| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Antimaleware-Doctor-Attacke und troj/FakeAV-***Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.05.2010, 23:28
| #46 |
 |  Antimaleware-Doctor-Attacke und troj/FakeAV-*** gleichzeitig  |
|
07.05.2010, 23:30
| #47 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** meinst du das hat mit OTLPE noch eine chance?
__________________ |
|
07.05.2010, 23:30
| #48 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Antimaleware-Doctor-Attacke und troj/FakeAV-*** Es gab noch den Hinweis auf die kk.exe von kaspersky - da hab ich aber keine Erfahrung mit.
__________________Und der Tippgeber hatte natürlich kein vernünftiges howto geschrieben  Musst Du wissen ob Du noch mehr rumdoktorn willst oder lieber gleich ein format c: machst...
__________________ |
|
07.05.2010, 23:33
| #49 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** ich schlafe mal drüber. was ist das denn nun eigentlich, was der rechner hat? |
|
07.05.2010, 23:35
| #50 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Antimaleware-Doctor-Attacke und troj/FakeAV-*** Scheint neue Malware zu sein, zumindest die eine Datei ist recht unbekannt. https://www.virustotal.com/de/analis...b81-1273263304 https://www.virustotal.com/de/analis...b93-1273263330
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
07.05.2010, 23:38
| #51 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** oje... falls ich mich für OTLPE entscheide, geht das, dass ich das iso mit dem mac erstelle? |
|
07.05.2010, 23:40
| #52 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Antimaleware-Doctor-Attacke und troj/FakeAV-*** Klar kannst Du die ISO mitm Mac erstellen. Ist ja ein CD Abbild was 1:1 gebrannt wird, mit welchem Betriebssystem das gemacht wird ist irrelevant.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
07.05.2010, 23:46
| #53 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** gut, ich überleg mal bis morgen, ob ich noch lust habe, rumzudoktern. glücklicherweise habe ich ja einen funktionierenden rechner. wie schätzt du denn die erwähnte gefahr für die anderne rechner im netz ein? auf jeden fall schon mal ein herzliches  |
|
07.05.2010, 23:58
| #54 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Antimaleware-Doctor-Attacke und troj/FakeAV-***Zitat:
Dann ist auch die Frage ob die doch rel. neue Malware neue/unbekannte Funktionen hat bzw. sich übers Netzwerk überhaupt so verbreiten kann. Wenn ja, sollte man tunlichst hoffen, dass die anderen Kisten alle gepatcht sind  denn Virenscanner sind hier ziemlich machtlos wenn man sich das erste Virustotal-Ergebnis anschaut: 9 von 40 Scannern haben nur was gefunden!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.05.2010, 00:06
| #55 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** Auf dem Mac ist OS X 10.6.3, Softwareaktualisierungen führe ich regelmäßig durch. Was heißt denn gepatcht?  Mehr Sorgen mache ich mir auch um den zweiten Windowsrechner, der noch im Netz ist, bisher aber keine Symptome zeigt. Windows-updates sollte der eigentlich auch regelmäßig durchführen (das war beim kranken rechner aber auch eingestellt) ... |
|
08.05.2010, 00:12
| #56 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Antimaleware-Doctor-Attacke und troj/FakeAV-***Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.05.2010, 00:15
| #57 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** Ähm, danke, wird mal wieder deutlich, dass ich doch weitgehend Laie bin ... |
|
08.05.2010, 15:46
| #58 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** So, ich habe mich nun doch entschieden OTLPE laufen zu lassen, war gar nicht so kompliziert, weil der Mac das Programm zum brennen der ISO-Datei ja schon hat! Nur die blöden At-jobs sind immer noch da  die vermehren sich, wie das Unkraut in meinem Garten! Die log-Datei ist in zwei teilen, ist zu lang zum posten und ließ sich nicht bei Fileupload hochladen. Außerdem habe ich kk.exe laufen lassen, eine Anleitung gabs im Netz. Hat rein gar nichts gefunden (und ich habe kein Protokoll gefunden)! Windows-updates sind alle installiert (war aber schon die ganze Zeit, habe ich nur nochmal kontrolliert, Windows-Firewall ist ebenfalls aktiv. Da mir wohl nichts anderes übrig bleibt, als den Rechner neu aufzusetzen, würde ich gern noch einige Dateien sichern. Wird der Virus/Wurm/Malware dann mit auf die externe Festplatte übertragen? Viele Grüße Anke Teil 1: OTL logfile created on: 5/8/2010 4:41:22 PM - Run OTLPE by OldTimer - Version 3.1.38.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 7.0.5730.11) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,022.00 Mb Total Physical Memory | 800.00 Mb Available Physical Memory | 78.00% Memory free 906.00 Mb Paging File | 839.00 Mb Available in Paging File | 93.00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 82.62 Gb Total Space | 31.13 Gb Free Space | 37.68% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive X: | 276.80 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO Current User Name: SYSTEM Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 90 Days Output = Standard Using ControlSet: ControlSet001 ========== Win32 Services (SafeList) ========== SRV - [2009/11/02 03:45:56 | 000,080,936 | ---- | M] (Sophos Plc) [Auto] -- c:\Programme\Sophos\Sophos Anti-Virus\SAVAdminService.exe -- (SAVAdminService) SRV - [2009/07/01 13:38:07 | 000,172,032 | ---- | M] (Sophos Plc) [Auto] -- c:\Programme\Sophos\AutoUpdate\ALsvc.exe -- (Sophos AutoUpdate Service) SRV - [2008/11/03 20:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2008/10/01 04:56:34 | 000,098,304 | ---- | M] (Sophos Plc) [Auto] -- c:\Programme\Sophos\Sophos Anti-Virus\SavService.exe -- (SAVService) SRV - [2006/11/10 04:46:26 | 001,504,304 | ---- | M] (Cisco Systems, Inc.) [Auto] -- C:\Programme\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND) SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2006/07/21 04:51:38 | 000,057,344 | ---- | M] () [Auto] -- C:\Programme\Samsung\Samsung Update Plus\SLUBackgroundService.exe -- (Samsung Update Plus) SRV - [2006/01/20 05:20:00 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Auto] -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe -- (LightScribeService) SRV - [2005/11/28 06:06:02 | 000,031,744 | ---- | M] (SRS Labs, Inc.) [Auto] -- C:\Programme\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe -- (SRS_PostInstaller) SRV - [2005/11/13 19:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2005/05/28 02:35:56 | 000,036,864 | R--- | M] () [Auto] -- C:\Programme\samsung\Samsung Network Manager\SNMWLANService.exe -- (SNM WLAN Service) SRV - [2005/01/14 03:32:38 | 000,053,248 | ---- | M] () [Auto] -- C:\WINDOWS\system32\PAStiSvc.exe -- (STI Simulator) SRV - [2003/06/19 18:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | On_Demand] -- -- (USBAAPL) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | Auto] -- -- (FBAPI) DRV - File not found [Kernel | System] -- -- (Changer) DRV - File not found [Kernel | On_Demand] -- -- (catchme) DRV - File not found [Kernel | Auto] -- -- (ASCTRM) DRV - [2010/04/27 11:30:10 | 000,061,440 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System] -- C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2010/02/17 05:25:50 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System] -- C:\Programme\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2009/02/26 08:34:37 | 000,038,528 | ---- | M] (Sophos Plc) [File_System | System] -- C:\WINDOWS\system32\drivers\savonaccessfilter.sys -- (SAVOnAccessFilter) DRV - [2009/02/26 08:34:22 | 000,110,848 | ---- | M] (Sophos Plc) [File_System | System] -- C:\WINDOWS\system32\drivers\savonaccesscontrol.sys -- (SAVOnAccessControl) DRV - [2008/10/01 04:59:01 | 000,014,976 | ---- | M] (Sophos Plc) [Kernel | Disabled] -- C:\WINDOWS\system32\drivers\SophosBootDriver.sys -- (SophosBootDriver) DRV - [2008/04/13 14:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp) DRV - [2008/04/13 12:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007/10/12 14:16:20 | 000,006,912 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NTIDrvr.sys -- (NTIDrvr) DRV - [2007/09/27 15:45:34 | 000,271,360 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2007/09/27 15:45:33 | 000,018,048 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2007/06/19 12:51:39 | 000,108,768 | ---- | M] (Protect Software GmbH) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ACEDRV08.sys -- (ACEDRV08) DRV - [2006/11/10 04:44:52 | 000,305,788 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\CVPNDRVA.sys -- (CVPNDRVA) DRV - [2006/10/02 11:45:40 | 000,126,864 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE) DRV - [2006/05/30 06:02:54 | 000,165,248 | ---- | M] (CyberLink Corporation.) [File_System | Auto] -- C:\WINDOWS\system32\drivers\BsUDF.sys -- (BsUDF) DRV - [2006/05/30 06:02:54 | 000,010,112 | ---- | M] (Cyberlink Co.,Ltd.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\BsStor.sys -- (BsStor) DRV - [2006/05/17 06:03:24 | 000,044,544 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2006/01/15 22:15:24 | 000,470,112 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SSB2413.sys -- (SSB2413) DRV - [2005/12/12 19:08:44 | 001,124,097 | ---- | M] (Agere Systems) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2005/12/08 13:53:00 | 003,611,168 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2005/12/04 18:55:30 | 001,428,096 | ---- | M] (Intel® Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R) DRV - [2005/12/02 09:01:28 | 000,328,141 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2005/12/02 08:59:20 | 000,023,271 | ---- | M] (Broadcom Corporation.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL) DRV - [2005/12/02 08:57:48 | 000,854,826 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2005/12/02 08:54:56 | 000,030,363 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2005/12/02 08:54:14 | 000,065,016 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2005/12/02 08:51:28 | 000,148,488 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2005/11/28 06:06:22 | 000,019,456 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WOWFilter.sys -- (wowfilter) DRV - [2005/11/16 14:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2005/11/01 12:08:00 | 000,308,992 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2005/11/01 11:54:50 | 000,051,584 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2005/10/27 00:18:05 | 000,004,300 | R--- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO) DRV - [2005/10/25 12:49:16 | 000,140,288 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService) DRV - [2005/07/21 20:12:34 | 000,134,272 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k) DRV - [2005/05/24 09:26:02 | 000,019,840 | R--- | M] (Samsung) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SUE_PD.sys -- (SUEPD) DRV - [2005/05/16 22:51:34 | 000,005,315 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CVirtA.sys -- (CVirtA) DRV - [2005/02/24 06:29:14 | 000,162,176 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PFC027.sys -- (PAC207) DRV - [2005/02/02 14:58:58 | 000,191,456 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2005/01/26 01:22:20 | 000,280,344 | ---- | M] (Zone Labs LLC) [Kernel | On_Demand] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant) DRV - [2005/01/07 11:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004/05/18 17:43:58 | 000,043,512 