| |
| |||||||
Überwachung, Datenschutz und Spam: Game Account ausgeraubt... keylogger?Windows 7 Fragen zu Verschlüsselung, Spam, Datenschutz & co. sind hier erwünscht. Hier geht es um Abwehr von Keyloggern oder aderen Spionagesoftware wie Spyware und Adware. Themen zum "Trojaner entfernen" oder "Malware Probleme" dürfen hier nur diskutiert werden. Benötigst du Hilfe beim Trojaner entfernen oder weil du dir einen Virus eingefangen hast, erstelle ein Thema in den oberen Bereinigungsforen. |
 |
07.06.2010, 17:49
| #1 | |
| |  Game Account ausgeraubt... keylogger? Hallo Ihr Lieben^^ Also ich hab mir gestern ein Tool für das Spiel Silkroad runtergeladen, dass von mehreren Leuten als "vertraulich und clean" befunden wurde... anscheinend stecken die alle unter einer Decke. Es handelt sich hierbei um ein "Autologin", dass logischer weise das GameLogin erleichtern soll. Tja nach weniger als einer Minute des ersten Login-Versuches war der Account komplett leergeräumt. In anderen Worten: Gehackt  Damit hab ich eigentlich kein Problem weil mir garnichts mehr an dem spiel liegt und ich nurmal wieder ein bischen daddeln wollte^^. Was mir Sorgen bereitet ist: War das nur ein billiges Programm, dass nur die Account Daten von dem Spiel an den "hacker" sendet, oder ein gefählicher Keylogger, der alles überwacht inkl. Onlinebanking? Ist er noch auf meinem Rechner? Ich hab natürlich den ganzen Mist erstmal gelöscht inkl. spiel  , hab dann per Norton AntiVir ein intensiv check machen lassen und zeigte nach wie vor keine Befunde.Mit Malwarebytes' Anti-Malware 1.46 und OTL das gleiche Ergebnis. Kann ich mir nun sicher sein, dass alles clean ist oder soll/en ich/wir noch ein paar checks machen? Zitat:
Grüße Imidin |
|
07.06.2010, 18:00
| #2 | |
 |  Game Account ausgeraubt... keylogger?Zitat:
Also ich denk mal zu den ""Gefahren" insbesondere können hier die Admis und so besser was sagen ! Aber was mir augefallen ist ...... Service Pack 1???  Da sollte eigentlich Service Pack 3 stehn. Also das System up to date halten wäre schon viel wert. |
|
08.06.2010, 12:59
| #3 | |||
| /// Mr. Schatten   | Game Account ausgeraubt... keylogger?Zitat:
Administrator ist "nur" der Verwalter oder rechtliche Ansprechpartner für das Forum. Ein "Administrator" muss sich mit Malware nicht unbedingt auskennen. (ganz abgesehen davon, dass in einem ordentlich administrierten Netzwerk z.B. sich ja auch keine Malware tummelt)  Zitat:
Zitat:
Und nein, nur weil nichts mehr gefunden wird, bedeutet es noch lange nicht, dass dein System "clean" (und 'nur' ungepflegt) wäre. Nichts gefunden heißt eben nur "nichts gesehen". Nichts gesehen heißt aber nicht "da ist nichts". Du magst entsprechende Threads und Beiträge in diesem Forum diesbezüglich mal lesen. Ob es ein Keylogger oder ein anderes Tool war, ist bei deiner Informationsfreude absolut nicht zu sagen und vermutlich jetzt sowieso nicht mehr zu sagen. In diesem Zustand ist dein System aber nicht nur als "wahrscheinlich oder möglicherweise unsicher" einzustufen, sondern als "sicher unsicher". Es ist quasi unmöglich zu sagen, was wurde verändert, was wurde hinterlassen. Bis zu einer sauberen Neuinstallation mit ordentlicher Absicherung hat das System als möglicherweise kompromitiert  zu gelten.Selbstverständlich sinkt mit jedem (geeigneten!) Tool welches nichts findet, die Wahrscheinlichkeit, dass noch was virales im System ist (trotzdem könnte auch noch was zusätzlich "unviral" verändert sein). Lesetipp: Neuaufsetzen des Systems + Absicherung
__________________ Geändert von Shadow (08.06.2010 um 13:09 Uhr) |
|
08.06.2010, 13:13
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Game Account ausgeraubt... keylogger?Zitat:
Oder Shadows Kompromisslos-Methode Format c: + Neuinstallation + Absicherung 
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
08.06.2010, 13:23
| #5 |
| | Game Account ausgeraubt... keylogger? Nur zur Info. Diese Art "Tool", ist meistens direct-action, sprich starten, Passworte sammeln, verschicken und dann loescht sich die Datei selber. Wenn du die Datei noch hast, lade sie bitte hier hoch: http://www.trojaner-board.de/54791-a...ner-board.html oder schicke cosinus oder mir den Link via PN. Nebenbei, ich wuerde Shadows Tipp bevorzugen, was dich aber nicht davor bewahrt, alle deine Passworte von einem sauberen PC aus, schleunigst zu aendern ...
