Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Bifrost_1.2.1.exe , hartnäckig

Bifrost_1.2.1.exe , hartnäckig


Plagegeister aller Art und deren Bekämpfung: Bifrost_1.2.1.exe , hartnäckig

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 30.10.2010, 18:09   #1
cmd_freak
 
Bifrost_1.2.1.exe , hartnäckig - Icon27

Bifrost_1.2.1.exe , hartnäckig


Hallo allerseits!
Ich bin neu hier im Forum und bin 16 Jahre alt!
Ich habe aber leider ein Problem......
ich habe einen heftigen Virus auf meinem pc, aber Microsoft Security Essentials hat wahrscheinlich probleme, diesen virus loszuwerden.. immer wenn ich den computer ''bereinigt'' habe kommt schon wieder eine meldung
also 2 arten von Viren sind drauf, Win32/Rebhip.A und Wub32/Nuqel.AD
ich denke es hat damit etwas zu tun, dass mein bruder etwas rumgespielt hat, er hat es mir vorhin gebeichtet.
er weis aber leider nicht so genau was er denn gemacht hat......
aber er weiss einfach noch, dass er Bifrost_1.2.1.exe runtergeladen hat, weil er irgendwie einen virus basteln wollte....
dann konnte er es nicht öffnen und er liess es halt sein......
ich wäre euch wirklich sehr verbunden, wenn ihr mir helfen könntet!(sind mehrere! die vermehren sich sehr schnell hab ich gemerkt)

Liebe grüsse und danke schonmal für eure hilfe!

Alt 30.10.2010, 18:12   #2
markusg
/// Malware-holic
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


naja dazu kann ich nur sagen, wenn man keine ahnung hatt, finger weg, und das auf nem produktiv system zu tun, ist milde ausgedrückt, bescheuert...
hatt dein bruder noch den link, wo er das geladen hatt? den hätte ich gern, als private nachicht.

ootl:
Systemscan mit OTL
download otl:
http://filepony.de/download-otl/

Doppelklick auf die OTL.exe
(user von Windows 7 und Vista: Rechtsklick als Administrator ausführen)
1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
2. Hake an "scan all users"
3. Unter "Extra Registry wähle:
"Use Safelist" "LOP Check" "Purity Check"
4. Kopiere in die Textbox:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
5. Klicke "Scan"
6. 2 reporte werden erstellt:
OTL.Txt
Extras.Txt
beide posten.
__________________
Alt 30.10.2010, 18:29   #3
cmd_freak
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


und übrigens was für einen antivir empfehlt ihr mir? ich hab im moment eben Microsoft Security Essentials... aber der scheint ja nicht wirklich viel zu nützen....

danke markusg(mein bruder ist halt neugierig und ich nehm's ihm ned übel.....also wenn der pc nich schrottreif ist danach ...)


EDIT= ich habe die scans gemacht, hier die beiden reports=
OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 30.10.2010 19:23:28 - Run 1
OTL by OldTimer - Version 3.2.17.1     Folder = C:\Users\Sandro Krähenbühl\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 42,00% Memory free
8,00 Gb Paging File | 5,00 Gb Available in Paging File | 67,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453,63 Gb Total Space | 364,52 Gb Free Space | 80,36% Space Free | Partition Type: NTFS
Drive D: | 12,03 Gb Total Space | 1,70 Gb Free Space | 14,13% Space Free | Partition Type: NTFS
 
Computer Name: UNKNOWN | User Name: Sandro Krähenbühl | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Sandro Krähenbühl\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\ts3client_win32.exe (TeamSpeak Systems GmbH)
PRC - C:\Program Files (x86)\PC Tools Security\pctsGui.exe (PC Tools)
PRC - C:\Program Files (x86)\PC Tools Security\pctsSvc.exe (PC Tools)
PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (Hewlett-Packard)
PRC - C:\Program Files (x86)\PC Tools Security\pctsAuxs.exe (PC Tools)
PRC - C:\Program Files (x86)\Skype\Toolbars\Shared\SkypeNames2.exe (Skype Technologies S.A.)
PRC - C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Windows\SysWOW64\cscript.exe (Microsoft Corporation)
PRC - C:\Programme\eFusion\NavyFIELD\NavyFIELD.exe ()
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
PRC - C:\Program Files (x86)\Razer\Lachesis\razerhid.exe ()
PRC - C:\Programme\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Razer\Lachesis\razerofa.exe (Razer Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Sandro Krähenbühl\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\PC Tools Security\pctgmhk.dll (PC Tools)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (ezSharedSvc) -- C:\Windows\SysNative\ezsvc7.dll File not found
SRV:64bit: - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (sdCoreService) -- C:\Program Files (x86)\PC Tools Security\pctsSvc.exe (PC Tools)
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (sdAuxService) -- C:\Program Files (x86)\PC Tools Security\pctsAuxs.exe (PC Tools)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (GameConsoleService) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (TFsExDisk) -- C:\Windows\SysNative\Drivers\TFsExDisk.sys File not found
DRV:64bit: - (PCTCore) -- C:\Windows\SysNative\drivers\PCTCore64.sys (PC Tools)
DRV:64bit: - (pctEFA) -- C:\Windows\SysNative\drivers\pctEFA64.sys (PC Tools)
DRV:64bit: - (pctDS) -- C:\Windows\SysNative\drivers\pctDS64.sys (PC Tools)
DRV:64bit: - (VX3000) -- C:\Windows\SysNative\drivers\VX3000.sys (Microsoft Corporation)
DRV:64bit: - (rt70x64) -- C:\Windows\SysNative\drivers\netr7064.sys (Ralink Technology Corp.)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (NVNET) -- C:\Windows\SysNative\drivers\nvmf6264.sys (NVIDIA Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (PCDSRVC{F36B3A4C-F95654BD-06000000}_0) -- c:\Programme\PC-Doctor for Windows\pcdsrvc_x64.pkms (PC-Doctor, Inc.)
DRV - (TFsExDisk) -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys (Teruten Inc)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQCON/11
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/CQCON/11
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQCON/11
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/CQCON/11
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQCON/11
IE - HKU\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/
IE - HKU\S-1-5-21-1323672493-424808687-322642512-1001\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1323672493-424808687-322642512-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1323672493-424808687-322642512-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=;ftp=;https=;
 