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\system32\drivers\RITCPT.SYS -- (RITCPT) DRV - [2003/02/14 07:52:28 | 000,017,648 | ---- | M] (ASIX Electronics Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AX88172.sys -- (AX88172) DRV - [2002/04/03 06:09:16 | 000,049,457 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\FTSER2K.SYS -- (FTSER2K) DRV - [2002/04/03 06:09:14 | 000,018,102 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\FTDIBUS.SYS -- (FTDIBUS) DRV - [2001/08/17 22:22:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde) DRV - [2001/08/17 08:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow) DRV - [2001/08/17 08:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3) DRV - [2001/08/17 08:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi) DRV - [2001/08/17 08:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx) DRV - [2001/08/17 08:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810) DRV - [2001/08/17 07:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra) DRV - [2001/08/17 07:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160) DRV - [2001/08/17 07:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080) DRV - [2001/08/17 07:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280) DRV - [2001/08/17 07:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k) DRV - [2001/08/17 07:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x) DRV - [2001/08/17 07:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc) DRV - [2001/08/17 07:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\a1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://de.ask.com?o=15015&l=dis IE - HKU\a1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\a1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\anke_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hf.uni-koeln.de/ IE - HKU\anke_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Fabi_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Gast_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\worst_case_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.spiegel.de/" FF - prefs.js..extensions.enabledItems: {097d3191-e6fa-4728-9826-b533d755359d}:0.7.11 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: isreaditlater@ideashower.com:2.0.6 FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.3.20100310105313 FF - prefs.js..extensions.enabledItems: {02ffb056-3abb-320b-d592-c3921c590a22}:4.6.6.6 FF - prefs.js..keyword.URL: "http://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=DVSV5&o=15012&locale=de_DE&q=" FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009/06/17 14:55:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010/05/03 12:37:07 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010/05/03 12:37:06 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010/04/15 18:47:59 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2009/12/06 09:21:26 | 000,000,000 | ---D | M] [2008/09/04 03:52:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\mozilla\Extensions [2010/05/07 16:25:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\mozilla\Firefox\Profiles\8m27lqq2.default\extensions [2010/04/16 02:17:24 | 000,000,000 | ---D | M] (All-in-One Sidebar) -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\mozilla\Firefox\Profiles\8m27lqq2.default\extensions\{097d3191-e6fa-4728-9826-b533d755359d} [2010/04/16 02:17:30 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\mozilla\Firefox\Profiles\8m27lqq2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2010/04/16 02:17:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\mozilla\Firefox\Profiles\8m27lqq2.default\extensions\isreaditlater@ideashower.com [2010/02/04 10:45:40 | 000,002,254 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\askcom.xml [2010/05/03 12:31:18 | 000,000,961 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-1.xml [2008/07/06 17:16:36 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-2.xml [2008/07/09 08:32:33 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-3.xml [2008/08/02 06:21:16 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-4.xml [2008/08/07 14:10:41 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-5.xml [2008/08/11 12:16:27 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-6.xml [2008/08/22 16:09:44 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-7.xml [2008/08/24 12:25:43 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-8.xml [2008/08/25 04:52:40 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin-9.xml [2008/04/25 13:10:00 | 000,000,962 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mozilla\FireFox\Profiles\8m27lqq2.default\searchplugins\icqplugin.xml [2010/05/07 16:25:21 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010/04/26 11:25:27 | 000,000,000 | ---D | M] (z) -- C:\Programme\Mozilla Firefox\extensions\{02ffb056-3abb-320b-d592-c3921c590a22} [2010/05/03 12:37:01 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010/05/03 12:37:01 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010/05/03 12:37:01 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010/05/03 12:37:01 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010/05/03 12:37:01 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010/05/07 18:00:06 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Sophos Web Content Scanner) - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - c:\Programme\Sophos\Sophos Anti-Virus\SophosBHO.dll (Sophos Plc) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll () O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKU\a1_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKU\a1_ON_C\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\anke_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKU\anke_ON_C\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\Fabi_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKU\Fabi_ON_C\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\Gast_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKU\worst_case_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O4 - HKLM..\Run: [Acrobat Assistant 7.0] C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe () O4 - HKLM..\Run: [CanonMyPrinter] C:\Programme\Canon\MyPrinter\BJMyPrt.exe (CANON INC.) O4 - HKLM..\Run: [CanonSolutionMenu] C:\Programme\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.) O4 - HKLM..\Run: [DisplayManager] C:\Programme\SAMSUNG\DisplayManager\DMLoader.exe () O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Programme\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [QuickTime Task] C:\Programme\QuickTime\QTTask .exe File not found O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe () O4 - HKLM..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] File not found O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Acrobat - Schnellstart.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe () O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoUpdate Monitor.lnk = C:\Programme\Sophos\AutoUpdate\ALMon.exe (Sophos Plc) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk = C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\MindManager PDF Writer.lnk = C:\Programme\Mindjet\MindManager 5\sys\PDF\GER\W2K\PDFSaver.exe (Tracker Software Products) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\VPN Client.lnk = C:\WINDOWS\Installer\{176130BC-99A1-41FE-A78B-56045E33AD70}\Icon3E5562ED7.ico () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\a1_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\a1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\a1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\a1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\anke_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\anke_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Fabi_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\Fabi_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Gast_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\Gast_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\worst_case_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\worst_case_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Easy-WebPrint - Drucken - C:\Programme\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - C:\Programme\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: Easy-WebPrint - Vorschau - C:\Programme\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - C:\Programme\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: In vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Senden an &Bluetooth-Gerät... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKU\Fabi_ON_C Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Programme\SUPERAntiSpyware\SASWINLO.dll - C:\Programme\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/04/05 07:49:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 90 Days ========== [2010/05/08 05:51:56 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\a1\Recent [2010/05/07 18:09:11 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\NetworkService\Cookies [2010/05/07 17:24:11 | 000,000,000 | ---D | C] -- C:\cofi [2010/05/07 14:54:45 | 000,000,000 | ---D | C] -- C:\Avenger [2010/05/04 17:40:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Online Solutions [2010/05/03 13:17:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\a1\Desktop\osam_autorun_manager_5_0_portable [2010/05/01 14:50:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\SUPERAntiSpyware.com [2010/05/01 14:50:06 | 000,000,000 | ---D | C] -- C:\Programme\SUPERAntiSpyware [2010/05/01 14:48:20 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard [2010/05/01 09:47:21 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010/05/01 09:44:03 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010/05/01 09:44:03 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010/05/01 09:44:03 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010/05/01 09:44:03 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010/05/01 09:43:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010/05/01 09:42:49 | 000,000,000 | ---D | C] -- C:\Qoobox [2010/05/01 09:25:27 | 003,382,520 | ---- | C] (Piriform Ltd) -- C:\Dokumente und Einstellungen\a1\Desktop\ccsetup231.exe [2010/04/30 18:37:45 | 000,000,000 | ---D | C] -- C:\_OTL [2010/04/29 16:18:08 | 000,563,712 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\a1\Desktop\OTL.exe [2010/04/28 08:29:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Malwarebytes [2010/04/27 17:26:43 | 000,000,000 | ---D | C] -- C:\Programme\trend micro [2010/04/27 17:26:42 | 000,000,000 | ---D | C] -- C:\rsit [2010/04/27 17:16:35 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Fabi\Recent [2010/04/27 17:09:56 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner [2010/04/27 13:48:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Lokale Einstellungen\Anwendungsdaten\Sophos [2010/04/27 11:06:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\Malwarebytes [2010/04/27 11:06:14 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/04/27 11:06:12 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/04/27 11:06:12 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010/04/27 08:52:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel [2010/04/25 16:57:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Lokale Einstellungen\Anwendungsdaten\Microsoft Help [2010/04/25 13:18:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\AdobeUM [2010/04/25 12:51:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Desktop\oOo German HipHop Tua - Stille DE (2010) - NOiR by [2010/04/25 12:45:19 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2010/04/19 10:33:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\Downloads [2010/04/13 12:54:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Desktop\Neuer Ordner [2010/03/11 12:28:29 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe [2010/03/06 16:20:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\Meine empfangenen Dateien [2010/03/06 14:52:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Tracing [2010/03/06 14:48:09 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft [2010/03/06 14:47:48 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live SkyDrive [2010/03/06 14:47:23 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live [2010/03/06 14:44:56 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Windows Live [2010/03/04 14:10:20 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010/03/03 15:11:39 | 000,130,104 | ---- | C] (Sophos Plc) -- C:\WINDOWS\System32\sdccoinstaller.dll [2010/02/28 09:25:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Desktop\Psychospiel beatz [2010/02/16 12:10:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\EndNote [2010/02/07 17:35:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Desktop\Bilder [2010/02/07 17:24:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabi\Desktop\Musik [1999/10/27 12:20:06 | 000,557,328 | ---- | C] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\DAO360.DLL ========== Files - Modified Within 90 Days ========== [2010/05/08 09:31:16 | 000,262,144 | ---- | M] () -- C:\Dokumente und Einstellungen\NetworkService\NTUSER.DAT [2010/05/08 09:31:16 | 000,262,144 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\NTUSER.DAT [2010/05/08 09:31:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/05/08 09:30:53 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/05/08 09:30:08 | 1071,828,992 | -HS- | M] () -- C:\hiberfil.sys [2010/05/08 09:23:54 | 008,912,896 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\NTUSER.DAT [2010/05/08 09:23:54 | 000,000,300 | -HS- | M] () -- C:\Dokumente und Einstellungen\a1\ntuser.ini [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At336.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At335.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At334.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At333.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At332.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At331.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At330.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At329.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At328.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At327.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At326.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At325.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At324.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At323.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At322.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At321.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At320.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At319.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At318.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At317.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At316.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At315.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At314.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\tasks\At313.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At312.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At311.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At310.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At309.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At308.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At307.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At306.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At305.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At304.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At303.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At302.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At301.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At300.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At299.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At298.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At297.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At296.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At295.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At294.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At293.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At292.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At291.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At290.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At289.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At288.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At287.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At286.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At285.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At284.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At283.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At282.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At281.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At280.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At279.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At278.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At277.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At276.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At275.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At274.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At273.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At272.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At271.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At270.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At269.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At268.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At267.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At266.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\At265.job [2010/05/08 09:21:35 | 000,043,616 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010/05/08 09:21:32 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/05/08 09:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At79.job [2010/05/08 09:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At78.job [2010/05/08 09:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At77.job [2010/05/08 09:09:01 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At70.job [2010/05/08 06:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At64.job [2010/05/08 06:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At63.job [2010/05/08 06:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At62.job [2010/05/08 06:09:03 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At55.job [2010/05/08 05:59:29 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010/05/08 05:52:42 | 000,005,516 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100508_115237.reg [2010/05/08 05:21:11 | 000,164,352 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\kk.zip [2010/05/08 05:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At59.job [2010/05/08 05:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At58.job [2010/05/08 05:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At57.job [2010/05/08 05:09:03 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At50.job [2010/05/07 19:09:02 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At9.job [2010/05/07 19:09:02 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At6.job [2010/05/07 19:09:02 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At3.job [2010/05/07 19:09:00 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At10.job [2010/05/07 18:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At5.job [2010/05/07 18:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At4.job [2010/05/07 18:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At2.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At99.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At98.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At97.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At94.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At119.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At117.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At116.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At114.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At113.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At112.job [2010/05/07 18:00:53 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At95.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At93.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At92.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At89.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At88.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At87.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At84.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At83.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At82.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At74.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At73.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At72.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At109.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At108.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At107.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At104.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At103.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At102.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At90.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At85.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At80.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At75.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At110.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At105.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At100.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At69.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At68.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At67.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At54.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At53.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At52.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At49.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At48.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At47.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At44.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At43.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At42.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At39.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At38.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At37.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At34.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At33.