TrojanDownloader:Win32/Bubnix.A & Co. Problem :(

OTL logfile created on: 17.05.2010 20:40:06 - Run 2
OTL by OldTimer - Version 3.2.4.1     Folder = C:\Dokumente und Einstellungen\Privat\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.015,00 Mb Total Physical Memory | 467,00 Mb Available Physical Memory | 46,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 37,27 Gb Total Space | 16,60 Gb Free Space | 44,55% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: PRIVAT-3F5AF5D5
Current User Name: Privat
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
PRC - C:\Programme\Microsoft Security Essentials\msseces.exe (Microsoft Corporation)
PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - c:\Programme\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Live\Toolbar\wltuser.exe (Microsoft Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe (Realtek Semiconductor Corp.)
PRC - C:\Programme\Lexmark 5200 Series\lxbtbmon.exe (Lexmark International, Inc.)
PRC - C:\Programme\Lexmark 5200 Series\lxbtbmgr.exe (Lexmark International, Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (Lavasoft Ad-Aware Service) --  File not found
SRV - (FLEXnet Licensing Service) -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (TuneUp.Defrag) -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)
SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation)
SRV - (SeaPort) -- C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (SNMP) -- C:\WINDOWS\system32\snmp.exe (Microsoft Corporation)
SRV - (lxbt_device) -- C:\WINDOWS\System32\lxbtcoms.exe (Lexmark International, Inc.)
SRV - (SoundMAX Agent Service (default)) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (MpFilter) -- C:\WINDOWS\system32\drivers\MpFilter.sys (Microsoft Corporation)
DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (lbrtfdc) -- C:\WINDOWS\system32\drivers\lbrtfdc.sys (Toshiba Corp.)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (RTLWUSB) -- C:\WINDOWS\system32\drivers\rtl8187.sys (Realtek Semiconductor Corporation                           )
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\hdaudio.sys (Windows (R) Server 2003 DDK provider)
DRV - (kbfilter) -- C:\WINDOWS\system32\drivers\kbfilter.sys (WayTech Development, Inc.)
DRV - (EL90XBC) -- C:\WINDOWS\system32\drivers\el90xbc5.sys (3Com Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.playground.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 55 07 9B 10 60 94 CA 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
 
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.4\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.04.03 05:41:17 | 000,000,000 | ---D | M]
 
[2010.03.24 01:59:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Mozilla\Extensions
[2010.03.24 01:59:54 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.02.23 21:44:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Mozilla\Firefox\Profiles\vd3ba4ff.default\extensions
[2010.02.23 21:44:52 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Mozilla\Firefox\Profiles\vd3ba4ff.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
 