 
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RadioBar Toolbar) - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files (x86)\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (RadioBar Toolbar) - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files (x86)\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
O3 - HKU\S-1-5-21-1323672493-424808687-322642512-1001\..\Toolbar\WebBrowser: (RadioBar Toolbar) - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files (x86)\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
O4:64bit: - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [PC-Doctor for Windows localizer] C:\Programme\PC-Doctor for Windows\localizer.exe (PC-Doctor, Inc.)
O4:64bit: - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe (Hewlett-Packard)
O4 - HKLM..\Run: [ISTray] C:\Program Files (x86)\PC Tools Security\pctsGui.exe (PC Tools)
O4 - HKLM..\Run: [Lachesis] C:\Program Files (x86)\Razer\Lachesis\razerhid.exe ()
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1323672493-424808687-322642512-1001..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-1323672493-424808687-322642512-1001..\Run: [Steam] c:\program files (x86)\steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-1323672493-424808687-322642512-1001..\Run: [Wisdom-soft ScreenHunter 5.1 Pro]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - Startup: C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKU\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sandro Krähenbühl\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sandro Krähenbühl\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\toolbarchrome {718733BC-AD64-4e5f-AC18-A85FBD75D54D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\toolbarchrome {718733BC-AD64-4e5f-AC18-A85FBD75D54D} - C:\Program Files (x86)\RadioBar\toolbar.ni.dll (IMEDIX WEB TECHNOLOGIES LTD.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: ezSharedSvc - C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS)
 