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At32.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At65.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At60.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At45.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At40.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At35.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At29.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At28.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At27.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At25.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At23.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At22.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At20.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At18.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At17.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At15.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At13.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At11.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At30.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At26.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At21.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At16.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At12.job [2010/05/07 18:00:49 | 000,000,344 | ---- | M] () -- C:\WINDOWS\tasks\At7.job [2010/05/07 18:00:06 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010/05/07 17:21:16 | 000,000,706 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100507_232112.reg [2010/05/07 17:20:50 | 000,006,896 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100507_232018.reg [2010/05/07 17:17:59 | 003,684,182 | R--- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\cofi.exe [2010/05/07 14:45:50 | 000,724,952 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\avenger.zip [2010/05/05 16:35:13 | 000,046,328 | ---- | M] () -- C:\debug [2010/05/04 17:46:27 | 000,004,580 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\osam3.html [2010/05/04 01:23:50 | 000,000,956 | ---- | M] () -- C:\WINDOWS\win.ini [2010/05/03 13:23:38 | 000,104,358 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\osam.html [2010/05/03 13:15:26 | 004,272,474 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\osam_autorun_manager_5_0_portable.rar [2010/05/01 14:46:42 | 008,050,208 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\SUPERAntiSpyware.exe [2010/05/01 13:18:56 | 000,293,376 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\5l9rhqgi.exe [2010/05/01 09:47:29 | 000,000,281 | RHS- | M] () -- C:\boot.ini [2010/05/01 09:36:29 | 000,097,502 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100501_153525.reg [2010/05/01 09:31:45 | 000,001,512 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Desktop\CCleaner.lnk [2010/05/01 09:30:19 | 000,069,440 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010/05/01 09:25:28 | 003,382,520 | ---- | M] (Piriform Ltd) -- C:\Dokumente und Einstellungen\a1\Desktop\ccsetup231.exe [2010/04/30 18:33:22 | 000,035,844 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Lokale Einstellungen\Anwendungsdaten\kks637.exe [2010/04/30 18:33:22 | 000,035,844 | ---- | M] () -- C:\WINDOWS\System32\kks637.com [2010/04/30 18:33:22 | 000,035,844 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\kks637.com [2010/04/30 12:53:56 | 004,194,304 | -H-- | M] () -- C:\Dokumente und Einstellungen\Fabi\NTUSER.DAT [2010/04/30 12:53:56 | 000,000,300 | -HS- | M] () -- C:\Dokumente und Einstellungen\Fabi\ntuser.ini [2010/04/29 16:18:09 | 000,563,712 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\a1\Desktop\OTL.exe [2010/04/29 09:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/04/29 09:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/04/27 17:25:24 | 000,781,909 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\RSIT.exe [2010/04/27 17:20:11 | 000,000,402 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\cc_20100427_232007.reg [2010/04/27 17:19:50 | 000,003,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\cc_20100427_231945.reg [2010/04/27 17:19:27 | 000,117,124 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\cc_20100427_231834.reg [2010/04/27 17:09:57 | 000,001,512 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\CCleaner.lnk [2010/04/27 13:55:59 | 000,069,440 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010/04/27 13:39:47 | 001,558,216 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/04/27 10:08:07 | 001,572,864 | -H-- | M] () -- C:\Dokumente und Einstellungen\worst case\NTUSER.DAT [2010/04/27 10:08:07 | 001,572,864 | -H-- | M] () -- C:\Dokumente und Einstellungen\anke\NTUSER.DAT [2010/04/27 10:08:07 | 001,310,720 | -H-- | M] () -- C:\Dokumente und Einstellungen\Gast\NTUSER.DAT [2010/04/26 09:58:12 | 000,256,512 | ---- | M] () -- C:\WINDOWS\PEV.exe [2010/04/25 18:44:16 | 001,315,402 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\amerikanisch revolution.pptx [2010/04/23 17:06:12 | 004,920,827 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\das leere bild.mp3 [2010/04/20 09:54:47 | 004,769,920 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\B.o.B ft. Eminem & Hayley Williams - Airplanes Part 2.mp3 [2010/04/19 18:07:11 | 000,736,864 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010/04/19 18:07:11 | 000,321,606 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010/04/19 18:07:11 | 000,315,850 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/04/19 18:07:11 | 000,050,046 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010/04/19 18:07:11 | 000,041,508 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010/04/19 17:30:04 | 000,934,016 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Scrubs Sad Melody Original Hq.mp3 [2010/04/19 14:33:00 | 000,007,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/04/19 14:32:23 | 004,051,072 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\KIZ Feat. Bela B. - Hölle.mp3 [2010/04/19 14:29:13 | 003,819,648 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\K.I.Z Hurensohn Remix.mp3 [2010/04/19 14:17:38 | 004,192,384 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\K.i.z.-Geld Essen.mp3 [2010/04/19 14:14:15 | 000,000,906 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\DVDVideoSoft Free Studio.lnk [2010/04/18 05:47:26 | 002,532,877 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Bis ich vergesse.MP3 [2010/04/15 18:38:31 | 001,227,776 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\essen_indive_koenig_16_04_2010.ppt [2010/04/15 18:37:29 | 003,196,416 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\indive Abschlusstagung_Vortrag_ende.ppt [2010/04/15 18:36:28 | 000,804,377 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\10_04_16 _ R+_ EssenExperten_Joosten.pdf [2010/04/15 18:36:14 | 001,224,593 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\10_04_16 KompProfilAC_EssenExperten_Joosten.pdf [2010/04/11 16:42:16 | 002,406,107 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Shituation_2.mp3 [2010/04/11 13:43:26 | 005,775,067 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\SixJune__-_checkno_beat_www.rappers.in.mp3 [2010/04/11 13:23:30 | 004,644,697 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\BX_Dok_-_Intro_Remake_www.rappers.in.mp3 [2010/04/05 07:50:32 | 004,500,292 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\KrasnicSound_-_Intro_Beat_www.rappers.in.mp3 [2010/04/04 17:01:45 | 007,458,816 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\the other promise.mp3 [2010/04/02 18:03:00 | 005,013,504 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Pirates of the Caribbean House Remix.mp3 [2010/04/01 13:03:02 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2010/04/01 02:36:56 | 000,951,332 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\02_anleitung_est_2007_bmf.pdf [2010/04/01 02:36:32 | 000,049,099 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\20_anlage_gse_2007_bmf.pdf [2010/04/01 02:36:19 | 000,029,955 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\12_anlage_kind_2007_bmf.pdf [2010/04/01 02:36:15 | 000,043,571 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\10_anlage_n_2007_bmf.pdf [2010/03/31 20:01:25 | 000,002,120 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\ESt_1_A_2007_Mantelbogen.xml [2010/03/31 19:48:31 | 000,051,588 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\01_est_mantelbogen_2007_bmf(2).pdf [2010/03/31 19:33:30 | 000,051,588 | ---- | M] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\01_est_mantelbogen_2007_bmf.pdf [2010/03/30 06:01:53 | 002,356,498 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Asozial.MP3 [2010/03/23 15:30:13 | 002,192,867 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Masko_-_300_Intro_www.rappers.in.mp3 [2010/03/22 14:09:56 | 005,026,607 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\ROB_Beatz_-_Intro_2010_www.rappers.in.mp3 [2010/03/22 14:09:30 | 000,012,077 | -HS- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Folder.jpg [2010/03/22 14:09:30 | 000,012,077 | -HS- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\AlbumArt_{74F01E08-977B-4997-A471-509253BEDB62}_Large.jpg [2010/03/22 14:09:30 | 000,002,702 | -HS- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\AlbumArtSmall.jpg [2010/03/22 14:09:30 | 000,002,702 | -HS- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\AlbumArt_{74F01E08-977B-4997-A471-509253BEDB62}_Small.jpg [2010/03/22 14:07:43 | 005,834,566 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Taifun_Beats_-_Royal_Salute_Re-up_www.rappers.in.mp3 [2010/03/22 13:53:41 | 001,902,720 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Shock_Master_-_INTRO_BEAT_VOTEN_www.rappers.in.mp3 [2010/03/22 13:37:25 | 003,936,883 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\MonoTony_-_The_One_(VORAB)_des_ding_wird_bombe_freu_mich_schon_drauf_weiter_zu_bauen_ALLE_anhoeren_BOSS_sample_www.rappers.in.mp3 [2010/03/21 16:28:24 | 006,875,136 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Mass Effect 2 OST - 25 - Suicide Mission.mp3 [2010/03/13 08:52:28 | 005,235,900 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\SixJune__-_outro_beat_www.rappers.in.mp3 [2010/03/11 08:31:33 | 001,168,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll [2010/03/11 08:31:33 | 000,832,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll [2010/03/11 08:31:33 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\webcheck.dll [2010/03/11 08:31:32 | 003,599,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll [2010/03/11 08:31:32 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll [2010/03/11 08:31:32 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll [2010/03/11 08:31:32 | 000,477,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll [2010/03/11 08:31:32 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msrating.dll [2010/03/11 08:31:32 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msrating.dll [2010/03/11 08:31:32 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll [2010/03/11 08:31:32 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll [2010/03/11 08:31:32 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll [2010/03/11 08:31:32 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\pngfilt.dll [2010/03/11 08:31:32 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pngfilt.dll [2010/03/11 08:31:31 | 