DFBBCF.tmp
20.12.2009 22:11 512 ~DFBAC5.tmp
20.12.2009 22:11 16.384 ~DFBAA0.tmp
20.12.2009 22:11 512 ~DFBA0F.tmp
20.12.2009 22:11 32.768 ~DFB990.tmp
20.12.2009 22:11 16.384 ~DF51E4.tmp
13.12.2009 19:23 1.274 PCULog3.txt
13.12.2009 18:01 1.274 PCULog2.txt
13.12.2009 16:41 28.672 ~DFB12D.tmp
13.12.2009 16:32 1.274 PCULog1.txt
13.12.2009 15:30 20.323 PCULog0.txt
13.12.2009 14:43 512 ~DF1C86.tmp
13.12.2009 14:43 32.768 ~DF1C6A.tmp
13.12.2009 14:43 512 ~DF1BD0.tmp
13.12.2009 14:43 32.768 ~DF1B2F.tmp
13.12.2009 14:43 512 ~DF1B4B.tmp
13.12.2009 14:43 16.384 ~DF1BB4.tmp
13.12.2009 14:43 16.384 ~DFA712.tmp
13.12.2009 13:37 0 ~2B.tmp
13.12.2009 13:25 540.160 240571.mst
13.12.2009 13:25 540.160 30a9a4.mst
13.12.2009 13:25 540.160 30a9a7.mst
13.12.2009 13:24 0 ~E.tmp
13.12.2009 13:23 0 ~7.tmp
11.12.2009 16:13 106.496 59080f.mst
11.12.2009 16:09 0 ~83.tmp
07.12.2009 20:55 0 is31E.tmp
07.12.2009 20:52 807.672 caevents.log
07.12.2009 20:50 0 is2C8.tmp
30.11.2009 18:20 10.225 TFR77.tmp
30.11.2009 18:20 67.560 TFR73.tmp
30.11.2009 18:20 21.122 TFR6F.tmp
15.11.2009 21:00 59.964 ~e5.0001
15.11.2009 21:00 30.156 filelist.txt
02.11.2009 20:44 548 MSI432e2.LOG
02.11.2009 10:29 20.560 TFR61.tmp
02.11.2009 10:29 40.950 TFR5F.tmp
02.11.2009 10:29 21.122 TFR5D.tmp
02.11.2009 10:29 59.218 TFR5B.tmp
02.11.2009 10:29 46.660 TFR59.tmp
02.11.2009 10:29 121.497 TFR55.tmp
02.11.2009 10:24 67.560 TFR51.tmp
02.11.2009 10:23 46.021 TFR4C.tmp
02.11.2009 10:19 71.682 TFR47.tmp
02.11.2009 10:19 23.427 TFR43.tmp
02.11.2009 10:17 10.225 TFR3F.tmp
27.10.2009 17:01 65.276 Mao8A.tmp
27.10.2009 16:56 65.276 Mao57.tmp
27.10.2009 16:20 40.950 TFR50.tmp
27.10.2009 00:36 35 Fritz-ChessBase-Temp.init
27.10.2009 00:36 127 Fritz-ChessBase-Temp.cbt
27.10.2009 00:36 90 Fritz-ChessBase-Temp.cbc
27.10.2009 00:36 92 Fritz-ChessBase-Temp.cit
27.10.2009 00:36 96 Fritz-ChessBase-Temp.cbs
27.10.2009 00:36 28 Fritz-ChessBase-Temp.cbe
27.10.2009 00:36 332 Fritz-ChessBase-Temp.cib
27.10.2009 00:36 162 Fritz-ChessBase-Temp.cbp
27.10.2009 00:36 32 Fritz-ChessBase-Temp.cbm
27.10.2009 00:36 130 Fritz-ChessBase-Temp.cba
27.10.2009 00:36 92 Fritz-ChessBase-Temp.cbh
27.10.2009 00:36 70 Fritz-ChessBase-Temp.cbj
27.10.2009 00:36 33 Fritz-ChessBase-Temp.cbg
26.10.2009 10:21 10.225 TFR42.tmp
26.10.2009 10:20 46.021 TFR3E.tmp
25.10.2009 15:59 67.994 TFR4B.tmp
17.10.2009 08:42 6.080 idapi.cnf
16.10.2009 11:48 10.225 TFR70.tmp
13.10.2009 19:18 2.082 f20b_appcompat.txt
11.10.2009 23:37 31.744 2834eb6.mst
03.10.2009 16:08 710 MSI22e88.LOG
22.09.2009 22:04 798.234 IMT5B.xml
22.09.2009 22:04 426 IMT5A.xml
22.09.2009 22:04 2.036 IMT59.xml