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\SysWow64\lhacm.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Error creating restore point.
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.10.30 19:21:39 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Sandro Krähenbühl\Desktop\OTL.exe
[2010.10.30 19:13:17 | 000,816,016 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctEFA64.sys
[2010.10.30 19:13:17 | 000,452,872 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctDS64.sys
[2010.10.30 19:13:16 | 000,331,368 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2010.10.30 19:13:16 | 000,136,168 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2010.10.30 19:13:15 | 000,254,624 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys
[2010.10.30 19:13:11 | 000,177,368 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctplfw64.sys
[2010.10.30 19:13:11 | 000,116,616 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys
[2010.10.30 19:13:11 | 000,042,968 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctNdis-DNS64.sys
[2010.10.30 19:13:10 | 000,092,896 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctplsg64.sys
[2010.10.30 19:13:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Tools Security
[2010.10.30 19:13:03 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\PC Tools
[2010.10.30 19:13:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools
[2010.10.30 19:10:13 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2010.10.30 13:02:06 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010.10.30 10:24:37 | 000,000,000 | ---D | C] -- C:\directory
[2010.10.29 23:45:38 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HideIPEasy
[2010.10.29 23:45:38 | 000,000,000 | ---D | C] -- C:\ProgramData\HideIPEasy
[2010.10.29 23:45:20 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\Documents\HideIp
[2010.10.29 23:44:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HideIPEasy
[2010.10.29 23:23:02 | 000,111,104 | ---- | C] (Angryziber Software) -- C:\Users\Sandro Krähenbühl\Desktop\ipscan.exe
[2010.10.29 22:53:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cheat Engine
[2010.10.29 22:44:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wisdom-soft ScreenHunter 5 Pro
[2010.10.29 21:20:23 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\Documents\Hackertools
[2010.10.27 21:34:17 | 000,000,000 | ---D | C] -- C:\Temp
[2010.10.27 21:30:32 | 000,000,000 | ---D | C] -- C:\Programme\ICQLite
[2010.10.27 21:30:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQLite
[2010.10.27 18:04:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teamspeak2_RC2
[2010.10.27 16:28:21 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2010.10.27 16:28:21 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2010.10.27 16:28:21 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2010.10.27 16:28:21 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2010.10.27 16:28:21 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2010.10.27 16:28:21 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2010.10.27 16:28:21 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2010.10.27 16:28:16 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2010.10.13 21:51:16 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\ITTerritory
[2010.10.13 21:40:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mail.Ru
[2010.10.13 21:22:48 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2010.10.13 21:22:48 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2010.10.13 21:22:48 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2010.10.13 21:22:46 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2010.10.13 21:22:44 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2010.10.13 21:22:43 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2010.10.13 21:22:43 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2010.10.13 21:22:43 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2010.10.13 21:22:43 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2010.10.13 21:22:38 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.10.13 21:22:38 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.10.13 21:22:37 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010.10.13 21:22:37 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010.10.13 21:22:37 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010.10.13 21:22:36 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010.10.13 21:22:36 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010.10.13 21:22:36 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.10.13 21:22:36 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.10.13 21:22:36 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.10.13 21:22:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010.10.13 21:22:36 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010.10.13 21:22:36 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.10.13 21:22:36 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.10.13 21:22:34 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2010.10.13 21:22:33 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2010.10.13 21:22:32 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2010.10.13 21:22:32 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2010.10.13 21:22:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2010.10.13 13:36:32 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2010.10.13 13:36:31 | 000,000,000 | ---D | C] -- C:\Programme\iTunes
[2010.10.13 13:36:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2010.10.13 13:35:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2010.10.13 13:34:23 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour
[2010.10.13 13:34:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2010.10.07 16:23:49 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\AppData\Local\ElevatedDiagnostics
[2010.10.06 16:37:12 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\AppData\Local\Logitech
[2010.10.06 16:36:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech
[2010.10.06 16:36:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2010.10.06 16:35:58 | 000,000,000 | ---D | C] -- C:\Programme\Logitech
[2010.10.06 16:31:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Razer
[2010.10.06 16:31:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Razer
[2010.10.04 16:13:25 | 000,000,000 | ---D | C] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Ubisoft
[2010.10.04 16:13:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2010.10.04 16:06:58 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2010.10.04 16:06:58 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2010.10.04 16:06:58 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2010.10.04 16:06:58 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2010.10.04 16:06:56 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2010.10.04 16:06:56 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2010.10.04 15:55:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
[2010.07.04 20:41:58 | 000,121,757 | ---- | C] (TeamSpeak Systems GmbH) -- C:\Program Files (x86)\Uninstall.exe
[2010.03.09 07:21:02 | 007,068,928 | ---- | C] (TeamSpeak Systems GmbH) -- C:\Program Files (x86)\ts3client_win32.exe
[2009.12.02 15:48:04 | 000,397,312 | ---- | C] (Firelight Technologies) -- C:\Program Files (x86)\fmodex.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.10.30 19:21:39 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Sandro Krähenbühl\Desktop\OTL.exe
[2010.10.30 19:13:29 | 001,215,922 | ---- | M] () -- C:\Windows\SysNative\drivers\Cat.DB
[2010.10.30 19:13:14 | 000,002,066 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Doctor.lnk
[2010.10.30 19:10:13 | 000,507,360 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\sdsetup[1].exe
[2010.10.30 18:55:01 | 000,001,130 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.10.30 17:28:31 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.10.30 17:28:31 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.10.30 17:21:32 | 000,001,126 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.10.30 17:21:25 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2010.10.30 17:21:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.10.30 17:21:12 | 3220,676,608 | -HS- | M] () -- C:\hiberfil.sys
[2010.10.30 15:14:41 | 000,001,669 | ---- | M] () -- C:\Users\Public\Desktop\NavyFIELD Europe (DE).lnk
[2010.10.30 12:43:56 | 000,001,023 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2010.10.30 12:21:21 | 000,000,103 | RHS- | M] () -- C:\Windows\SysWow64\autorun.ini