__________________ MfG Ralf |
|
08.06.2010, 16:59
| #6 | ||
| | Game Account ausgeraubt... keylogger?Zitat:
.. sorry ich meinte halt Leute die sich mit dem Thema besser auskennen wie ich . Also nix für ungut  Zitat:
gruss  rotaran |
|
08.06.2010, 18:44
| #7 | ||
| | Game Account ausgeraubt... keylogger? Ok danke erstmal für die Lösungsvorschläge und der ausfühlichen Erwähnung, dass mein Bertriebssystem etwas veraltet ist.... Ich muss zugeben, dass ich die paar letzten Updates vernachlässigt hab, da der Rechner vor nich allzu langer Zeit von der garantiefälligen Hardwarereperatur wiedergekommen ist und ich bis jetzt nicht viel Zeit und Elan hatte alles neu zu updaten. Ich weiß, Schande über mich. Aber das wollt ich garnich wissen... Und muss man IE 8 haben, wenn man es garnicht nutzt? Zitat:
Aber hoffen allein bringt meistens nichts und deshalb bin ich halt hier. Die Datei und Dl Quelle hab ich leider nicht mehr.  Hier mal meine Logs Zitat:
Code:
ATTFilter OTL logfile created on: 08.06.2010 18:38:21 - Run 2 OTL by OldTimer - Version 3.2.5.3 Folder = C:\Users\hp\Downloads 64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 58,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 582,97 Gb Total Space | 469,29 Gb Free Space | 80,50% Space Free | Partition Type: NTFS Drive D: | 13,20 Gb Total Space | 1,81 Gb Free Space | 13,75% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ** Current User Name: hp Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010.06.07 17:06:53 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Users\hp\Downloads\OTL.exe PRC - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2010.01.15 14:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\conime.exe PRC - [2008.10.17 15:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) -- c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe PRC - [2008.07.10 18:36:40 | 000,065,536 | ---- | M] (Hewlett-Packard) -- c:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnProxy.exe PRC - [2008.07.10 18:36:38 | 000,100,864 | ---- | M] (Hewlett-Packard) -- c:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnSrv.EXE PRC - [2008.07.08 15:27:16 | 000,026,416 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe PRC - [2008.07.08 15:27:14 | 000,021,296 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe PRC - [2008.06.20 16:47:26 | 000,464,384 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE PRC - [2008.05.27 15:23:14 | 002,199,552 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\HWManager.exe PRC - [2008.05.27 13:42:18 | 000,208,896 | ---- | M] () -- C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe PRC - [2008.05.23 14:12:40 | 000,102,400 | ---- | M] () -- C:\Windows\SysWOW64\OSDForm.exe PRC - [2008.04.04 17:10:24 | 001,314,816 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe PRC - [2008.03.19 13:52:52 | 003,842,048 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe PRC - [2008.02.09 12:06:00 | 000,238,968 | ---- | M] (Symantec Corporation) -- c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe PRC - [2006.11.02 17:04:16 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe PRC - [2004.11.09 16:35:06 | 000,057,344 | ---- | M] () -- C:\Windows\opcddemg.exe ========== Modules (SafeList) ========== MOD - [2010.06.07 17:06:53 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Users\hp\Downloads\OTL.exe MOD - [2009.04.11 08:28:24 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll MOD - [2009.04.11 08:28:18 | 000,450,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2008.01.21 04:50:01 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010.04.28 20:18:36 | 001,315,592 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2010.04.01 15:11:34 | 000,036,168 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp) SRV:64bit: - [2009.10.15 06:51:14 | 000,087,336 | ---- | M] (Dassault Systèmes SolidWorks Corp.) [On_Demand | Stopped] -- C:\Program Files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe -- (CoordinatorServiceHost) SRV:64bit: - [2009.09.25 03:26:26 | 001,142,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache) SRV:64bit: - [2009.04.11 09:11:13 | 000,053,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bthserv.dll -- (BthServ) SRV:64bit: - [2007.10.19 13:10:30 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\AEADISRV.EXE -- (AEADIFilters) SRV - [2010.04.28 20:22:49 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2010.04.28 18:14:08 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service) SRV - [2010.04.23 18:39:52 | 000,607,048 