22.09.2009 22:04 798.234 IMT58.xml
22.09.2009 22:04 426 IMT57.xml
22.09.2009 22:04 2.036 IMT56.xml
22.09.2009 22:03 798.234 IMT55.xml
22.09.2009 22:03 426 IMT54.xml
22.09.2009 22:03 2.036 IMT53.xml
22.09.2009 22:02 1.022 IMT52.dtd
22.09.2009 22:02 2.794.308 IMT51.xml
22.09.2009 22:01 798.234 IMT50.xml
22.09.2009 22:01 426 IMT4F.xml
22.09.2009 22:01 2.036 IMT4E.xml
22.09.2009 21:59 798.234 IMT4D.xml
22.09.2009 21:59 426 IMT4C.xml
22.09.2009 21:59 2.036 IMT4B.xml
22.09.2009 21:56 798.234 IMT4A.xml
22.09.2009 21:56 426 IMT49.xml
22.09.2009 21:56 2.036 IMT48.xml
22.09.2009 21:56 798.234 IMT47.xml
22.09.2009 21:56 426 IMT46.xml
22.09.2009 21:56 2.036 IMT45.xml
22.09.2009 21:35 798.234 IMT3C.xml
22.09.2009 21:35 426 IMT3B.xml
22.09.2009 21:35 2.036 IMT3A.xml
21.09.2009 22:00 394.094 Norton Setup 11,0,1 9-21-2009 22h55m7s.log
21.09.2009 21:59 298 SNDunin.log
21.09.2009 21:59 4.346.372 Norton SystemWorks 9-21-2009 22h55m12s.log
21.09.2009 21:59 10.624 SYMEVENT.LOG
21.09.2009 21:55 390 PreScan.log
19.09.2009 09:48 81 dw.log
19.09.2009 09:16 46.660 TFR31.tmp
19.09.2009 08:46 16.384 ~DF2CF0.tmp
15.09.2009 23:13 16.384 ~DF8FF2.tmp
15.09.2009 21:15 512 ~DF8BE8.tmp
15.09.2009 21:15 32.768 ~DF8BB8.tmp
15.09.2009 21:15 512 ~DF8A47.tmp
15.09.2009 21:15 16.384 ~DF8A12.tmp
15.09.2009 21:15 512 ~DF8957.tmp
15.09.2009 21:15 32.768 ~DF8922.tmp
15.09.2009 21:15 16.384 ~DFE613.tmp
15.09.2009 21:15 16.384 ~DFD567.tmp
15.09.2009 08:29 20.560 TFR34.tmp
14.09.2009 23:44 16.384 ~DFACB8.tmp
13.09.2009 17:45 20 ~72.tmp
13.09.2009 17:45 0 ~65.tmp
13.09.2009 17:43 0 ~49.tmp
13.09.2009 15:43 106.496 11bdf.mst
13.09.2009 15:43 106.496 88120d.mst
13.09.2009 15:41 0 ~4E.tmp
13.09.2009 15:37 20 ~44.tmp
13.09.2009 15:37 0 ~34.tmp
13.09.2009 15:36 20 ~2A.tmp
13.09.2009 15:35 0 ~1A.tmp
12.09.2009 09:14 6.819.160 EAD2.exe
12.09.2009 09:14 0 EAD2.tmp
11.09.2009 22:47 6.819.160 EAD1.exe
11.09.2009 22:47 0 EAD1.tmp
04.09.2009 16:36 694.558 Norton Setup 15,0,0 9-4-2009 17h34m28s.log
04.09.2009 16:36 6.809.936 Norton AntiVirus 2008 Uninstall 9-4-2009 17h34m29s.log
15.08.2009 10:00 540.160 659d4e.mst:
Code:
ATTFilter 3D Skat 1.0
Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 10.0.32.18
Adobe Reader 9.1 - Deutsch Adobe Systems Incorporated 9.1.0
Aladdin
Ask.com Search Assistant 1.0.2 Ask.com 1.0.2
Asterix & Obelix XXL Ihr Firmenname 1.00.0000
Astérix & Obélix XXL2 Ihr Firmenname 1.00.0000
Bejeweled Deluxe 1.6z
CCleaner Piriform 2.27
Chessmaster Challenge (remove only)
DEUTSCHLAND SPIELT GAME CENTER
Die Wikinger 2
Die Wikinger 3: Auf Schatzsuche
Dynomite PopCap