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\Windows.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\SysWow64\drivers\UMDF\UMDF.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\tasks\Tasks.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\SysWow64\SysWOW64.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\SysWow64\System32.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\System\system.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\Sandro Krähenbühl.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Roaming.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Program Files\Programme.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\ProgramData\ProgramData.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Program Files\Program Files.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Program Files (x86)\Program Files (x86).exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Local\Lokale Einstellungen.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Local\Local.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Program Files\Common Files\Gemeinsame Dateien.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\Documents\Eigene Dateien.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\SysWow64\drivers\drivers.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Public\Documents\Dokumente.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\Documents\Documents.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Public\Documents\Documents.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Desktop.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Public\Desktop\Desktop.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\SysWow64\drivers\UMDF\de-DE\de-DE.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\SysWow64\drivers\de-DE\de-DE.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Program Files\Common Files\Common Files.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Program Files (x86)\Common Files\Common Files.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\ProgramData\Application Data.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Anwendungsdaten.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Local\Anwendungsdaten.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\ProgramData\Anwendungsdaten.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\ProgramData\All Users.exe
[2010.10.29 23:46:28 | 000,001,037 | ---- | M] () -- C:\Users\Public\Desktop\Hide IP Easy.lnk
[2010.10.29 23:23:02 | 000,111,104 | ---- | M] (Angryziber Software) -- C:\Users\Sandro Krähenbühl\Desktop\ipscan.exe
[2010.10.29 23:10:27 | 000,001,480 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\MyProgram 4 Haxorz!.lnk
[2010.10.27 18:04:14 | 000,000,984 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Teamspeak 2 RC2.lnk
[2010.10.24 17:02:40 | 000,000,522 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Sandro Krähenbühl.job
[2010.10.14 10:27:44 | 000,328,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.10.13 21:43:16 | 000,001,080 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Drachenkrieg.lnk
[2010.10.07 16:45:30 | 000,000,200 | ---- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\wklnhst.dat
[2010.10.06 16:37:00 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_LgLcdSSDriver_01_00_00.Wdf
[2010.10.05 11:10:36 | 000,177,368 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\pctplfw64.sys
[2010.10.05 11:09:16 | 000,331,368 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2010.10.04 16:10:56 | 000,000,688 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Assassin's Creed II -.lnk
[2010.10.02 14:12:56 | 000,001,812 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Day of Defeat Source.lnk
[2010.10.02 14:12:56 | 000,001,810 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Half-Life 2 Deathmatch.lnk
[2010.10.02 14:12:56 | 000,001,810 | ---- | M] () -- C:\Users\Sandro Krähenbühl\Desktop\Counter-Strike Source.lnk
[2010.10.02 02:50:20 | 007,068,928 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files (x86)\ts3client_win32.exe
[2010.10.02 02:50:20 | 000,000,990 | ---- | M] () -- C:\Program Files (x86)\mirrors.ini
[2010.10.02 02:50:20 | 000,000,000 | ---- | M] () -- C:\Program Files (x86)\update.ini
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.10.30 19:13:20 | 001,215,922 | ---- | C] () -- C:\Windows\SysNative\drivers\Cat.DB
[2010.10.30 19:13:14 | 000,002,066 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Doctor.lnk
[2010.10.30 19:10:13 | 000,507,360 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\sdsetup[1].exe
[2010.10.30 15:14:41 | 000,001,669 | ---- | C] () -- C:\Users\Public\Desktop\NavyFIELD Europe (DE).lnk
[2010.10.30 12:43:56 | 000,001,023 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2010.10.30 11:15:32 | 000,578,748 | RHS- | C] () -- C:\Windows\SysWow64\SysWOW64.exe
[2010.10.30 11:13:29 | 000,578,748 | RHS- | C] () -- C:\Windows\SysWow64\drivers\drivers.exe
[2010.10.30 11:12:55 | 000,578,748 | RHS- | C] () -- C:\Windows\SysWow64\System32.exe
[2010.10.30 11:12:54 | 000,578,748 | RHS- | C] () -- C:\Windows\System\system.exe
[2010.10.30 11:10:17 | 000,578,748 | RHS- | C] () -- C:\Windows\Fonts\Fonts.exe
[2010.10.30 11:06:57 | 000,578,748 | RHS- | C] () -- C:\Windows\Windows.exe
[2010.10.30 11:03:08 | 000,578,748 | RHS- | C] () -- C:\Programme\Programme.exe
[2010.10.30 11:01:08 | 000,578,748 | RHS- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe
[2010.10.30 11:00:05 | 000,578,748 | RHS- | C] () -- C:\Users\Public\Desktop\Desktop.exe
[2010.10.30 10:47:54 | 000,578,748 | RHS- | C] () -- C:\Windows\tasks\Tasks.exe
[2010.10.30 10:42:12 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Local\Lokale Einstellungen.exe
[2010.10.30 10:42:11 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\Documents\Eigene Dateien.exe
[2010.10.30 10:42:04 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\Documents\Documents.exe
[2010.10.30 10:42:04 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Desktop.exe
[2010.10.30 10:41:31 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe
[2010.10.30 10:41:13 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Roaming.exe
[2010.10.30 10:39:42 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Local\Local.exe
[2010.10.30 10:39:42 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Local\Anwendungsdaten.exe
[2010.10.30 10:39:41 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\Sandro Krähenbühl.exe
[2010.10.30 10:39:41 | 000,578,748 | RHS- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Anwendungsdaten.exe
[2010.10.30 10:36:40 | 000,578,748 | RHS- | C] () -- C:\ProgramData\All Users.exe
[2010.10.30 10:30:12 | 000,578,748 | RHS- | C] () -- C:\Program Files (x86)\Common Files\Common Files.exe
[2010.10.30 10:30:00 | 000,578,748 | RHS- | C] () -- C:\Users\Public\Documents\Dokumente.exe
[2010.10.30 10:30:00 | 000,578,748 | RHS- | C] () -- C:\Users\Public\Documents\Documents.exe
[2010.10.30 10:29:56 | 000,578,748 | RHS- | C] () -- C:\ProgramData\Application Data.exe
[2010.10.30 10:29:54 | 000,578,748 | RHS- | C] () -- C:\ProgramData\Anwendungsdaten.exe
[2010.10.30 10:29:52 | 000,578,748 | RHS- | C] () -- C:\ProgramData\ProgramData.exe
[2010.10.30 10:29:47 | 000,578,748 | RHS- | C] () -- C:\Program Files (x86)\Program Files (x86).exe
[2010.10.30 10:27:21 | 000,578,748 | RHS- | C] () -- C:\Programme\Common Files\Gemeinsame Dateien.exe
[2010.10.30 10:26:51 | 000,578,748 | RHS- | C] () -- C:\Programme\Program Files.exe
[2010.10.30 10:26:51 | 000,578,748 | RHS- | C] () -- C:\Programme\Common Files\Common Files.exe
[2010.10.30 10:24:36 | 000,000,103 | RHS- | C] () -- C:\Windows\SysWow64\autorun.ini
[2010.10.29 23:44:45 | 000,001,037 | ---- | C] () -- C:\Users\Public\Desktop\Hide IP Easy.lnk
[2010.10.29 23:09:48 | 000,001,480 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\MyProgram 4 Haxorz!.lnk
[2010.10.27 18:04:14 | 000,000,984 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Teamspeak 2 RC2.lnk
[2010.10.13 21:43:16 | 000,001,080 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Drachenkrieg.lnk
[2010.10.06 16:37:00 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_LgLcdSSDriver_01_00_00.Wdf
[2010.10.04 16:10:56 | 000,000,688 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Assassin's Creed II -.lnk
[2010.10.02 14:12:56 | 000,001,812 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Day of Defeat Source.lnk
[2010.10.02 14:12:56 | 000,001,810 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Half-Life 2 Deathmatch.lnk
[2010.10.02 14:12:56 | 000,001,810 | ---- | C] () -- C:\Users\Sandro Krähenbühl\Desktop\Counter-Strike Source.lnk
[2010.09.21 10:04:10 | 000,075,841 | ---- | C] () -- C:\Program Files (x86)\changelog.txt
[2010.09.21 10:03:56 | 000,379,648 | ---- | C] () -- C:\Program Files (x86)\update.exe
[2010.09.21 10:03:52 | 000,034,466 | ---- | C] () -- C:\Program Files (x86)\apps.ini
[2010.09.21 10:03:52 | 000,000,990 | ---- | C] () -- C:\Program Files (x86)\mirrors.ini
[2010.07.19 18:29:16 | 000,004,608 | ---- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.07.04 20:46:05 | 000,024,252 | ---- | C] () -- C:\Program Files (x86)\license.txt
[2010.07.04 20:45:54 | 000,000,000 | ---- | C] () -- C:\Program Files (x86)\update.ini
[2010.06.13 19:37:08 | 000,000,200 | ---- | C] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\wklnhst.dat
[2009.12.24 16:14:44 | 002,066,944 | ---- | C] () -- C:\Program Files (x86)\QtCore4.dll
[2009.10.13 15:41:34 | 007,692,800 | ---- | C] () -- C:\Program Files (x86)\QtGui4.dll
[2009.10.13 15:41:34 | 000,666,624 | ---- | C] () -- C:\Program Files (x86)\QtNetwork4.dll
[2009.09.29 16:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009.08.03 01:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.26 17:24:18 | 000,015,498 | ---- | C] () -- C:\Windows\VX3000.ini
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
 