O1 HOSTS File: ([2001.08.23 16:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Programme\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [FaxCenterServer] C:\Programme\Lexmark Fax Solutions\fm3032.exe ()
O4 - HKLM..\Run: [Lexmark 5200 series] C:\Programme\Lexmark 5200 series\lxbtbmgr.exe (Lexmark International, Inc.)
O4 - HKLM..\Run: [LXBTCATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTtime.DLL (Lexmark International, Inc.)
O4 - HKLM..\Run: [MSSE] c:\Programme\Microsoft Security Essentials\msseces.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Thunderbird] C:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\REALTEK USB Wireless LAN Utility.lnk = C:\Programme\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe (Realtek Semiconductor Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} hxxp://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab (F-Secure Online Scanner Launcher)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1252856007562 (MUCatalogWebControl Class)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} hxxp://download.bitdefender.com/resources/scanner/sources/de/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1248904348578 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} hxxp://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab (PhotoPickConvert Class)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} hxxp://service.futuremark.com/virtualmark/tc/FMSI.cab (Futuremark SystemInfo)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.11.09 12:21:37 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.05.15 16:28:01 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe
[2010.05.14 18:55:47 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Privat\Recent
[2010.05.14 17:16:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Yahoo! Companion
[2010.05.14 16:07:23 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.05.14 16:07:17 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.05.14 16:07:16 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2010.05.14 16:06:03 | 006,153,648 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Privat\Desktop\mbam-setup.exe
[2010.05.14 15:12:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Kaspersky Lab
[2010.05.14 12:07:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~0
[2010.05.14 12:05:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Lavasoft
[2010.05.14 09:42:51 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\drivers\lbrtfdc.sys
[2010.05.14 09:42:51 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2010.05.14 09:42:13 | 000,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2010.05.12 01:13:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\HDGraph
[2010.05.12 01:12:44 | 000,000,000 | ---D | C] -- C:\Programme\HDGraph
[2010.05.10 18:57:19 | 000,049,152 | ---- | C] (Blue Sky Software Corporation.) -- C:\WINDOWS\System32\INETWH32.DLL
[2010.05.10 18:57:18 | 001,056,768 | ---- | C] (Blue Sky Software Corporation.) -- C:\WINDOWS\System32\ROBOEX32.DLL
[2010.05.10 18:57:06 | 000,000,000 | ---D | C] -- C:\Programme\NetObjects
[2010.05.05 11:23:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Desktop\SumatraPDFPortable
[2010.05.04 22:40:51 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Futuremark Shared
[2010.05.04 19:59:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\SOFTWARE
[2010.05.04 19:45:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\SumatraPDFPortable
[2010.05.04 14:35:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\PDF Software
[2010.05.04 14:34:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\PDF Software
[2010.05.03 23:04:34 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Security Essentials
[2010.05.03 21:58:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2010.05.02 02:00:47 | 000,000,000 | ---D | C] -- C:\Programme\Paint.NET
[2010.05.02 02:00:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\Paint.NET
[2010.04.25 16:53:58 | 000,323,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaaut.dll
[2010.04.25 03:52:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\DoctorWeb
[2010.04.25 00:03:02 | 000,018,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010.04.24 18:19:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\BDOSCAN8
[2010.04.23 23:25:51 | 000,000,000 | ---D | C] -- C:\Programme\ChromePlus
[2010.04.22 12:27:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\PCHealth
[2009.08.20 14:50:54 | 000,151,552 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2std.dll
[2009.08.20 14:50:54 | 000,077,824 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2std.dll
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.05.17 20:29:32 | 000,000,572 | ---- | M] () -- C:\WINDOWS\tasks\Automatische Problemsuche.job
[2010.05.17 16:06:04 | 000,004,732 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 16:05:42 | 000,015,227 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 16:01:01 | 000,014,423 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 15:59:54 | 000,003,072 | -H-- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 15:59:44 | 000,018,432 | -H-- | M] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\
[2010.05.17 03:08:27 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010.05.16 11:50:09 | 000,000,400 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010.05.16 11:45:22 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.16 11:44:53 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.16 11:44:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.16 11:43:54 | 005,505,024 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\ntuser.dat
[2010.05.16 11:43:54 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Privat\ntuser.ini
[2010.05.15 16:28:13 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe
[2010.05.14 16:07:49 | 006,153,648 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Privat\Desktop\mbam-setup.exe
[2010.05.14 01:32:24 | 000,096,768 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 20:23:46 | 000,002,392 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 20:09:05 | 000,002,301 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 18:13:35 | 000,045,568 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 17:18:43 | 000,004,019 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.12 20:20:03 | 000,043,008 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.12 15:21:20 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.05.11 22:24:30 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.05.11 20:21:26 | 004,877,934 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.11 19:34:26 | 000,010,240 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.11 19:13:26 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010.05.08 05:30:07 | 000,001,044 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.05.06 10:36:38 | 000,221,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2010.05.03 14:27:33 | 000,002,957 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\x_dtrace_log
[2010.05.03 14:14:02 | 000,000,014 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\getfile.dat
[2010.05.03 02:03:54 | 000,024,741 | ---- | M] () -- C:\WINDOWS\System32\x_dtrace_log
[2010.05.03 02:03:54 | 000,000,014 | ---- | M] () -- C:\WINDOWS\System32\getfile.dat
[2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.04.29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.04.25 22:42:23 | 000,044,378 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\Bild 2 210 Kopie.jpg
[2010.04.25 16:53:58 | 000,323,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaaut.dll
[2010.04.25 00:02:40 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.04.25 00:02:40 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.05.17 16:08:50 | 000,015,227 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 16:07:09 | 000,004,732 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 16:01:01 | 000,014,423 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.17 15:59:50 | 000,003,072 | -H-- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.14 09:40:19 | 000,000,016 | ---- | C] () -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\wqhtpi.dat
[2010.05.14 01:32:23 | 000,096,768 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 20:02:09 | 000,002,392 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 18:13:34 | 000,045,568 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.13 17:18:58 | 000,002,301 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.12 20:25:33 | 000,004,019 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.12 20:20:02 | 000,043,008 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.11 19:13:26 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010.05.11 19:13:26 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2010.05.10 17:48:46 | 004,877,934 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\
[2010.05.04 18:49:16 | 002,234,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\TeamViewerQS.exe
[2010.05.03 23:10:02 | 000,000,400 | -H-- | C] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010.05.03 21:57:17 | 005,505,024 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\ntuser.dat
[2010.05.03 14:14:02 | 000,000,014 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\getfile.dat
[2010.05.03 14:14:01 | 000,002,957 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\x_dtrace_log
[2010.04.26 11:37:20 | 000,044,378 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\Bild 2 210 Kopie.jpg
[2010.02.18 21:13:54 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009.12.29 18:35:13 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXPRMON.DLL
[2009.12.29 18:35:13 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\LXPMONUI.DLL
[2009.12.29 18:33:16 | 000,139,264 | R--- | C] () -- C:\WINDOWS\System32\lxbtcoin.dll
[2009.12.29 18:33:16 | 000,126,976 | R--- | C] () -- C:\WINDOWS\System32\lxbtsnls.dll
[2009.12.29 18:29:42 | 000,001,832 | R--- | C] () -- C:\WINDOWS\System32\lxbtprod.ini
[2009.12.29 18:29:22 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbtvs.dll
[2009.12.29 18:29:10 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\lxbthwdf.dll
[2009.08.20 14:50:58 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2std.ini
[2009.08.20 14:50:57 | 000,025,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncamd.sys
[2009.08.20 14:50:55 | 012,039,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2sxp.sys
[2009.07.03 16:09:55 | 000,000,011 | ---- | C] () -- C:\WINDOWS\K_KOSM43.INI
[2009.07.03 16:09:34 | 000,375,296 | ---- | C] () -- C:\WINDOWS\System32\tx32.dll
[2009.07.03 16:09:34 | 000,000,202 | ---- | C] () -- C:\WINDOWS\System32\IC32.INI
[2009.07.02 23:36:10 | 000,002,114 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009.07.02 23:36:09 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009.04.24 20:39:38 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.01.05 14:44:10 | 000,000,483 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2008.11.17 17:01:03 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll
[2008.11.09 13:22:35 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4764.dll
< End of report >