EA Download Manager Electronic Arts, Inc. 5.1.0.4
EA downloader Electronic Arts 2.2.1.54
Electronic Arts Product Registration Electronic Arts 1.01.0000
Enable S3 for USB Device
Fritz 7 1.00.000
FUSSBALL MANAGER 07 - Verlängerung
FUSSBALL MANAGER 10 Electronic Arts 2.0.0.4
G Data InternetSecurity G Data Software AG 20.1.1.0
Harry Potter II
Harry Potter und der Halbblut-Prinz™ Electronic Arts 1.0.0.0
High Definition Audio Driver Package - KB835221 Microsoft Corporation 20040219.000000
HiJackThis Trend Micro 1.0.0
Mahjongg - Ancient Mayas cerasus.media GmbH
Messenger Plus! Live & Sponsor (CiD) Patchou 4.83.0.372
Microsoft .NET Framework 2.0 Service Pack 2 Microsoft Corporation 2.2.30729
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU Microsoft Corporation 2.2.30729
Microsoft .NET Framework 3.0 Service Pack 2 Microsoft Corporation 3.2.30729
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU Microsoft Corporation 3.2.30729
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation
Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Corporation 1
Microsoft DirectX Transform optional components
Microsoft Silverlight Microsoft Corporation 3.0.40818.0
Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Corporation
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 8.0.50727.4053
NVIDIA Drivers NVIDIA Corporation 1.3
PCI Audio Applications
PCI Audio Driver
REALTEK GbE & FE Ethernet PCI NIC Driver Realtek 1.08.0000
Schatzjäger phenomedia publishing gmbh
Schatzjäger 2 1.00.0000
Schatzjäger 3 1.00.0000
Skat 24 Second Edition v2.00.12 German
UltraISO Premium V9.2
Update für Windows XP (KB943729) Microsoft Corporation
VLC media player 1.0.2 VideoLAN Team 1.0.2
WER WIRD MILLIONÄR VIERTE EDITION Eidos 1.0.0.0000
Wer Wird Millionär? Party Edition Eidos 1.00.0000
Windows Genuine Advantage Validation Tool (KB892130) Microsoft Corporation
Windows Internet Explorer 8 Microsoft Corporation 20090308.140743
Windows Live Anmelde-Assistent Microsoft Corporation 5.000.818.5
Windows Live Essentials Microsoft Corporation 14.0.8089.0726
Windows Live-Uploadtool Microsoft Corporation 14.0.8014.1029
Windows Media Format 11 runtime
Windows Media Player 11
Windows-Treiberpaket - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) Advanced Micro Devices 05/27/2006 1.3.2.0
WordPerfect Office X3 Corel Corporation
Zuma Deluxe RA
Code:
ATTFilter Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.43 2009.12.29 Trojan.Win32.Obfuscated!IK
AhnLab-V3 5.0.0.2 2009.12.29 -
AntiVir 7.9.1.122 2009.12.29 -
Antiy-AVL 2.0.3.7 2009.12.29 -
Authentium 5.2.0.5 2009.12.29 -
Avast 4.8.1351.0 2009.12.29 -