========== LOP Check ==========
 
[2010.10.30 10:41:16 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.10.30 10:41:16 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\FreeHideIP
[2010.10.30 10:41:17 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HideIPEasy
[2005.08.20 10:34:40 | 000,000,000 | RHSD | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\install
[2010.10.30 10:41:18 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\ITTerritory
[2010.10.30 10:41:18 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\LolClient
[2010.10.30 10:41:19 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien
[2010.10.30 10:41:32 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera
[2010.10.30 10:41:33 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Template
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Tific
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client
[2010.10.30 10:42:03 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Ubisoft
[2010.10.30 10:42:03 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\WinBatch
[2010.10.30 10:42:04 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\_MDLogs
[2010.05.26 19:15:10 | 000,000,544 | ---- | M] () -- C:\Windows\Tasks\PCDRScheduledMaintenance.job
[2010.08.02 16:22:50 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Windows\Tasks\Tasks.exe
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2010.10.30 10:41:13 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe
[2010.10.30 10:41:14 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\AdobeUM
[2010.10.30 10:41:14 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer
[2010.10.30 10:41:15 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX
[2010.10.30 10:41:16 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.10.30 10:41:16 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\FreeHideIP
[2010.10.30 10:41:16 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard
[2010.10.30 10:41:17 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HideIPEasy
[2010.10.30 18:04:04 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HP Support Assistant
[2010.10.30 10:41:17 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\hpqLog
[2010.10.30 18:04:04 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HpUpdate
[2010.10.30 10:41:17 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Identities
[2005.08.20 10:34:40 | 000,000,000 | RHSD | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\install
[2010.10.30 10:41:17 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\InstallShield
[2010.10.30 10:41:18 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\ITTerritory
[2010.10.30 10:41:18 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\LolClient
[2010.10.30 10:41:18 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia
[2010.10.30 10:41:19 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Media Center Programs
[2010.10.30 10:41:19 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien
[2010.10.30 10:41:20 | 000,000,000 | --SD | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft
[2010.10.30 10:41:32 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera
[2010.10.30 19:13:03 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\PC Tools
[2010.10.30 10:41:33 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung
[2010.10.30 10:41:34 | 000,000,000 | RH-D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\SecuROM
[2010.10.30 19:25:10 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\skypePM
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\teamspeak2
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Template
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Tific
[2010.10.30 10:42:00 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client
[2010.10.30 10:42:03 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Ubisoft
[2010.10.30 10:42:03 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\WinBatch
[2010.10.30 10:42:03 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\WinRAR
[2010.10.30 10:42:04 | 000,000,000 | ---D | M] -- C:\Users\Sandro Krähenbühl\AppData\Roaming\_MDLogs
 
