| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: 40 TAN trojaner - selbe symptone wieder bereits beschriebenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.08.2010, 16:22
| #1 |
 |  40 TAN trojaner - selbe symptone wieder bereits beschrieben Hallo, habe anscheinend den gleichen Trojaner den andere Nuter bereits beschrieben haben. -40 TAN -abfrage - ^^ bei einmaligem Drücken der Taste Außerdem sehen die Suchfelder bei google oder die meisten Passworteingabefelder plötzlich etwas kleiner aus und die Schrift ist eher grau geworden. Weitere Infos: Benutze XP und Firefox. Habe bereits den OTL Scan durchgeführt. Hier das Ergebniss:OTL Logfile: Code:
ATTFilter OTL logfile created on: 11.08.2010 17:02:22 - Run 3 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Dokumente und Einstellungen\***\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 502,00 Mb Total Physical Memory | 134,00 Mb Available Physical Memory | 27,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 74,53 Gb Total Space | 9,03 Gb Free Space | 12,12% Space Free | Partition Type: NTFS D: Drive not present or media not loaded Drive E: | 534,73 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: CompNa Current User Name: *** Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 7 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\***\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\DNA\btdna.exe (BitTorrent, Inc.) PRC - C:\Programme\Java\jre6\bin\jucheck.exe (Sun Microsystems, Inc.) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH) PRC - C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) PRC - C:\Programme\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH) PRC - C:\Programme\Toshiba\E-KEY\CeEKey.exe (COMPAL ELECTRONIC INC.) PRC - C:\Programme\Toshiba\Touch and Launch\PadExe.exe (TOSHIBA) PRC - C:\Programme\Toshiba\TouchPad\TPTray.exe (COMPAL ELECTRONIC INC.) PRC - C:\Programme\Toshiba\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe (TOSHIBA Corporation) PRC - C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) PRC - C:\Programme\Toshiba\Tvs\TvsTray.exe (TOSHIBA Corporation) PRC - C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATIADE.EXE (SEIKO EPSON CORPORATION) PRC - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\symwsc.exe (Symantec Corporation) PRC - C:\WINDOWS\system32\brsvc01a.exe (brother Industries Ltd) PRC - C:\WINDOWS\system32\brss01a.exe (brother Industries Ltd) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\***\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (Remote Plugins Manager) -- C:\WINDOWS\System32\svshost.exe File not found SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (AntiVirService) -- C:\Programme\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH) SRV - (AntiVirScheduler) -- C:\Programme\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH) SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation) SRV - (ANIWZCSdService) -- C:\Programme\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (Alpha Networks Inc.) SRV - (SymWSC) -- C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe (Symantec Corporation) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (Brother XP spl Service) -- C:\WINDOWS\system32\brsvc01a.exe (brother Industries Ltd) ========== Driver Services (SafeList) ========== DRV - (GKOTMOUT) -- C:\WINDOWS\System32\gkotmout.hvy File not found DRV - (catchme) -- C:\DOKUME~1\***\LOKALE~1\Temp\catchme.sys File not found DRV - (Tcpip6) -- C:\WINDOWS\system32\drivers\tcpip6.sys (Microsoft Corporation) DRV - (avgntflt) -- C:\Programme\AntiVir PersonalEdition Classic\avgntflt.sys (Avira GmbH) DRV - (avgio) -- C:\Programme\AntiVir PersonalEdition Classic\avgio.sys (Avira GmbH) DRV - (V0220Dev) -- C:\WINDOWS\system32\drivers\V0220Dev.sys (Creative Technology Ltd.) DRV - (V0220Vfx) -- C:\WINDOWS\system32\drivers\V0220Vfx.sys (EyePower Games Pte. Ltd.) DRV - (ANIO) -- C:\WINDOWS\system32\ANIO.sys (Alpha Networks Inc.) DRV - (RT73) -- C:\WINDOWS\system32\drivers\Dr71WU.sys (Ralink Technology, Corp.) DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology) DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology) DRV - (Tvs) -- C:\WINDOWS\system32\drivers\Tvs.sys (TOSHIBA Corporation) DRV - (tifm21) -- C:\WINDOWS\system32\drivers\tifm21.sys (Texas Instruments) DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.) DRV - (TPwSav) -- C:\WINDOWS\system32\drivers\TPwSav.sys (TOSHIBA ) DRV - (tfsnudfa) -- C:\WINDOWS\system32\dla\tfsnudfa.sys (Sonic Solutions) DRV - (tfsnudf) -- C:\WINDOWS\system32\dla\tfsnudf.sys (Sonic Solutions) DRV - (tfsnifs) -- C:\WINDOWS\system32\dla\tfsnifs.sys (Sonic Solutions) DRV - (tfsncofs) -- C:\WINDOWS\system32\dla\tfsncofs.sys (Sonic Solutions) DRV - (tfsnboio) -- C:\WINDOWS\system32\dla\tfsnboio.sys (Sonic Solutions) DRV - (tfsnopio) -- C:\WINDOWS\system32\dla\tfsnopio.sys (Sonic Solutions) DRV - (tfsnpool) -- C:\WINDOWS\system32\dla\tfsnpool.sys (Sonic Solutions) DRV - (tfsndrct) -- C:\WINDOWS\system32\dla\tfsndrct.sys (Sonic Solutions) DRV - (tfsndres) -- C:\WINDOWS\system32\dla\tfsndres.sys (Sonic Solutions) DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology) DRV - (sscdbhk5) -- C:\WINDOWS\system32\drivers\sscdbhk5.sys (Sonic Solutions) DRV - (ssrtln) -- C:\WINDOWS\system32\drivers\ssrtln.sys (Sonic Solutions) DRV - (w29n51) Intel(R) -- C:\WINDOWS\system32\drivers\w29n51.sys (Intel® Corporation) DRV - (drvmcdb) -- C:\WINDOWS\system32\drivers\drvmcdb.sys (Sonic Solutions) DRV - (drvnddm) -- C:\WINDOWS\system32\drivers\drvnddm.sys (Sonic Solutions) DRV - (tosrfec) -- C:\WINDOWS\system32\drivers\Tosrfec.sys (TOSHIBA Corporation) DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems) DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation ) DRV - (k750obex) -- C:\WINDOWS\system32\drivers\k750obex.sys (MCCI) DRV - (k750mdm) -- C:\WINDOWS\system32\drivers\k750mdm.sys (MCCI) DRV - (k750mdfl) -- C:\WINDOWS\system32\drivers\k750mdfl.sys (MCCI) DRV - (k750bus) Sony Ericsson 750 driver (WDM) -- C:\WINDOWS\system32\drivers\k750bus.sys (MCCI) DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology) DRV - (ApfiltrService) -- C:\WINDOWS\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.) DRV - (BrScnUsb) -- C:\WINDOWS\system32\drivers\BrScnUsb.sys (Brother Industries Ltd.) DRV - (d347prt) -- C:\WINDOWS\System32\Drivers\d347prt.sys ( ) DRV - (d347bus) -- C:\WINDOWS\system32\DRIVERS\d347bus.sys ( ) DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation) DRV - (SrvcSSIOMngr) -- C:\WINDOWS\system32\drivers\SSIOMngr.sys (COMPAL ELECTRONIC INC.) DRV - (Pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.) DRV - (Iviaspi) -- C:\WINDOWS\system32\drivers\iviaspi.sys (InterVideo, Inc.) DRV - (Aspi32) -- C:\WINDOWS\System32\drivers\aspi32.sys (Adaptec) DRV - (Cdr4vsd) -- C:\WINDOWS\System32\drivers\CDR4VSD.SYS (Adaptec) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://google.icq.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ IE - HKCU\..\URLSearchHook: {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Programme\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL (Ask.com) IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\tbuE3\toolbaru.dll (IE Toolbar) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.07.20 21:35:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.08.11 10:34:18 | 000,000,000 | ---D | M] [2008.09.10 01:06:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Extensions [2007.05.23 22:03:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\9yb2164h.default\extensions [2010.08.11 14:43:52 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2009.04.02 13:12:42 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2009.04.02 13:12:42 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2009.04.02 13:12:42 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2009.04.02 13:12:42 | 000,000,986 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2009.04.02 13:12:42 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.08.11 15:41:33 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\tbuE3\toolbaru.dll (IE Toolbar) O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Ask Search Assistant BHO) - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Programme\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL (Ask.com) O2 - BHO: (no name) - {11904ce8-632a-4856-a7cc-00b33fe71bd8} - No CLSID value found. O2 - BHO: (no name) - {15ACE85C-0BB1-42d1-9E32-07EB0506675A} - No CLSID value found. O2 - BHO: (no name) - {1b68470c-2def-493b-8a4a-8e2d81be4ea5} - No