AVG 8.5.0.430 2009.12.29 Downloader.Swizzor
BitDefender 7.2 2009.12.29 -
CAT-QuickHeal 10.00 2009.12.29 Win32.Trojan.Swizzor.c.4
ClamAV 0.94.1 2009.12.29 -
Comodo 3405 2009.12.29 -
DrWeb 5.0.1.12222 2009.12.29 Trojan.Swizzor.based
eSafe 7.0.17.0 2009.12.29 -
eTrust-Vet 35.1.7203 2009.12.29 -
F-Prot 4.5.1.85 2009.12.28 -
F-Secure 9.0.15370.0 2009.12.29 -
Fortinet 4.0.14.0 2009.12.29 -
GData 19 2009.12.29 -
Ikarus T3.1.1.79.0 2009.12.29 Trojan.Win32.Obfuscated
Jiangmin 13.0.900 2009.12.29 -
K7AntiVirus 7.10.932 2009.12.28 -
Kaspersky 7.0.0.125 2009.12.29 Trojan.Win32.Swizzor.c
McAfee 5846 2009.12.29 -
McAfee+Artemis 5846 2009.12.29 -
McAfee-GW-Edition 6.8.5 2009.12.29 -
Microsoft 1.5302 2009.12.29 Trojan:Win32/C2Lop.N
NOD32 4726 2009.12.29 a variant of Win32/TrojanDownloader.Swizzor.NDI
Norman 6.04.03 2009.12.29 -
nProtect 2009.1.8.0 2009.12.29 -
Panda 10.0.2.2 2009.12.15 -
PCTools 7.0.3.5 2009.12.29 Trojan.Obfuscated.a.gen
Prevx 3.0 2009.12.29 -
Rising 22.28.01.03 2009.12.29 -
Sophos 4.49.0 2009.12.29 -
Sunbelt 3.2.1858.2 2009.12.29 Trojan.Win32.Swizzor.c (v)
Symantec 1.4.4.12 2009.12.29 -
TheHacker 6.5.0.3.118 2009.12.29 -
TrendMicro 9.120.0.1004 2009.12.29 -
VBA32 3.12.12.1 2009.12.28 -
ViRobot 2009.12.29.2114 2009.12.29 -
VirusBuster 5.0.21.0 2009.12.29 Trojan.Swizzor.Gen!Pac.6
weitere Informationen
File size: 745472 bytes
MD5...: 4dbc0ff8b6c1f88015ca9b41d4378507
SHA1..: 40d9f91243bce8dcf62ee6530c995f02d7373ee0
SHA256: a335467d3305e9655754334c37b3eb190308b4926ff07faf798504f81cc28853
ssdeep: 12288:SkiQ0bpbuRmwgZKiJp6XXLMKn6necIb6RRQwvDQ6mN+pcUNZW:Sw0bpb1w
g/fkoEu7ZDTXpcUq
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x99a7
timedatestamp.....: 0x46e26138 (Sat Sep 08 08:45:44 2007)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1703c 0x18000 6.53 f037bafd5cae6c2518a68f066d1ea60c
.rdata 0x19000 0x75095 0x76000 7.96 9178a7ff648781f70a97bfbd691c293c
.data 0x8f000 0x1700c 0x18000 6.34 acc2bb069346bebb25fb237993da9c3c
.rsrc 0xa7000 0xe36c 0xf000 5.49 91d94f28aa7fd9b45e4d3b79c64e59e2
( 9 imports )
> kernel32.dll: GetProcessHeap, HeapFree, LCMapStringA, GetCurrentProcessId, CompareStringA, GetVersionExA, DeleteCriticalSection, GetDateFormatA, TlsFree, VirtualFree, CreateEventA, HeapReAlloc, HeapCreate, LeaveCriticalSection, LoadLibraryA, FreeEnvironmentStringsA, GetEnvironmentStrings, GetOEMCP, InterlockedIncrement, CloseHandle, CreateFileA, GlobalFree, IsValidLocale, Sleep, CompareStringW, GetLocaleInfoA, GetFileType, GetCurrentThread, RtlUnwind, SetConsoleCtrlHandler, GetTimeZoneInformation, SystemTimeToFileTime, FatalAppExitA, GetSystemDefaultLangID, DeleteFileA, UnhandledExceptionFilter, VirtualQuery, WriteConsoleW, IsValidCodePage, GetModuleHandleA, MultiByteToWideChar, SetHandleCount, GetModuleFileNameW, SetEndOfFile, QueryPerformanceCounter, CreateMutexA, GetSystemTimeAsFileTime, EnterCriticalSection, lstrcmpiA, SetEnvironmentVariableA, InterlockedDecrement, IsDebuggerPresent, GetCurrentProcess, TerminateProcess, GetStdHandle, VirtualAlloc, GetCurrentThreadId, ReadFile, GetEnvironmentStringsW, InterlockedExchange, GetFullPathNameA, GetUserDefaultLCID, WriteConsoleA, HeapSize, LocalFileTimeToFileTime, GetACP, InitializeCriticalSection, FlushFileBuffers, GetStringTypeW, GetTimeFormatA, GetCommandLineA, GetStringTypeA, GlobalGetAtomNameA, SetUnhandledExceptionFilter, HeapAlloc, GetStartupInfoA, GetLocalTime, GlobalLock, GetLocaleInfoW, GetConsoleOutputCP, GetCPInfo, TlsAlloc, SetFilePointer, WriteFile, WideCharToMultiByte, FreeEnvironmentStringsW, ExitProcess, GetFileSize, FreeLibrary, GetConsoleMode, EnumSystemLocalesA, GetEnvironmentVariableA, GetConsoleCP, GetModuleFileNameA, HeapDestroy, GetProcAddress, TlsGetValue, GetTickCount, TlsSetValue, SetStdHandle, SetLastError, GetLastError, LCMapStringW
> comctl32.dll: InitCommonControlsEx, CreatePropertySheetPageW, ImageList_AddMasked, ImageList_GetIcon, _TrackMouseEvent
> winmm.dll: mciGetErrorStringA, mixerOpen, waveOutClose, waveOutSetPlaybackRate, mixerSetControlDetails, waveOutPrepareHeader, mixerClose, waveOutGetVolume, mciSendStringA, waveOutWrite
> wininet.dll: FtpSetCurrentDirectoryA, FtpOpenFileA
> user32.dll: IsWindow, RegisterClassExA, EndDeferWindowPos, InflateRect, GetFocus, MoveWindow, GetMessageTime, WindowFromPoint, GetWindowPlacement, IsChild, GetUpdateRect, TabbedTextOutA, GetWindowLongA, SetTimer, AppendMenuA, CharNextA, GetCursorPos, SetWindowRgn, LoadMenuA, UnregisterClassA, GetKeyState, ReleaseCapture, GetWindow, ValidateRect, keybd_event, SetMenu, EnableWindow, GetPropA, GetDlgCtrlID, IsWindowVisible, AdjustWindowRectEx, DestroyMenu, ExcludeUpdateRgn, OpenClipboard, DrawIconEx, MapWindowPoints, GetClassNameA, CharUpperA, SetParent, MessageBeep, GetScrollPos, EnumWindows, GetTopWindow, DestroyWindow, TrackPopupMenuEx, SetWindowPos, DrawStateA, CheckMenuItem, IntersectRect, BeginPaint, CopyRect, RegisterClipboardFormatA, GetSystemMenu, FindWindowA, SetRectEmpty, ModifyMenuA, ShowWindow, SetCapture, IsDialogMessageA, SetRect, SetCursor, SetWindowLongA, GetParent, GetMenuItemCount, GetMenuItemInfoA, BeginDeferWindowPos, GetSystemMetrics, CallWindowProcA, InvalidateRect, PtInRect, CreateWindowExA, SetFocus, GetWindowRect