< %APPDATA%\*.exe /s >
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Anwendungsdaten.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Roaming.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\_MDLogs\_MDLogs.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Adobe.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\Acrobat.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\6.0\6.0.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\6.0\AcroForm\AcroForm.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\6.0\Collab\Collab.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\6.0\eBooks\eBooks.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\6.0\Preferences\Preferences.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Acrobat\6.0\Updater\Updater.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\AIR.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\CRLCache\CRLCache.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\Updater\Updater.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\Updater\Background\Background.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\Updater\Background\1.0\1.0.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\Updater\Background\1.0\META-INF\META-INF.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\AIR\Updater\Background\full\full.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Flash Player\Flash Player.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Flash Player\AssetCache\AssetCache.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Adobe\Flash Player\AssetCache\KA2U3VVR\KA2U3VVR.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\AdobeUM\AdobeUM.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer\Apple Computer.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer\iTunes\iTunes.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer\iTunes\Cookies\Cookies.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer\iTunes\iTunes Plug-ins\iTunes Plug-ins.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer\Logs\Logs.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Apple Computer\Preferences\Preferences.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX\DivX.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX\DivX Codec\DivX Codec.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX\DivX Stream Engine\DivX Stream Engine.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX\DivX Stream Engine\v3.1\v3.1.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX\Player\Player.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DivX\TransferWizard\TransferWizard.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\DVDVideoSoftIEHelpers\DVDVideoSoftIEHelpers.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\FreeHideIP\FreeHideIP.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\Hewlett-Packard.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HP Active Support\HP Active Support.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HP Active Support\cee\cee.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HP Setup\HP Setup.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HP Setup\REGDATA\REGDATA.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HP Support Framework\HP Support Framework.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HPAdvisor\HPAdvisor.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Hewlett-Packard\HPAdvisor\cee\cee.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HideIPEasy\HideIPEasy.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HP Support Assistant\HP Support Assistant.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\hpqLog\hpqLog.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\HpUpdate\HpUpdate.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Identities\Identities.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Identities\{60D557AF-223E-4B99-B57B-14E3D52E34E5}\{60D557AF-223E-4B99-B57B-14E3D52E34E5}.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\install\install.exe
[2006.06.25 16:16:53 | 000,281,088 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\install\server.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\InstallShield\InstallShield.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\InstallShield\ISEngine12.0\ISEngine12.0.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\ITTerritory\ITTerritory.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\ITTerritory\DwarClientDe\DwarClientDe.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\LolClient\LolClient.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\LolClient\Local Store\Local Store.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Macromedia.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\Flash Player.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\#Security\#Security.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\#SharedObjects.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7Z8N9LUE\7Z8N9LUE.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\macromedia.com\macromedia.com.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\support.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\flashplayer.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\sys.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\www.macromedia.com.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\bin.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Media Center Programs\Media Center Programs.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien\Meine Die Schlacht um Mittelerde-Dateien.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien\MapPreviews\MapPreviews.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien\Maps\Maps.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Microsoft.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\CLR Security Config\CLR Security Config.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\v2.0.50727.312.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Crypto\Crypto.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Crypto\RSA\RSA.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1323672493-424808687-322642512-1001\S-1-5-21-1323672493-424808687-322642512-1001.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\eHome\eHome.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\HTML Help\HTML Help.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\IdentityCRL\IdentityCRL.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\IdentityCRL\production\production.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Installer\Installer.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Installer\{9580813D-94B1-4C28-9426-A441E2BB29A5}\{9580813D-94B1-4C28-9426-A441E2BB29A5}.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\User Pinned.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ImplicitAppShortcuts.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\7e4dca80246863e3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9d91276b0be3e46b\9d91276b0be3e46b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\StartMenu.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TaskBar.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\UserData.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\6FV3WY1M\6FV3WY1M.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\JMLDXQRY\JMLDXQRY.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\JWN9IJ4J\JWN9IJ4J.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\Low.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\CAK5ZV1N\CAK5ZV1N.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\ELXW96RI\ELXW96RI.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\I35BIMXP\I35BIMXP.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\YG6Z32PC\YG6Z32PC.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Internet Explorer\UserData\WXJB1ACD\WXJB1ACD.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\MMC\MMC.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\MSN Messenger\MSN Messenger.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\MSN Messenger\1814093037\1814093037.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\MSN Messenger\2773194225\2773194225.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\MSN Messenger\400439376\400439376.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Network\Network.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Network\Connections\Connections.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Network\Connections\Pbk\Pbk.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\_hiddenPbk.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Protect\Protect.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Protect\S-1-5-21-1323672493-424808687-322642512-1001\S-1-5-21-1323672493-424808687-322642512-1001.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Speech\Speech.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Speech\Files\Files.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Speech\Files\UserLexicons\UserLexicons.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\SystemCertificates\SystemCertificates.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\SystemCertificates\My\My.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\UProof\UProof.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Vault\Vault.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Windows.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Cookies\Cookies.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Cookies\Low\Low.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\IECompatCache\IECompatCache.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\IECompatCache\Low\Low.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\IETldCache\IETldCache.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\IETldCache\Low\Low.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Libraries\Libraries.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Netzwerkumgebung.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Druckumgebung.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\PrivacIE\PrivacIE.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\Low.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Recent\Recent.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\AutomaticDestinations.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CustomDestinations.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\SendTo\SendTo.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Start Menu.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Startmenü.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programme.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programs.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessories.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Accessibility.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Tools.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Administrative Tools.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Games.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Maintenance.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\ROCCAT GUI (CSS).exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\Configuration\Configuration.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\Configuration\My DXLevel\My DXLevel.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\Configuration\My Model detail\My Model detail.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\Configuration\My Resolution\My Resolution.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\Configuration\My Texture detail\My Texture detail.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ROCCAT GUI (CSS)\Configuration\My Window Mode\My Window Mode.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Startup.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Uninstall\Uninstall.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Templates\Templates.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Templates\Vorlagen.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Windows\Themes\Themes.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Works\Works.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Microsoft\Works\1031\1031.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera\Opera.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera\dictionaries\dictionaries.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera\sessions\sessions.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera\styles\styles.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera\styles\user\user.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Opera\Opera\webserver\webserver.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\Samsung.exe