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2010.04.20 10:18:41 | 001,245,064 | ---- | M] () [On_Demand | Stopped] -- C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe -- (Symantec Core LC) SRV - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2010.04.01 15:16:50 | 001,401,672 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc) SRV - [2010.04.01 15:11:26 | 000,030,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp) SRV - [2010.03.18 23:28:00 | 003,753,224 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc) SRV - [2010.01.15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009.03.30 06:39:54 | 000,089,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64) SRV - [2008.10.17 15:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice) SRV - [2008.10.17 15:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService) SRV - [2008.10.17 15:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr) SRV - [2008.10.17 15:52:10 | 000,149,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr) SRV - [2008.09.05 11:52:32 | 003,220,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate) SRV - [2008.07.10 18:36:38 | 000,100,864 | ---- | M] (Hewlett-Packard) [Auto | Running] -- c:\Program Files (x86)\Hewlett-Packard\HP Touch Screen Enhance Service\HPTSEnSrv.EXE -- (HP Touch Screen Enhance) SRV - [2008.07.08 15:27:14 | 000,021,296 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe -- (CalendarSynchService) SRV - [2008.02.09 12:06:00 | 000,238,968 | ---- | M] (Symantec Corporation) [Auto | Running] -- c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler) SRV - [2007.08.21 21:22:00 | 000,267,096 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost) SRV - [2006.11.02 15:34:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) SRV - [2006.11.02 08:35:15 | 000,060,994 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds) SRV - [2006.11.02 08:35:15 | 000,055,846 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vss.mof -- (VSS) SRV - [2004.11.09 16:35:06 | 000,057,344 | ---- | M] () [Auto | Running] -- C:\Windows\opcddemg.exe -- (opcddemg) ========== Driver Services (SafeList) ========== DRV:64bit: - [2010.05.08 23:07:17 | 000,172,080 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:64bit: - [2010.04.28 17:16:29 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:64bit: - [2010.04.16 08:33:36 | 000,050,176 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2009.10.01 02:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2009.04.11 07:40:06 | 000,694,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BTHport.sys -- (BTHPORT) DRV:64bit: - [2009.04.11 07:39:57 | 000,178,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\rfcomm.sys -- (RFCOMM) Bluetooth-Gerät (RFCOMM-Protokoll-TDI) DRV:64bit: - [2009.04.11 07:39:55 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\BthEnum.sys -- (BthEnum) DRV:64bit: - [2009.04.11 07:39:53 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\BTHUSB.sys -- (BTHUSB) DRV:64bit: - [2009.02.19 13:31:42 | 000,028,720 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\SymIMv.sys -- (SymIM) DRV:64bit: - [2009.02.19 13:31:18 | 000,047,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMNDISV.SYS -- (SYMNDISV) DRV:64bit: - [2009.02.19 13:31:00 | 000,266,800 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\SYMTDI.SYS -- (SYMTDI) DRV:64bit: - [2009.02.19 13:30:58 | 000,145,456 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMFW.SYS -- (SYMFW) DRV:64bit: - [2009.02.19 13:30:58 | 000,028,720 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMREDRV.SYS -- (SYMREDRV) DRV:64bit: - [2009.02.19 13:30:58 | 000,016,432 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMDNS.SYS -- (SYMDNS) DRV:64bit: - [2008.07.30 17:55:06 | 000,025,424 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\COH_Mon.sys -- (COH_Mon) DRV:64bit: - [2008.06.13 22:04:02 | 000,840,960 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\AVerAVF2.sys -- (AVerAVF2) DRV:64bit: - [2008.06.11 04:51:32 | 000,395,800 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor) DRV:64bit: - [2008.06.09 15:36:56 | 000,459,776 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\netr28x.sys -- (netr28x) DRV:64bit: - [2008.05.13 23:02:14 | 000,092,200 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:64bit: - [2008.05.13 23:02:14 | 000,019,880 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\btwrchid.sys -- (btwrchid) DRV:64bit: - [2008.05.13 23:02:12 | 000,121,896 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:64bit: - [2008.05.05 15:05:02 | 000,015,928 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OSDACPI.SYS -- (ACPIService) DRV:64bit: - [2008.04.03 17:30:44 | 000,499,200 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ADIHdAud.sys -- (ADIHdAudAddService) DRV:64bit: - [2008.02.14 16:56:14 | 000,160,768 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169) DRV:64bit: - [2008.01.31 13:51:00 | 000,476,720 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SRTSPL64.SYS -- (SRTSPL) DRV:64bit: - [2008.01.31 13:51:00 | 000,440,880 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SRTSP64.SYS -- (SRTSP) DRV:64bit: - [2008.01.31 13:51:00 | 000,032,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\SRTSPX64.SYS -- (SRTSPX) DRV:64bit: - [2008.01.29 12:46:58 | 000,036,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\btwl2cap.sys -- (btwl2cap) DRV:64bit: - [2008.01.21 04:47:27 | 000,168,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\usbvideo.sys -- (usbvideo) USB-Videogerät (WDM) DRV:64bit: - [2008.01.21 04:47:02 | 000,115,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\bthpan.sys -- (BthPan) Bluetooth-Gerät (PAN) DRV:64bit: - [2005.06.14 13:01:16 | 000,296,448 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\hardlock.sys -- (Hardlock) DRV - [2010.05.26 10:00:00 | 000,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2010.05.26 10:00:00 | 000,132,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2010.05.10 10:00:00 | 001,773,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20100607.034\EX64.SYS -- (NAVEX15) DRV - [2010.05.10 10:00:00 | 000,117,808 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20100607.034\ENG64.SYS -- (NAVENG) DRV - [2010.03.05 19:07:54 | 000,396,336 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20100513.002\IDSviA64.sys -- (IDSvia64) DRV - [2010.02.24 14:41:50 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv) DRV - [2009.09.09 14:26:06 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/05/05 16:40:04] [Kernel | Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl -- ({55662437-DA8C-40c0-AADA-2C816A897A49}) DRV - [2008.07.30 17:28:04 | 000,000,841 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\COH_Mon.inf -- (COH_Mon) DRV - [2006.09.18 23:36:40 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip) DRV - [2006.09.18 23:35:23 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv) DRV - [2005.01.04 11:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=84&bd=crossfire&pf=cndt IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=84&bd=crossfire&pf=cndt IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=84&bd=crossfire&pf=cndt IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=84&bd=crossfire&pf=cndt IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files (x86)\softonic-de3\tbsoft.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=84&bd=crossfire&pf=cndt IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files (x86)\softonic-de3\tbsoft.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/webhp?hl=de&source=hp&btnG=Google-Suche" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.2&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.05.11 17:07:07 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.05.11 17:07:07 | 000,000,000 | ---D | M] [2010.04.21 17:36:16 | 000,000,000 | ---D | M] -- C:\Users\hp\AppData\Roaming\mozilla\Extensions [2010.06.07 21:11:03 | 000,000,000 | ---D | M] -- C:\Users\hp\AppData\Roaming\mozilla\Firefox\Profiles\0yt6mmhf.default\extensions [2010.04.23 19:15:00 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\hp\AppData\Roaming\mozilla\Firefox\Profiles\0yt6mmhf.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.06.07 16:50:01 | 000,000,947 | ---- | M] () -- C:\Users\hp\AppData\Roaming\Mozilla\FireFox\Profiles\0yt6mmhf.default\searchplugins\icqplugin.xml [2010.04.21 17:35:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2008.06.30 13:44:08 | 000,324,976 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\mozilla firefox\components\coFFPlgn.dll [2009.10.14 17:21:24 | 000,155,648 | ---- | M] (Dassault Systèmes SolidWorks Corp.) -- C:\Program Files (x86)\mozilla firefox\plugins\npEModelPlugin.dll [2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~2\COMMON~1\SYMANT~1\IDS\IPSBHO.dll (Symantec Corporation) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files (x86)\softonic-de3\tbsoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files (x86)\softonic-de3\tbsoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files (x86)\softonic-de3\tbsoft.dll (Conduit Ltd.) O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation) O4:64bit: - HKLM..