, wsprintfA, SetClipboardData, SetWindowsHookExA, MapDialogRect, GetDlgItemInt, GetMessagePos, GetMenuItemID, PeekMessageA, ReleaseDC, GetForegroundWindow, GetMenu, GetNextDlgGroupItem, DeleteMenu, GetSysColor, SendDlgItemMessageA, EndDialog, OffsetRect, wvsprintfA, SendMessageA, IsWindowEnabled, GetWindowThreadProcessId, GetSubMenu, SetCursorPos, TranslateAcceleratorA, LoadBitmapA, SetScrollPos, InsertMenuA, LoadCursorA, CreateMenu, FlashWindow, GrayStringA, DrawEdge, KillTimer, TrackPopupMenu, SetScrollInfo, GetMenuStringA, SetPropA, EmptyClipboard, DefWindowProcA, CreatePopupMenu, EqualRect, CallNextHookEx, GetDlgItem, GetActiveWindow, DrawFocusRect, GetMessageA, UnionRect, DrawTextA, LoadAcceleratorsA, SetMenuDefaultItem, CreateDialogIndirectParamA, DrawIcon, SetForegroundWindow, EndPaint, GetMenuCheckMarkDimensions, DestroyCursor, MessageBoxA, IsMenu, DeferWindowPos, GetNextDlgTabItem, RegisterClassA, UnhookWindowsHookEx, BringWindowToTop, GetCapture, GetWindowDC, GetClientRect, GetLastActivePopup, LoadStringA, SetWindowTextA
> shell32.dll: -, DragFinish, SHGetPathFromIDListW
> oleaut32.dll: -
> advapi32.dll: OpenProcessToken, SetSecurityDescriptorDacl, RegQueryValueExA, RegSetValueExA, RegDeleteValueA, CloseServiceHandle, RegDeleteKeyA, InitializeSecurityDescriptor, RegCloseKey, RegQueryValueA, CreateServiceA, GetUserNameA, RegCreateKeyExA, RegOpenKeyA, ControlService, AllocateAndInitializeSid, RegEnumValueA, RegOpenKeyExA, OpenThreadToken, QueryServiceStatus, RegCreateKeyA, AdjustTokenPrivileges, RegEnumKeyA, OpenSCManagerA
> ole32.dll: OleInitialize, OleLoad, OleUninitialize, OleDuplicateData, CoGetClassObject
( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
sigcheck:
publisher....: Stage Receive
copyright....: Copyright (C) Stage Receive 2007. All rights reserved.
product......: Atal psays byiontis linker
description..: Aylor fail is inandi urebe
original name: T.exe
internal name: T
file version.: 2.6.0.2
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
trid..: Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
Die datei C:\DOKUME~1\Jenny\ANWEND~1\MEDIAS~1\audio loud plan.exe kann nicht gefunden werden |
| Themen zu Internet Explorer öffnet ständig Werbung |
| adobe, antivirus, bho, browseui preloader, dateisystem, dll, einstellungen, explorer, firewall, g data, hijack, hkus\s-1-5-18, internet, internet exploder, internet explorer, intrusion prevention, logfile, nvidia, object, programme, rundll, security, seiten, software, symantec, system, userinit.exe, werbung, werbungfenster, windows, windows xp, öffnet |
Baum-Darstellung