[2010.08.25 19:27:53 | 000,069,632 | ---- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\DriverChecker.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\New PC Studio.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\AlbumArt\AlbumArt.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\MediaManager\MediaManager.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Notify\Notify.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\OpenTemp\OpenTemp.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Photo_PBGroup\Photo_PBGroup.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Photo_Phonebook\Photo_Phonebook.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Stage\Stage.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Stage\BkgndImage\BkgndImage.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Temp\Temp.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\ToWeb\ToWeb.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Samsung\New PC Studio\Widgets\Widgets.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\SecuROM\SecuROM.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\SecuROM\UserData\UserData.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\Skype.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\Content\Content.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\My Skype Received Files\My Skype Received Files.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\Pictures\Pictures.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\shared_dynco\shared_dynco.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\shared_httpfe\shared_httpfe.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\vanillman.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\chatsync.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\01\01.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\02\02.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\03\03.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\04\04.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\05\05.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\06\06.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\07\07.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\09\09.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\0a\0a.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\0b\0b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\0c\0c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\0d\0d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\0e\0e.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\11\11.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\12\12.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\13\13.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\15\15.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\16\16.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\17\17.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\18\18.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\19\19.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\1a\1a.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\1c\1c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\1e\1e.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\1f\1f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\20\20.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\21\21.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\22\22.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\23\23.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\24\24.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\25\25.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\27\27.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\29\29.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\2c\2c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\2d\2d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\2e\2e.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\2f\2f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\31\31.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\32\32.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\34\34.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\35\35.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\36\36.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\38\38.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\3c\3c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\3f\3f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\40\40.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\43\43.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\45\45.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\47\47.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\48\48.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\49\49.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\4b\4b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\4c\4c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\4e\4e.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\4f\4f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\50\50.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\51\51.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\52\52.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\53\53.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\54\54.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\55\55.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\56\56.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\57\57.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\58\58.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\5a\5a.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\5b\5b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\5d\5d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\5f\5f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\60\60.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\61\61.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\64\64.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\65\65.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\66\66.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\69\69.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\6b\6b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\6c\6c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\6d\6d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\6e\6e.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\6f\6f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\70\70.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\72\72.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\74\74.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\76\76.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\77\77.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\79\79.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\7b\7b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\7c\7c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\7d\7d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\7e\7e.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\7f\7f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\83\83.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\84\84.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\85\85.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\86\86.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\87\87.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\88\88.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\89\89.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\8b\8b.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\8d\8d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\8f\8f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\90\90.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\91\91.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\93\93.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\94\94.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\96\96.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\97\97.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\98\98.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\99\99.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\9a\9a.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\9c\9c.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\9d\9d.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\9f\9f.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a2\a2.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a3\a3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a4\a4.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a5\a5.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a6\a6.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a8\a8.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\a9\a9.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\aa\aa.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\ab\ab.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\ad\ad.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\af\af.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\b0\b0.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\b3\b3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\b6\b6.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\b8\b8.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\b9\b9.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\bb\bb.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\bd\bd.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\be\be.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\bf\bf.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c0\c0.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c1\c1.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c3\c3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c4\c4.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c5\c5.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c6\c6.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\c8\c8.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\cb\cb.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\cc\cc.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\cd\cd.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\cf\cf.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d0\d0.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d1\d1.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d2\d2.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d3\d3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d4\d4.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d5\d5.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d6\d6.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d7\d7.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\d9\d9.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\db\db.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\dc\dc.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\dd\dd.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\de\de.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\df\df.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\e1\e1.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\e2\e2.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\e3\e3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\e5\e5.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\e6\e6.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\ea\ea.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\ed\ed.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\ef\ef.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f1\f1.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f2\f2.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f3\f3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f4\f4.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f5\f5.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f6\f6.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\f7\f7.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\fa\fa.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\fb\fb.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\fc\fc.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\chatsync\fe\fe.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\httpfe\httpfe.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Skype\vanillman\voicemail\voicemail.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\skypePM\skypePM.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\teamspeak2\teamspeak2.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Template\Template.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Tific\Tific.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\TS3Client.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\cache.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\ckxoNFVvTjdpamhJVC9zbXFodVVib2lZTjdBPQ==\ckxoNFVvTjdpamhJVC9zbXFodVVib2lZTjdBPQ==.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\ckxoNFVvTjdpamhJVC9zbXFodVVib2lZTjdBPQ==\clients\clients.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\ckxoNFVvTjdpamhJVC9zbXFodVVib2lZTjdBPQ==\icons\icons.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\dmJGelY3MEFXSjhtekV4ZVAwMXN4anJ0N0ZJPQ==\dmJGelY3MEFXSjhtekV4ZVAwMXN4anJ0N0ZJPQ==.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\dmJGelY3MEFXSjhtekV4ZVAwMXN4anJ0N0ZJPQ==\channels\channels.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\dmJGelY3MEFXSjhtekV4ZVAwMXN4anJ0N0ZJPQ==\icons\icons.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==\channels\channels.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==\clients\clients.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==\icons\icons.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\remote.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\wi.g-portal.de\wi.g-portal.de.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\wi.g-portal.de\logos\logos.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\wi.g-portal.de\logos\ts3\ts3.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\www.hod-navyfield.de\www.hod-navyfield.de.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\www.hod-navyfield.de\images\images.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\cache\remote\www.hod-navyfield.de\images\stories\stories.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\chats\chats.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\chats\ckxoNFVvTjdpamhJVC9zbXFodVVib2lZTjdBPQ==\ckxoNFVvTjdpamhJVC9zbXFodVVib2lZTjdBPQ==.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\chats\dmJGelY3MEFXSjhtekV4ZVAwMXN4anJ0N0ZJPQ==\dmJGelY3MEFXSjhtekV4ZVAwMXN4anJ0N0ZJPQ==.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\chats\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==\NndJdTIwcFNLNWFXcUQ4bUJaWC8wR3lHekRBPQ==.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\TS3Client\logs\logs.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Ubisoft\Ubisoft.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\Ubisoft\Assassin's Creed 2\Assassin's Creed 2.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\WinBatch\WinBatch.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\WinBatch\Settings\Settings.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () -- C:\Users\Sandro Krähenbühl\AppData\Roaming\WinRAR\WinRAR.exe
 