CLSID value found. O2 - BHO: (no name) - {1c4da27d-4d52-4465-a089-98e01bb725ca} - No CLSID value found. O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - No CLSID value found. O2 - BHO: (no name) - {2e246fae-8420-11d9-870d-000c2917de7f} - No CLSID value found. O2 - BHO: (no name) - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - No CLSID value found. O2 - BHO: (no name) - {5753791b-f607-48ca-814e-91c14d081f9e} - No CLSID value found. O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) O2 - BHO: (Burn4Free Toolbar Helper) - {60BF5EE3-0105-4858-AD98-17C19F86B042} - C:\Programme\Burn4Free Toolbar\v3.2.0.0\Burn4Free_Toolbar.dll () O2 - BHO: (no name) - {7070a8f9-08a4-ca47-0ab0-1eb9e4ee1f3b} - No CLSID value found. O2 - BHO: (no name) - {746455fe-d059-47e7-af0e-140e03f5a447} - No CLSID value found. O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - No CLSID value found. O2 - BHO: (no name) - {7a7e6d97-b492-4884-9abb-c31281dcc4f2} - No CLSID value found. O2 - BHO: (no name) - {860c2f6b-ca82-4282-9187-beccbb66f0af} - No CLSID value found. O2 - BHO: (no name) - {87185e78-a61b-4db3-965a-3235bbd7a622} - No CLSID value found. O2 - BHO: (no name) - {8dc8f96d-34f7-1501-a2a4-631341aa3ac1} - No CLSID value found. O2 - BHO: (no name) - {9c5875b8-93f3-429d-ff34-660b206d897a} - No CLSID value found. O2 - BHO: (no name) - {a2595f37-48d0-46a1-9b51-478591a97764} - No CLSID value found. O2 - BHO: (no name) - {a6f42cad-2559-48df-af30-89e480af5dfa} - No CLSID value found. O2 - BHO: (no name) - {b212d577-05b7-4963-911e-4a8588160dfa} - No CLSID value found. O2 - BHO: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - No CLSID value found. O2 - BHO: (no name) - {d1ac752e-883f-4ed8-8828-b618c3a72152} - No CLSID value found. O2 - BHO: (no name) - {e2b2b5a1-b48c-4886-a318-723916a01024} - No CLSID value found. O2 - BHO: (no name) - {e6d5237d-a6c7-4c83-a67f-f9f15586fa62} - No CLSID value found. O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O2 - BHO: (Ask Toolbar BHO) - {F4D76F01-7896-458a-890F-E1F05C46069F} - C:\Programme\AskPBar\bar\1.bin\ASKPBAR.DLL (Ask.com) O2 - BHO: (no name) - {fe2d25c1-c1db-4b5e-9390-af1cb5302f32} - No CLSID value found. O2 - BHO: (no name) - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF} - No CLSID value found. O3 - HKLM\..\Toolbar: (Burn4Free Toolbar) - {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - C:\Programme\Burn4Free Toolbar\v3.2.0.0\Burn4Free_Toolbar.dll () O3 - HKLM\..\Toolbar: (ICQ Toolbar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\tbuE3\toolbaru.dll (IE Toolbar) O3 - HKLM\..\Toolbar: (Veoh Browser Plug-in) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Programme\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (Veoh Networks Inc) O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Programme\AskPBar\bar\1.bin\ASKPBAR.DLL (Ask.com) O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKCU\..\Toolbar\ShellBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKCU\..\Toolbar\ShellBrowser: (Ask Toolbar) - {F4D76F09-7896-458A-890F-E1F05C46069F} - C:\Programme\AskPBar\bar\1.bin\ASKPBAR.DLL (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (ICQ Toolbar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQToolbar\tbuE3\toolbaru.dll (IE Toolbar) O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {F4D76F09-7896-458A-890F-E1F05C46069F} - C:\Programme\AskPBar\bar\1.bin\ASKPBAR.DLL (Ask.com) O4 - HKLM..\Run: [avgnt] C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [CeEKEY] C:\Programme\Toshiba\E-KEY\CeEKey.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [CFSServ.exe] File not found O4 - HKLM..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [HWSetup] C:\Programme\TOSHIBA\TOSHIBA Applet\HWSetup.exe (TOSHIBA CO.,LTD.) O4 - HKLM..\Run: [PadTouch] C:\Programme\Toshiba\Touch and Launch\PadExe.exe (TOSHIBA) O4 - HKLM..\Run: [SmoothView] C:\Programme\Toshiba\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [SVPWUTIL] C:\Programme\Toshiba\Windows Utilities\SVPWUTIL.exe (TOSHIBA) O4 - HKLM..\Run: [TPNF] C:\Programme\Toshiba\TouchPad\TPTray.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [Tvs] C:\Programme\Toshiba\Tvs\TvsTray.exe (TOSHIBA Corporation) O4 - HKCU..