000,459,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll [2010/03/11 08:31:31 | 000,459,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2010/03/11 08:31:31 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll [2010/03/11 08:31:31 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2010/03/11 08:31:30 | 001,830,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl [2010/03/11 08:31:30 | 001,830,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl [2010/03/11 08:31:30 | 000,268,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2010/03/11 08:31:30 | 000,192,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll [2010/03/11 08:31:30 | 000,192,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll [2010/03/11 08:31:30 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iernonce.dll [2010/03/11 08:31:30 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iernonce.dll [2010/03/11 08:31:30 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll [2010/03/11 08:31:30 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll [2010/03/11 08:31:29 | 006,067,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2010/03/11 08:31:28 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll [2010/03/11 08:31:28 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll [2010/03/11 08:31:28 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieencode.dll [2010/03/11 08:31:28 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieencode.dll [2010/03/11 08:31:27 | 000,380,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll [2010/03/11 08:31:27 | 000,380,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dll [2010/03/11 08:31:27 | 000,230,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieaksie.dll [2010/03/11 08:31:27 | 000,230,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieaksie.dll [2010/03/11 08:31:27 | 000,214,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtrans.dll [2010/03/11 08:31:27 | 000,214,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtrans.dll [2010/03/11 08:31:27 | 000,153,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieakeng.dll [2010/03/11 08:31:27 | 000,153,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieakeng.dll [2010/03/11 08:31:27 | 000,133,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\extmgr.dll [2010/03/11 08:31:27 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icardie.dll [2010/03/11 08:31:26 | 000,347,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtmsft.dll [2010/03/11 08:31:26 | 000,347,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxtmsft.dll [2010/03/11 08:31:26 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\advpack.dll [2010/03/11 08:31:26 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\corpol.dll [2010/03/11 08:31:26 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\corpol.dll [2010/03/10 09:18:17 | 000,389,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec [2010/03/10 09:17:51 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe [2010/03/10 09:17:51 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe [2010/03/10 09:17:51 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieudinit.exe [2010/03/10 09:17:51 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieudinit.exe [2010/03/09 07:09:28 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\vbscript.dll [2010/03/09 07:09:28 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vbscript.dll [2010/03/07 08:17:22 | 007,180,288 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Pat Woods - Poor Lonesome Cowboy (Lucky Luke theme).mp3 [2010/03/06 18:28:55 | 007,219,871 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\speranza.mp3 [2010/03/06 13:46:05 | 003,829,073 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\SixJune__-_inflame_beat_www.rappers.in.mp3 [2010/03/06 13:37:59 | 004,513,821 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\taliban_istic.mp3 [2010/03/06 13:32:45 | 005,007,822 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Monster.mp3 [2010/02/24 09:11:07 | 000,455,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2010/02/23 01:20:02 | 000,634,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe [2010/02/23 01:18:28 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieakui.dll [2010/02/23 01:18:28 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieakui.dll [2010/02/17 08:04:26 | 002,192,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2010/02/16 15:04:25 | 002,069,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe [2010/02/16 15:04:17 | 002,148,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntoskrnl.exe [2010/02/16 15:04:17 | 002,148,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2010/02/16 15:04:17 | 002,027,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2010/02/16 15:04:17 | 002,027,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntkrnlpa.exe [2010/02/16 12:27:43 | 006,676,416 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Heavy Rain OST Ethan Mars Theme.mp3 [2010/02/16 12:09:54 | 000,000,400 | ---- | M] () -- C:\WINDOWS\ODBC.INI [2010/02/16 07:13:50 | 004,919,296 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Casper feat. MontanaMax - Propeller RMX.mp3 [2010/02/15 04:30:36 | 003,355,839 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\einfach besser(1).MP3 [2010/02/14 17:50:47 | 002,980,929 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Nicht mal eine Träne.MP3 [2010/02/13 17:55:22 | 005,111,808 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Eiffel 65 - Move Your Body.mp3 [2010/02/12 06:03:03 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2010/02/12 00:33:08 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\6to4svc.dll [2010/02/11 08:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip6.sys [2010/02/11 08:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcpip6.sys |
|
08.05.2010, 15:47
| #59 |
| | Antimaleware-Doctor-Attacke und troj/FakeAV-*** Teil 2: ========== Files Created - No Company Name ========== [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At336.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At335.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At334.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At333.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At332.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At331.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At330.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At329.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At328.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At327.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At326.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At325.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At324.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At323.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At322.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At321.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At320.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At319.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At318.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At317.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At316.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At315.job [2010/05/08 09:21:58 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At314.job [2010/05/08 09:21:57 | 000,035,844 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\kks637.com [2010/05/08 09:21:57 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At312.job [2010/05/08 09:21:57 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At311.job [2010/05/08 09:21:57 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At310.job [2010/05/08 09:21:57 | 000,000,378 | ---- | C] () -- C:\WINDOWS\tasks\At313.job [2010/05/08 09:21:56 | 000,035,844 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Lokale Einstellungen\Anwendungsdaten\kks637.exe [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At288.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At287.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At286.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At285.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At284.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At283.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At282.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At281.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At280.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At279.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At278.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At277.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At276.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At275.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At274.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At273.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At272.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At271.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At270.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At269.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At268.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At267.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At266.job [2010/05/08 09:21:56 | 000,000,452 | ---- | C] () -- C:\WINDOWS\tasks\At265.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At309.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At308.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At307.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At306.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At305.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At304.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At303.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At302.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At301.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At300.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At299.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At298.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At297.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At296.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At295.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At294.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At293.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At292.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At291.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At290.job [2010/05/08 09:21:56 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At289.job [2010/05/08 05:52:40 | 000,005,516 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100508_115237.reg [2010/05/08 05:21:09 | 000,164,352 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\kk.zip [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At99.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At98.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At97.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At94.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At93.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At92.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At89.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At88.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At87.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At119.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At117.