\Run: [NvMediaCenter] C:\Windows\SysNative\NvMcTray.DLL (NVIDIA Corporation) O4:64bit: - HKLM..\Run: [SoundMAX] C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe (Analog Devices, Inc.) O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [Buttons & OSDs control application gen2] C:\Program Files (x86)\Hewlett Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe () O4 - HKLM..\Run: [ccApp] c:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [HP KEYBOARD] C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE (Hewlett-Packard) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.) O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\HPd_1920x1200.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\HPd_1920x1200.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{e2292c88-5835-11df-88f6-00218691cab9}\Shell\AutoRun\command - "" = H:\WDSetup.exe -- File not found O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\WDSetup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.06.07 19:51:41 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2010.06.07 19:51:40 | 000,000,000 | ---D | C] -- C:\Programme\Windows Portable Devices [2010.06.07 19:51:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices [2010.06.07 19:49:49 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll [2010.06.07 19:49:49 | 000,369,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll [2010.06.07 19:49:49 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv [2010.06.07 19:49:48 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2010.06.07 19:49:47 | 001,548,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2010.06.07 19:49:47 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2010.06.07 19:49:47 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WindowsCodecs.dll [2010.06.07 19:49:47 | 000,829,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll [2010.06.07 19:49:47 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll [2010.06.07 19:49:47 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WindowsCodecsExt.dll [2010.06.07 19:49:47 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printfilterpipelineprxy.dll [2010.06.07 19:49:46 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll [2010.06.07 19:49:46 | 001,209,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2010.06.07 19:49:46 | 001,032,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printfilterpipelinesvc.exe [2010.06.07 19:49:46 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll [2010.06.07 19:49:46 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2010.06.07 19:49:46 | 000,643,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll [2010.06.07 19:49:46 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll [2010.06.07 19:49:46 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll [2010.06.07 19:49:46 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2010.06.07 19:49:46 | 000,486,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10level9.dll [2010.06.07 19:49:46 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxgi.dll [2010.06.07 19:49:46 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2010.06.07 19:49:46 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoMetadataHandler.dll [2010.06.07 19:49:46 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll [2010.06.07 19:49:46 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiag.exe [2010.06.07 19:49:46 | 000,326,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll [2010.06.07 19:49:46 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoMetadataHandler.dll [2010.06.07 19:49:46 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll [2010.06.07 19:49:46 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2010.06.07 19:49:46 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll [2010.06.07 19:49:46 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiag.exe [2010.06.07 19:49:46 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll [2010.06.07 19:49:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll [2010.06.07 19:49:46 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll [2010.06.07 19:49:46 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll [2010.06.07 19:49:46 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10core.dll [2010.06.07 19:49:46 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll [2010.06.07 19:49:45 | 003,068,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll [2010.06.07 19:49:45 | 