\Run: [{0A6455A2-9632-B24D-593E-0CC0268980F9}] C:\Dokumente und Einstellungen\***\Anwendungsdaten\Buofo\cizyb.exe (fres) O4 - HKCU..\Run: [BitTorrent DNA] C:\Programme\DNA\btdna.exe (BitTorrent, Inc.) O4 - HKCU..\Run: [taskdir] C:\WINDOWS\System32\taskdir.exe File not found O4 - HKCU..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA) O4 - HKCU..\Run: [Veoh] C:\Programme\Veoh Networks\Veoh\VeohClient.exe (Veoh Networks) O4 - HKCU..\RunOnce: [FFTI] C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\9yb2164h.default\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe File not found O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &ICQ Toolbar Search - C:\Programme\ICQToolbar\toolbaru.dll (ICQ Inc.) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Programme\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programme\PartyGaming\PartyCasino\RunApp.exe () O9 - Extra 'Tools' menuitem : PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programme\PartyGaming\PartyCasino\RunApp.exe () O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe File not found O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe File not found O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe (ICQ, Inc.) O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe (ICQ, Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.185.225 83.169.186.225 192.168.0.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ic32pp {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll () O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2005.09.12 13:08:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2002.09.23 13:00:00 | 000,000,000 | R--D | M] - E:\autorun -- [ CDFS ] O32 - AutoRun File - [2002.09.23 13:00:00 | 000,053,248 | R--- | M] () - E:\autorun.exe -- [ CDFS ] O32 - AutoRun File - [2002.09.23 13:00:00 | 000,000,045 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{06685abc-569a-11dd-bb5a-000fb0a253be}\Shell\AutoRun\command - "" = F:\nideiect.com -- File not found O33 - MountPoints2\{06685abc-569a-11dd-bb5a-000fb0a253be}\Shell\explore\Command - "" = F:\nideiect.com -- File not found O33 - MountPoints2\{06685abc-569a-11dd-bb5a-000fb0a253be}\Shell\open\Command - "" = F:\nideiect.com -- File not found O33 - MountPoints2\{06685abd-569a-11dd-bb5a-000fb0a253be}\Shell\AutoRun\command - "" = RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\winse32.exe O33 - MountPoints2\{06685abd-569a-11dd-bb5a-000fb0a253be}\Shell\open\command - "" = RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\winse32.exe O33 - MountPoints2\{18d7c885-6dd8-11df-bc34-000fb0a253be}\Shell\AutoRun\command - "" = F:\Menu.exe -- File not found O33 - MountPoints2\{5480ee07-545b-11da-b941-000fb09ed58f}\Shell - "" = AutoRun O33 - MountPoints2\{5480ee07-545b-11da-b941-000fb09ed58f}\Shell\1\Command - "" = .\recycled\info.exe O33 - MountPoints2\{5480ee07-545b-11da-b941-000fb09ed58f}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{8cbb855c-2def-11df-bc15-000fb0a253be}\Shell\AutoRun\command - "" = F:\Get_Started_for_Win.exe -- File not found O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\autorun.exe -- [2002.09.23 13:00:00 | 000,053,248 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 7 Days ========== [2010.08.11 11:04:00 | 000,000,000 | ---D | C] -- C:\_OTL [2010.08.11 10:49:54 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe [2010.08.11 00:27:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Desktop\ihnlg(2) [2010.08.09 12:49:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\McPoker [2010.08.09 12:38:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Eigene Dateien\McPoker [2010.08.09 12:38:19 | 000,000,000 | ---D | C] -- C:\Programme\McPoker [2006.11.15 00:10:03 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys [2006.11.15 00:10:03 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys ========== Files - Modified Within 7 Days ========== [2010.08.11 16:34:48 | 000,028,672 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Gesetzliche Grundlagen ne.doc [2010.08.11 16:32:02 | 000,017,920 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\aufgabenPROJEKT.doc [2010.08.11 16:27:02 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.08.11 16:26:21 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010.08.11 16:26:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.08.11 