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At116.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At114.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At113.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At112.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At109.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At108.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At107.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At104.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At103.job [2010/05/07 18:00:52 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At102.job [2010/05/07 18:00:52 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At95.job [2010/05/07 18:00:52 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At90.job [2010/05/07 18:00:52 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At110.job [2010/05/07 18:00:52 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At105.job [2010/05/07 18:00:52 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At100.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At84.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At83.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At82.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At79.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At78.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At77.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At74.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At73.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At72.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At69.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At68.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At67.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At64.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At63.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At62.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At59.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At58.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At57.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At54.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At53.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At52.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At49.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At48.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At47.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At44.job [2010/05/07 18:00:51 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At43.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At85.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At80.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At75.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At70.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At65.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At60.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At55.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At50.job [2010/05/07 18:00:51 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At45.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At42.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At39.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At38.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At37.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At34.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At33.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At32.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At29.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At28.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At27.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At25.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At23.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At22.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At20.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At18.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At17.job [2010/05/07 18:00:50 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At15.job [2010/05/07 18:00:50 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At40.job [2010/05/07 18:00:50 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At35.job [2010/05/07 18:00:50 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At30.job [2010/05/07 18:00:50 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At26.job [2010/05/07 18:00:50 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At21.job [2010/05/07 18:00:50 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At16.job [2010/05/07 18:00:49 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At9.job [2010/05/07 18:00:49 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At13.job [2010/05/07 18:00:49 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At11.job [2010/05/07 18:00:49 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At10.job [2010/05/07 18:00:49 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At12.job [2010/05/07 18:00:48 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At6.job [2010/05/07 18:00:48 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At5.job [2010/05/07 18:00:48 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At4.job [2010/05/07 18:00:48 | 000,000,350 | ---- | C] () -- C:\WINDOWS\tasks\At2.job [2010/05/07 18:00:48 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At7.job [2010/05/07 18:00:48 | 000,000,344 | ---- | C] () -- C:\WINDOWS\tasks\At3.job [2010/05/07 18:00:47 | 000,035,844 | ---- | C] () -- C:\WINDOWS\System32\kks637.com [2010/05/07 18:00:47 | 000,035,844 | ---- | C] () -- C:\WINDOWS\Fonts\kks637.com [2010/05/07 17:21:14 | 000,000,706 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100507_232112.reg [2010/05/07 17:20:41 | 000,006,896 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100507_232018.reg [2010/05/07 17:17:59 | 003,684,182 | R--- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\cofi.exe [2010/05/07 14:46:45 | 000,731,136 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\avenger.exe [2010/05/07 14:45:43 | 000,724,952 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\avenger.zip [2010/05/05 16:35:13 | 000,046,328 | ---- | C] () -- C:\debug [2010/05/04 17:46:27 | 000,004,580 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\osam3.html [2010/05/03 13:23:38 | 000,104,358 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\osam.html [2010/05/01 14:46:30 | 008,050,208 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\SUPERAntiSpyware.exe [2010/05/01 13:21:51 | 004,272,474 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\osam_autorun_manager_5_0_portable.rar [2010/05/01 13:18:55 | 000,293,376 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\5l9rhqgi.exe [2010/05/01 09:47:29 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2010/05/01 09:47:24 | 000,262,448 | ---- | C] () -- C:\cmldr [2010/05/01 09:44:03 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010/05/01 09:44:03 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010/05/01 09:44:03 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010/05/01 09:44:03 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010/05/01 09:44:03 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010/05/01 09:36:25 | 000,097,502 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\cc_20100501_153525.reg [2010/05/01 09:31:45 | 000,001,512 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Desktop\CCleaner.lnk [2010/04/27 17:25:24 | 000,781,909 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\RSIT.exe [2010/04/27 17:20:08 | 000,000,402 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\cc_20100427_232007.reg [2010/04/27 17:19:48 | 000,003,056 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\cc_20100427_231945.reg [2010/04/27 17:18:42 | 000,117,124 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Eigene Dateien\cc_20100427_231834.reg [2010/04/27 17:09:57 | 000,001,512 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\CCleaner.lnk [2010/04/27 00:55:14 | 1071,828,992 | -HS- | C] () -- C:\hiberfil.sys [2010/04/25 15:55:15 | 001,315,402 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\amerikanisch revolution.pptx [2010/04/25 12:51:47 | 004,920,827 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\das leere bild.mp3 [2010/04/20 09:54:25 | 004,769,920 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\B.o.B ft. Eminem & Hayley Williams - Airplanes Part 2.mp3 [2010/04/19 17:29:59 | 000,934,016 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Scrubs Sad Melody Original Hq.mp3 [2010/04/19 14:32:12 | 004,051,072 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\KIZ Feat. Bela B. - Hölle.mp3 [2010/04/19 14:28:57 | 003,819,648 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\K.I.Z Hurensohn Remix.mp3 [2010/04/19 14:17:20 | 004,192,384 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\K.i.z.-Geld Essen.mp3 [2010/04/19 14:14:10 | 000,000,906 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\DVDVideoSoft Free Studio.lnk [2010/04/15 18:38:31 | 001,227,776 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\essen_indive_koenig_16_04_2010.ppt [2010/04/15 18:37:28 | 003,196,416 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\indive Abschlusstagung_Vortrag_ende.ppt [2010/04/15 18:36:28 | 000,804,377 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\10_04_16 _ R+_ EssenExperten_Joosten.pdf [2010/04/15 18:36:11 | 001,224,593 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\10_04_16 KompProfilAC_EssenExperten_Joosten.pdf [2010/04/04 15:30:47 | 007,458,816 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\the other promise.mp3 [2010/04/02 13:23:29 | 005,013,504 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Pirates of the Caribbean House Remix.mp3 [2010/04/01 02:36:54 | 000,951,332 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\02_anleitung_est_2007_bmf.pdf [2010/04/01 02:36:32 | 000,049,099 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\20_anlage_gse_2007_bmf.pdf [2010/04/01 02:36:19 | 000,029,955 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\12_anlage_kind_2007_bmf.pdf [2010/04/01 02:36:14 | 000,043,571 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\10_anlage_n_2007_bmf.pdf [2010/03/31 20:01:23 | 000,002,120 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\ESt_1_A_2007_Mantelbogen.xml [2010/03/31 19:48:30 | 000,051,588 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\01_est_mantelbogen_2007_bmf(2).pdf [2010/03/31 19:33:29 | 000,051,588 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Eigene Dateien\01_est_mantelbogen_2007_bmf.pdf [2010/03/28 17:39:30 | 002,356,498 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Asozial.MP3 [2010/03/22 14:09:30 | 000,012,077 | -HS- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Folder.jpg [2010/03/22 14:09:30 | 000,012,077 | -HS- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\AlbumArt_{74F01E08-977B-4997-A471-509253BEDB62}_Large.jpg [2010/03/22 14:09:30 | 000,002,702 | -HS- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\AlbumArtSmall.jpg [2010/03/22 14:09:30 | 000,002,702 | -HS- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\AlbumArt_{74F01E08-977B-4997-A471-509253BEDB62}_Small.jpg [2010/03/22 14:07:35 | 005,834,566 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Taifun_Beats_-_Royal_Salute_Re-up_www.rappers.in.mp3 [2010/03/22 14:03:16 | 004,644,697 