001,548,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2010.06.07 19:49:45 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll [2010.06.07 19:49:45 | 001,269,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll [2010.06.07 19:49:45 | 001,142,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FntCache.dll [2010.06.07 19:49:45 | 001,064,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll [2010.06.07 19:49:45 | 001,030,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10.dll [2010.06.07 19:49:45 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll [2010.06.07 19:49:45 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1.dll [2010.06.07 19:49:23 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShextAutoplay.exe [2010.06.07 19:49:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDShextAutoplay.exe [2010.06.07 19:49:21 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BthMtpContextHandler.dll [2010.06.07 19:49:14 | 002,727,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll [2010.06.07 19:49:14 | 002,537,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdshext.dll [2010.06.07 19:49:14 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll [2010.06.07 19:49:14 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll [2010.06.07 19:49:14 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll [2010.06.07 19:49:14 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceApi.dll [2010.06.07 19:49:14 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdMtp.dll [2010.06.07 19:49:14 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceTypes.dll [2010.06.07 19:49:14 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceTypes.dll [2010.06.07 19:49:14 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceClassExtension.dll [2010.06.07 19:49:14 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll [2010.06.07 19:49:14 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceClassExtension.dll [2010.06.07 19:49:14 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceConnectApi.dll [2010.06.07 19:49:14 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdMtpUS.dll [2010.06.07 19:49:14 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceConnectApi.dll [2010.06.07 19:49:14 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WpdUsb.sys [2010.06.07 19:49:14 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpdConns.dll [2010.06.07 19:49:13 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll [2010.06.07 19:49:13 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWMDRM.dll [2010.06.07 19:49:13 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWMDRM.dll [2010.06.07 19:48:35 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleaccrc.dll [2010.06.07 19:48:35 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaccrc.dll [2010.06.07 19:48:34 | 000,736,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll [2010.06.07 19:48:34 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll [2010.06.07 19:48:34 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll [2010.06.07 19:47:58 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll [2010.06.07 19:47:58 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll [2010.06.07 19:47:56 | 003,815,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll [2010.06.07 19:47:56 | 003,023,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll [2010.06.07 19:47:56 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll [2010.06.07 19:47:56 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll [2010.06.07 19:46:51 | 001,927,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll [2010.06.07 19:46:51 | 001,696,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll [2010.06.07 19:46:50 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\GameUXLegacyGDFs.dll [2010.06.07 19:46:50 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\SysNative\GameUXLegacyGDFs.dll [2010.06.07 19:46:50 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Apphlpdm.dll [2010.06.07 19:46:50 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Apphlpdm.dll [2010.06.07 19:33:09 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\vi-VN [2010.06.07 19:33:09 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\eu-ES [2010.06.07 19:33:09 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\eu-ES [2010.06.07 19:33:09 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ca-ES [2010.06.07 19:33:09 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ca-ES [2010.06.07 19:33:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\vi-VN [2010.06.07 