16:26:17 | 526,897,152 | -HS- | M] () -- C:\hiberfil.sys [2010.08.11 16:25:22 | 008,912,896 | -H-- | M] () -- C:\Dokumente und Einstellungen\***\NTUSER.DAT [2010.08.11 16:25:22 | 000,000,300 | -HS- | M] () -- C:\Dokumente und Einstellungen\***\ntuser.ini [2010.08.11 15:59:31 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Defogger.exe [2010.08.11 15:41:33 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts [2010.08.11 15:13:00 | 000,000,352 | ---- | M] () -- C:\WINDOWS\tasks\Symantec NetDetect.job [2010.08.11 14:25:47 | 000,000,162 | -H-- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\~$setzliche Grundlagen.doc [2010.08.11 10:49:54 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe [2010.08.11 01:23:44 | 000,026,624 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Gesetzliche Grundlagen.doc [2010.08.09 13:27:33 | 000,000,035 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Eigene Dateien\WUPDATE.INI [2010.08.09 12:38:36 | 000,000,654 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\McPoker.lnk [2010.08.09 12:37:58 | 004,998,168 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\McPokerSetup.exe [2010.08.06 18:14:21 | 009,830,454 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\dino500.bmp ========== Files Created - No Company Name ========== [2010.08.11 16:34:48 | 000,028,672 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Gesetzliche Grundlagen ne.doc [2010.08.11 16:32:01 | 000,017,920 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\aufgabenPROJEKT.doc [2010.08.11 16:00:07 | 000,000,708 | ---- | C] () -- C:\Dokumente und Einstellungen\***\defogger_disable.log [2010.08.11 15:59:31 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Defogger.exe [2010.08.11 14:25:47 | 000,000,162 | -H-- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\~$setzliche Grundlagen.doc [2010.08.10 14:35:14 | 000,026,624 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Gesetzliche Grundlagen.doc [2010.08.09 12:45:02 | 000,000,035 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Eigene Dateien\WUPDATE.INI [2010.08.09 12:38:36 | 000,000,654 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\McPoker.lnk [2010.08.09 12:37:12 | 004,998,168 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\McPokerSetup.exe [2010.08.06 18:14:11 | 009,830,454 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\dino500.bmp [2008.09.01 08:43:51 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2007.10.28 14:55:03 | 000,000,604 | ---- | C] () -- C:\WINDOWS\Sof2.INI [2007.10.23 13:43:12 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini [2007.10.23 13:43:12 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2007.06.18 22:52:49 | 000,000,148 | ---- | C] () -- C:\WINDOWS\QIII.INI [2007.01.06 21:01:33 | 000,000,141 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI [2007.01.06 21:01:33 | 000,000,040 | ---- | C] () -- C:\WINDOWS\BRDIAG.INI [2007.01.06 21:01:33 | 000,000,023 | ---- | C] () -- C:\WINDOWS\Brownie.ini [2007.01.06 21:01:26 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\BROSNMP.DLL [2007.01.06 21:01:26 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\BRGSRC32.DLL [2007.01.06 21:01:26 | 000,004,608 | ---- | C] () -- C:\WINDOWS\System32\BRGSRC16.DLL [2007.01.06 21:01:25 | 000,009,013 | ---- | C] () -- C:\WINDOWS\HL-2030.INI [2007.01.06 21:00:55 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2006.11.28 13:23:25 | 000,224,768 | ---- | C] () -- C:\WINDOWS\System32\b4fm.dll [2006.11.23 13:44:11 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\JJAKEn.dll [2006.11.06 03:29:45 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2006.10.18 13:29:22 | 000,029,696 | ---- | C] () -- C:\WINDOWS\System32\performent202.dll [2006.10.18 13:29:21 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\win32hp.dll [2006.10.18 13:29:17 | 000,012,544 | ---- | C] () -- C:\WINDOWS\spp3.dll [2006.10.18 13:29:05 | 000,030,208 | ---- | C] () -- C:\WINDOWS\inetdctr.dll [2006.09.21 22:06:32 | 000,000,433 | ---- | C] () -- C:\WINDOWS\mp3wavsolutions.INI [2006.06.20 13:07:03 | 000,001,024 | ---- | C] () -- C:\WINDOWS\ppengine.ini [2005.12.02 09:44:29 | 000,000,600 | ---- | C] () -- C:\WINDOWS\Rtcw.INI [2005.11.20 19:17:20 | 000,287,744 | ---- | C] () -- C:\WINDOWS\uno364mi.dll [2005.11.20 19:17:20 | 000,109,568 | ---- | C] () -- C:\WINDOWS\vos364mi.dll [2005.11.20 19:17:20 | 000,091,648 | ---- | C] () -- C:\WINDOWS\osl364mi.dll [2005.11.20 19:17:20 | 000,000,137 | ---- | C] () -- C:\WINDOWS\uno.ini [2005.11.20 19:16:11 | 000,002,423 | ---- | C] () -- C:\WINDOWS\tonlinst.ini [2005.11.20 19:15:58 | 000,051,712 | ---- | C] () -- C:\WINDOWS\wc98pp.dll [2005.11.13 14:56:23 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2005.09.15 09:34:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005.09.15 09:17:04 | 000,000,466 | ---- | C] () -- C:\WINDOWS\TBTdetect.ini [2005.09.15 08:02:27 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005.09.14 16:24:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI [2005.09.14 16:24:18 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2005.09.14 16:24:18 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2005.09.14 16:24:18 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2005.09.14 16:24:18 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2005.09.14 16:24:18 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2005.09.14 16:24:18 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll [2005.09.14 16:16:49 | 000,051,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWXT_kern_i386.sys [2005.09.14 16:16:49 | 000,029,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys [2005.09.14 15:34:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\CeEKey.INI [2005.09.14 15:28:47 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\EBLib.DLL [2005.09.14 11:36:50 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2005.09.14 11:35:11 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini [2005.09.14 11:35:11 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll [2005.09.14 11:35:11 | 000,010,161 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini [2005.09.14 11:35:11 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini [2005.09.12 13:17:32 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini [2005.09.12 11:36:46 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll [2005.09.12 11:36:46 | 000,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2005.08.11 04:02:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini [2005.08.02 10:39:44 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\HWS_Ctrl.dll [2005.06.20 10:24:48 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\TPeculiarity.dll [2005.06.13 09:11:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\TCtrlIO.dll [2005.06.06 09:44:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\SPCtl.dll [2005.06.06 09:39:40 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\EKECioCtl.dll [2004.12.02 15:20:18 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll [2004.09.22 10:09:06 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll [2004.08.22 18:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll [2004.07.20 17:04:02 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\TosBtHcrpAPI.dll [2004.04.04 19:48:35 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2004.04.04 19:45:35 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDE DX4800EFGIPSD.ini [2004.01.15 14:43:28 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TBTMonUI.dll [2004.01.14 03:46:34 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll [2003.07.29 15:33:26 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\TosHidAPI.dll [2003.07.16 13:09:31 | 000,626,688 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll [2003.02.20 18:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2002.10.03 14:42:27 | 000,000,034 | ---- | C] () -- C:\WINDOWS\Q3version.ini < End of report > Vielen Dank schon mal  viele Grüße Lekakapo |
| Themen zu 40 TAN trojaner - selbe symptone wieder bereits beschrieben |
| 0x00000001, 40 tan, acroiehelper.dll, adobe, agere systems, antivir, ask toolbar, ask.com, avgntflt.sys, avira, bho, browser, components, einstellungen, error, explorer, firefox.exe, format, google, helper, home, homepage, jucheck.exe, launch, location, logfile, mozilla, object, oldtimer, otl logfile, otl scan, otl.exe, plug-in, realtek, registry, scan, sched.exe, searchplugins, security, software, symantec, tan trojaner, temp, trojaner, usb |
Baum-Darstellung