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\BX_Dok_-_Intro_Remake_www.rappers.in.mp3 [2010/03/22 13:57:08 | 004,500,292 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\KrasnicSound_-_Intro_Beat_www.rappers.in.mp3 [2010/03/22 13:56:04 | 002,192,867 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Masko_-_300_Intro_www.rappers.in.mp3 [2010/03/22 13:53:35 | 001,902,720 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Shock_Master_-_INTRO_BEAT_VOTEN_www.rappers.in.mp3 [2010/03/22 13:49:38 | 005,026,607 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\ROB_Beatz_-_Intro_2010_www.rappers.in.mp3 [2010/03/21 14:21:44 | 006,875,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Mass Effect 2 OST - 25 - Suicide Mission.mp3 [2010/03/13 12:21:27 | 002,532,877 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Bis ich vergesse.MP3 [2010/03/07 08:17:01 | 007,180,288 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Pat Woods - Poor Lonesome Cowboy (Lucky Luke theme).mp3 [2010/03/06 13:47:16 | 005,775,067 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\SixJune__-_checkno_beat_www.rappers.in.mp3 [2010/03/06 13:45:54 | 003,829,073 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\SixJune__-_inflame_beat_www.rappers.in.mp3 [2010/03/06 13:41:37 | 007,219,871 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\speranza.mp3 [2010/03/06 13:37:51 | 004,513,821 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\taliban_istic.mp3 [2010/03/06 13:32:38 | 005,007,822 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Monster.mp3 [2010/02/16 10:55:51 | 006,676,416 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Heavy Rain OST Ethan Mars Theme.mp3 [2010/02/16 07:13:36 | 004,919,296 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Casper feat. MontanaMax - Propeller RMX.mp3 [2010/02/14 14:11:49 | 002,980,929 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Nicht mal eine Träne.MP3 [2010/02/14 06:47:21 | 008,711,359 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Cracks Beat.MP3 [2010/02/13 17:46:25 | 005,111,808 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\Eiffel 65 - Move Your Body.mp3 [2010/02/09 16:32:06 | 005,235,900 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\SixJune__-_outro_beat_www.rappers.in.mp3 [2010/02/09 16:12:46 | 003,936,883 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Desktop\MonoTony_-_The_One_(VORAB)_des_ding_wird_bombe_freu_mich_schon_drauf_weiter_zu_bauen_ALLE_anhoeren_BOSS_sample_www.rappers.in.mp3 [2009/10/09 14:36:12 | 000,007,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabi\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/10/09 10:48:27 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\Fabi_KBD.ini [2009/10/09 10:47:22 | 000,008,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\Fabi\ntuser.dat.LOG [2009/10/09 10:47:22 | 000,000,300 | -HS- | C] () -- C:\Dokumente und Einstellungen\Fabi\ntuser.ini [2009/10/09 10:47:21 | 004,194,304 | -H-- | C] () -- C:\Dokumente und Einstellungen\Fabi\NTUSER.DAT [2009/07/27 05:53:06 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2009/02/22 14:10:01 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth2.dll [2009/02/22 14:10:01 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth1.dll [2009/02/22 14:10:01 | 000,000,100 | ---- | C] () -- C:\WINDOWS\System32\prsgrc.dll [2008/10/16 06:54:54 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\CNCFLfNL.DLL [2008/09/29 03:51:48 | 001,310,720 | -H-- | C] () -- C:\Dokumente und Einstellungen\Gast\NTUSER.DAT [2008/09/29 03:51:48 | 000,008,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\Gast\ntuser.dat.LOG [2008/09/29 03:51:48 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\Gast\ntuser.ini [2008/05/26 16:22:25 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll [2008/05/26 16:22:25 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll [2008/05/26 16:18:23 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll [2008/05/26 16:18:23 | 000,000,205 | ---- | C] () -- C:\WINDOWS\System32\lsprst7.dll [2008/01/02 20:59:30 | 000,000,043 | ---- | C] () -- C:\WINDOWS\gswin32.ini [2007/12/18 17:33:54 | 000,011,380 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\gsview32.ini [2007/10/12 16:56:52 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [2007/10/12 14:16:21 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK32.dll [2007/09/27 15:45:34 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2007/09/27 15:45:33 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2007/09/15 04:06:12 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\worst case_KBD.ini [2007/06/09 04:09:08 | 001,572,864 | -H-- | C] () -- C:\Dokumente und Einstellungen\anke\NTUSER.DAT [2007/06/09 04:09:08 | 000,008,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\anke\ntuser.dat.LOG [2007/06/09 04:09:08 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\anke\ntuser.ini [2007/05/21 10:20:29 | 001,572,864 | -H-- | C] () -- C:\Dokumente und Einstellungen\worst case\NTUSER.DAT [2007/05/21 10:20:29 | 000,008,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\worst case\ntuser.dat.LOG [2007/05/21 10:20:29 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\worst case\ntuser.ini [2007/04/13 05:30:13 | 000,000,092 | ---- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini [2007/03/08 05:50:07 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI [2007/02/06 08:53:47 | 000,042,496 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007/02/04 06:17:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI [2007/02/04 06:13:22 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\CNMVS64.DLL [2007/02/04 06:08:44 | 000,290,919 | ---- | C] () -- C:\WINDOWS\System32\pythoncom21.dll [2007/02/04 06:08:44 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\PyWinTypes21.dll [2007/02/04 06:06:49 | 000,096,768 | ---- | C] () -- C:\WINDOWS\SlantAdj.dll [2007/02/04 06:06:49 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\epDPE.ini [2007/02/04 06:05:05 | 000,000,130 | ---- | C] () -- C:\WINDOWS\EPSON Perfection 1670G.ini [2007/02/03 19:36:31 | 000,001,520 | ---- | C] () -- C:\WINDOWS\System32\a1_KBD.ini [2007/02/03 19:36:11 | 008,912,896 | ---- | C] () -- C:\Dokumente und Einstellungen\a1\NTUSER.DAT [2007/02/03 19:36:11 | 000,598,016 | -H-- | C] () -- C:\Dokumente und Einstellungen\a1\ntuser.dat.LOG [2007/02/03 19:36:11 | 000,000,300 | -HS- | C] () -- C:\Dokumente und Einstellungen\a1\ntuser.ini [2007/02/03 15:06:31 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2006/11/23 02:33:16 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2006/11/10 04:46:36 | 000,197,680 | ---- | C] () -- C:\WINDOWS\System32\vpnapi.dll [2006/11/10 04:46:24 | 000,193,584 | ---- | C] () -- C:\WINDOWS\System32\CSGina.dll [2006/05/22 21:58:19 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006/05/22 21:58:19 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006/05/22 21:58:19 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006/05/22 21:58:19 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006/05/22 21:58:18 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2006/05/22 13:07:49 | 000,000,135 | R--- | C] () -- C:\WINDOWS\System32\lngEng.ini [2006/05/22 13:07:49 | 000,000,117 | ---- | C] () -- C:\WINDOWS\System32\lngKor.ini [2006/05/22 13:07:46 | 000,043,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\RITCPT.SYS [2006/05/22 13:06:48 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\MagicKBD.INI [2006/05/22 13:06:46 | 000,003,425 | ---- | C] () -- C:\WINDOWS\System32\KBDR.INI [2006/05/22 13:06:46 | 000,002,741 | ---- | C] () -- C:\WINDOWS\System32\KBDD.INI [2006/05/22 13:06:46 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDO.INI [2006/05/22 13:06:46 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDC.INI [2006/05/22 13:06:46 | 000,002,606 | ---- | C] () -- C:\WINDOWS\System32\KBDB.INI [2006/05/22 13:06:46 | 000,002,236 | ---- | C] () -- C:\WINDOWS\System32\KBDQ.INI [2006/05/22 13:06:46 | 000,001,956 | ---- | C] () -- C:\WINDOWS\System32\KBDE.INI [2006/05/22 13:06:46 | 000,001,885 | ---- | C] () -- C:\WINDOWS\System32\KBDP.INI [2006/05/22 13:06:46 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDG.INI [2006/05/22 13:06:46 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDA.INI [2006/05/22 13:06:46 | 000,001,834 | ---- | C] () -- C:\WINDOWS\System32\KBDU.INI [2006/05/22 13:06:46 | 000,001,819 | ---- | C] () -- C:\WINDOWS\System32\KBDN.INI [2006/05/22 13:06:46 | 000,001,699 | ---- | C] () -- C:\WINDOWS\System32\KBDT.INI [2006/05/22 13:06:46 | 000,001,697 | ---- | C] () -- C:\WINDOWS\System32\KBDV.INI [2006/05/22 13:06:46 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\KBDS.INI [2006/05/22 13:06:46 | 000,001,476 | ---- | C] () -- C:\WINDOWS\System32\KBDF.INI [2006/05/22 13:06:03 | 000,000,508 | ---- | C] () -- C:\WINDOWS\SamsungBluetooth.ini [2006/05/22 13:04:00 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll [2006/04/05 16:32:43 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2006/04/05 08:16:23 | 000,004,300 | R--- | C] () -- C:\WINDOWS\System32\MEMIO.SYS [2006/04/05 07:55:53 | 000,000,020 | -HS- | C] () -- C:\Dokumente und Einstellungen\LocalService\ntuser.ini [2006/04/05 07:55:52 | 000,262,144 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\NTUSER.DAT [2006/04/05 07:55:52 | 000,008,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\LocalService\ntuser.dat.LOG [2006/04/05 07:55:51 | 000,000,020 | -HS- | C] () -- C:\Dokumente und Einstellungen\NetworkService\ntuser.ini [2006/04/05 07:55:50 | 000,262,144 | ---- | C] () -- C:\Dokumente und Einstellungen\NetworkService\NTUSER.DAT [2006/04/05 07:55:50 | 000,008,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\NetworkService\ntuser.dat.LOG [2006/01/25 09:00:50 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\AVSAudioAmp.dll [2006/01/25 09:00:50 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\AVSAudioWideStereoDMO.dll [2005/12/02 09:14:56 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll [2005/11/28 06:06:22 | 000,038,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWXT_kern_i386.sys [2005/11/28 06:06:22 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWFilter.sys [2005/11/28 06:06:20 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys [2005/02/24 06:29:14 | 000,162,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\PFC027.sys [2005/02/17 06:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest [2005/02/17 06:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest [2005/01/25 09:15:42 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\PA207USD.DLL [2003/02/20 12:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2001/12/26 10:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001/11/14 07:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll [2001/09/03 17:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001/07/31 03:17:12 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL [2001/07/30 10:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001/07/23 16:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [1998/06/30 10:12:50 | 000,073,184 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Dao2535.tlb ========== LOP Check ========== [2009/04/16 03:12:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Canon [2010/04/27 05:47:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\EndNote [2007/03/08 05:50:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\EPSON [2008/04/27 07:51:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\ICQ [2007/02/04 11:36:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\MAXqda2 [2008/12/11 15:08:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\MAXQDA2007 [2007/02/04 11:00:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Mindjet [2010/05/04 17:40:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Online Solutions [2007/06/09 04:19:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\SlySoft [2007/03/08 05:57:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Smart Panel [2007/02/03 14:17:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\a1\Anwendungsdaten\Thunderbird [2010/04/27 10:19:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\EndNote [2010/04/25 12:57:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\ICQ [2009/10/09 11:46:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\ImgBurn [2009/12/15 16:13:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabi\Anwendungsdaten\Thunderbird [2010/05/07 19:09:00 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At100.