19:10:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders [2010.06.07 17:08:47 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\Malwarebytes [2010.06.07 17:08:36 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.06.07 17:08:35 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.06.07 17:08:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010.06.07 17:08:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.06.07 17:07:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner [2010.06.05 22:09:25 | 000,000,000 | ---D | C] -- C:\Windows\Media.PK2 Templates [2010.06.05 22:09:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Media.PK2 Templates [2010.06.01 18:46:27 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Local\Nemex [2010.06.01 18:45:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nemex [2010.05.31 22:08:00 | 000,000,000 | ---D | C] -- C:\Programme\7-Zip [2010.05.27 19:51:22 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\FL_SIM_P4_DEMO_D [2010.05.27 18:43:29 | 000,000,000 | ---D | C] -- C:\Users\hp\Documents\FluidSIM Pneumatik [2010.05.27 18:43:29 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\FL_SIM_P4_HOME_USE_D [2010.05.27 18:24:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Didactic [2010.05.24 22:25:08 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\WinBatch [2010.05.21 18:23:05 | 000,679,936 | ---- | C] (Generated by JEDI) -- C:\Windows\SysWow64\D3DX81ab.dll [2010.05.15 01:20:18 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\teamspeak2 [2010.05.15 01:20:09 | 000,034,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lhacm.acm [2010.05.15 01:20:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teamspeak2_RC2 [2010.05.11 17:09:26 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\Apple Computer [2010.05.11 17:09:26 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Local\Apple Computer [2010.05.11 17:09:02 | 000,126,312 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\GEARAspi64.dll [2010.05.11 17:09:02 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysWow64\GEARAspi.dll [2010.05.11 17:09:02 | 000,034,152 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2010.05.11 17:09:01 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE [2010.05.11 17:07:59 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.05.11 17:07:57 | 000,000,000 | ---D | C] -- C:\Programme\iTunes [2010.05.11 17:07:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2010.05.11 17:07:57 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} [2010.05.11 17:06:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010.05.11 17:06:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010.05.11 17:06:11 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Local\Apple [2010.05.11 17:06:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010.05.11 17:04:33 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Apple [2010.05.11 17:04:22 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour [2010.05.11 17:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2010.05.11 17:04:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010.05.11 17:04:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010.05.10 18:58:38 | 000,000,000 | ---D | C] -- C:\Users\hp\.bdkeys [2010.05.10 18:55:06 | 000,000,000 | ---D | C] -- C:\Users\hp\Documents\Pavtube [2010.05.10 18:55:06 | 000,000,000 | ---D | C] -- C:\Users\hp\AppData\Roaming\Pavtube [2010.05.10 18:54:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pavtube [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.06.08 18:38:18 | 002,359,296 | -HS- | M] () -- C:\Users\hp\NTUSER.DAT [2010.06.08 17:11:35 | 001,418,806 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.06.08 17:11:35 | 000,618,204 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.06.08 17:11:35 | 000,586,980 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.06.08 17:11:35 | 000,122,636 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.06.08 17:11:35 | 000,101,052 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.06.08 17:04:38 | 000,042,274 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010.06.08 17:04:11 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010.06.08 17:04:10 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010.06.08 17:04:04 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.06.08 17:04:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.06.08 17:03:06 | 000,524,288 | -HS- | M] () -- C:\Users\hp\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms [2010.06.08 17:03:06 | 000,065,536 | -HS- | M] () -- C:\Users\hp\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf [2010.06.08 17:03:04 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2010.06.08 17:02:45 | 003,491,062 | -H-- | M] () -- C:\Users\hp\AppData\Local\IconCache.db [2010.06.07 20:15:49 | 000,000,588 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Systemprüfung ausführen - hp.job [2010.06.07 19:51:29 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf [2010.06.07 19:51:20 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf [2010.06.07 19:37:36 | 000,356,936 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.06.07 17:08:38 | 000,000,850 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.06.07 17:07:58 | 000,001,726 | ---- | M] () -- C:\Users\hp\Desktop\CCleaner.lnk [2010.06.06 20:44:33 | 000,042,274 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010.06.05 22:09:30 | 000,001,876 | ---- | M] () -- C:\Users\Public\Desktop\Media.PK2 Templates.lnk [2010.06.01 18:45:53 | 000,000,974 | ---- | M] () -- C:\Users\Public\Desktop\Mouse Recorder Pro.lnk [2010.05.30 01:44:14 | 000,002,255 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.05.27 22:01:19 | 000,120,524 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat [2010.05.27 19:37:19 | 000,000,422 | ---- | M] () -- C:\Windows\FESTO.INI [2010.05.27 18:43:22 | 000,001,144 | ---- | M] () -- C:\Users\hp\Desktop\FluidSIM Pneumatik V 4.2 Home Use.lnk [2010.05.27 18:42:49 | 000,093,184 | ---- | M] () -- C:\Users\hp\AppData\Local\GDIPFONTCACHEV1.DAT [2010.05.16 21:25:14 | 000,002,589 | ---- | M] () -- C:\Users\Public\Desktop\SolidWorks 2010 x64 Edition.lnk [2010.05.15 01:20:09 | 000,034,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\lhacm.acm [2010.05.15 01:20:08 | 000,000,819 | ---- | M] () -- C:\Users\hp\Desktop\Teamspeak 2 RC2.lnk [2010.05.11 18:41:14 | 000,001,076 | ---- | M] () -- C:\Users\hp\Desktop\DVDVideoSoft Free Studio.lnk [2010.05.11 17:16:43 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf [2010.05.11 17:06:55 | 000,001,758 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.06.07 19:51:29 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf [2010.06.07 19:51:20 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf [2010.06.07 17:08:38 | 000,000,850 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.06.07 17:07:58 | 000,001,726 | ---- | C] () -- C:\Users\hp\Desktop\CCleaner.lnk [2010.06.05 22:09:30 | 000,001,876 | ---- | C] () -- C:\Users\Public\Desktop\Media.PK2 Templates.lnk [2010.06.01 18:45:53 | 000,000,974 | ---- | C] () -- C:\Users\Public\Desktop\Mouse Recorder Pro.lnk [2010.05.31 23:07:24 | 010,618,919 | ---- | C] () -- C:\Program Files (x86)\CabalMain.exe [2010.05.27 22:01:19 | 000,120,524 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2010.05.27 18:43:22 | 000,001,144 | ---- | C] () -- C:\Users\hp\Desktop\FluidSIM Pneumatik V 4.2 Home Use.lnk [2010.05.27 18:25:16 | 000,057,344 | ---- | C] () -- C:\Windows\opcddemg.exe [2010.05.27 18:16:03 | 000,000,422 | ---- | C] () -- C:\Windows\FESTO.INI [2010.05.21 18:23:05 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll [2010.05.15 01:20:08 | 000,000,819 | ---- | C] () -- C:\Users\hp\Desktop\Teamspeak 2 RC2.lnk [2010.05.11 17:16:43 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf [2010.05.11 17:09:20 | 000,002,255 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.05.11 17:06:55 | 000,001,758 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010.04.27 20:43:08 | 000,000,000 | ---- | C] () -- C:\Windows\eDrawingOfficeAutomator.INI [2010.04.24 19:32:06 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll [2010.04.24 19:31:15 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2010.04.20 09:33:04 | 000,327,680 | ---- | C] () -- C:\Windows\SysWow64\pythoncom25.dll [2010.04.20 09:33:04 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\pywintypes25.dll [2008.07.08 15:27:14 | 000,058,672 | ---- | C] () -- C:\Windows\SysWow64\ASUSACPIDLL.dll [2008.01.21 04:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2006.06.13 16:35:32 | 000,053,760 | ---- | C] () -- C:\Windows\SysWow64\zlib.dll < End of report > Geändert von Imidin (08.06.2010 um 19:04 Uhr) Grund: Korrekturen |
|
| Themen zu Game Account ausgeraubt... keylogger? |
| account, anderen, anti-malware, antivir, autologin, check, clean, dateien, daten, ebanking, explorer, gehackt, gelöscht, hacker, keylogger, komplett, leute, malwarebytes, malwarebytes' anti-malware, norton, onlinebanking, problem, programm, rechner, service, tool, version, worte |
Game Account ausgeraubt... keylogger?
Linear-Darstellung