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At102.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At103.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At104.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At105.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At107.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At108.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At109.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At110.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At112.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At113.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At114.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At116.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At117.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At119.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job [2010/05/07 18:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At265.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At266.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At267.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At268.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At269.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At270.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At271.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At272.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At273.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At274.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At275.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At276.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At277.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At278.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At279.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At280.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At281.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At282.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At283.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At284.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At285.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At286.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At287.job [2010/05/08 09:21:56 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\At288.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At289.job [2010/05/07 18:00:50 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At290.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At291.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At292.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At293.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At294.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At295.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At296.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At297.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At298.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At299.job [2010/05/07 19:09:02 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job [2010/05/07 18:00:50 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At300.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At301.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At302.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At303.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At304.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At305.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At306.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At307.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At308.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At309.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At310.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At311.job [2010/05/08 09:21:57 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At312.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At313.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At314.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At315.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At316.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At317.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At318.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At319.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At320.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At321.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At322.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At323.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At324.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At325.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At326.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At327.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At328.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At329.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At330.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At331.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At332.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At333.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At334.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At335.job [2010/05/08 09:21:58 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\At336.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job [2010/05/07 18:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At49.job [2010/05/07 18:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job [2010/05/08 05:09:03 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At50.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At52.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At53.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At54.job [2010/05/08 06:09:03 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At55.job [2010/05/08 05:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At57.job [2010/05/08 05:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At58.job [2010/05/08 05:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At59.job [2010/05/07 19:09:02 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At60.job [2010/05/08 06:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At62.job [2010/05/08 06:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At63.job [2010/05/08 06:09:03 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At64.job [2010/05/07 18:00:51 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At65.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At67.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At68.job [2010/05/07 18:00:51 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At69.job [2010/05/07 18:00:49 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job [2010/05/08 09:09:01 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At70.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At72.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At73.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At74.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At75.job [2010/05/08 09:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At77.job [2010/05/08 09:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At78.job [2010/05/08 09:09:01 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At79.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At80.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At82.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At83.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At84.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At85.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At87.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At88.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At89.job [2010/05/07 19:09:02 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job [2010/05/07 18:00:52 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At90.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At92.job [2010/05/07 18:00:52 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At93.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At94.job [2010/05/07 18:00:53 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\At95.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At97.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At98.job [2010/05/07 18:00:53 | 000,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At99.job ========== Purity Check ========== < End of report > |
|
09.05.2010, 15:06
| #60 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Antimaleware-Doctor-Attacke und troj/FakeAV-*** So. Starte nochmal von der OTLPE-CD und mach wie gewohnt den OTL-Fix, benutz dazu diesen Text: Code:
ATTFilter :OTL
O4 - HKLM..\Run: [QuickTime Task] C:\Programme\QuickTime\QTTask .exe File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Acrobat - Schnellstart.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
:Files
c:\windows\tasks\at*.job
C:\WINDOWS\Fonts\kks637.com
C:\WINDOWS\Fonts\kks637.exe
C:\WINDOWS\Fonts\*.com
C:\WINDOWS\Fonts\*.exe
C:\Dokumente und Einstellungen\a1\Lokale Einstellungen\Anwendungsdaten\kks637.exe
C:\Dokumente und Einstellungen\a1\Lokale Einstellungen\Anwendungsdaten\kks637.com
C:\WINDOWS\System32\kks637.com
C:\WINDOWS\System32\kks637.exe
C:\Dokumente und Einstellungen\a1\kks637.com
C:\Dokumente und Einstellungen\a1\kks637.exe
Such bitte mal manuell mit der Suchfunktion ob Du auf der Platte weitere diese kks.. Dateien und at-Jobs findest. Sollte nichts mehr auffindbar sein, Windows wieder normal starten und neues OTL Log erstellen + posten
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Antimaleware-Doctor-Attacke und troj/FakeAV-*** |
| adobe, adware.adrotator, adware.agent, adware.ezlife, anti malware, antimalware doctor, ap manager, apmanager.exe, browser, canon, components, converter, desktop, diagnostics, einstellungen, excel, firefox, firefox.exe, frage, gebraucht, hdaudio.sys, helper, hijack, hijackthis, hilfe!!, hkus\s-1-5-18, home, immer noch probleme, install.exe, log-files, loswerden, mozilla, pdf-datei, plug-in, registry, rogue.agent, rogue.antimalwaredoctor, rundll, schutz, skype.exe, software, sophos, super, svchost.exe, symantec, temp, troj/fakeav-***, trojan.downloader, trojan.fraudtool, trojan.hiloti, trojaner, windows xp, zu lang, zwei trojaner |
Linear-Darstellung