< %SYSTEMDRIVE%\*.exe >
[2007.11.07 08:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EVENTLOG.DLL  >
[2007.05.17 22:34:04 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\Cyberlink\PowerDirector\EventLog.dll
 
< MD5 for: EXPLORER.EXE  >
[2009.10.06 08:06:36 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2009.10.06 08:35:29 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2010.10.30 10:08:06 | 000,578,748 | RHS- | M] () MD5=88CB90D511782647BD45022F1DB758DC -- C:\Users\Sandro Krähenbühl\AppData\Local\Microsoft\Windows\Explorer\Explorer.exe
[2010.07.15 22:58:37 | 000,004,608 | ---- | M] () MD5=9214399E2FDE9C7549C2D5FD0E24F808 -- C:\Users\Sandro Krähenbühl\AppData\Local\Xenocode\ApplianceCaches\GameCamV2.exe_v7AC6EAFE\Native\STUBEXE\@SYSTEM@\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009.10.06 08:31:09 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2009.10.06 07:53:03 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.07.14 03:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll
[2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll
[2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2009.07.14 03:16:13 | 000,163,840 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\scrrun.dll
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 171 bytes -> C:\ProgramData\Temp:DFC5A2B2
@Alternate Data Stream - 168 bytes -> C:\ProgramData\Temp:DFC5A2B2

< End of report >
--- --- ---
ich hoffe du weisst was los ist ich hab schon lange kein plan mehr
__________________
Geändert von cmd_freak (30.10.2010 um 18:46 Uhr)

Alt 30.10.2010, 18:46   #4
cmd_freak
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


und noch der zweite, hatten nicht beide platz....OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 30.10.2010 19:23:28 - Run 1
OTL by OldTimer - Version 3.2.17.1     Folder = C:\Users\Sandro Krähenbühl\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 42,00% Memory free
8,00 Gb Paging File | 5,00 Gb Available in Paging File | 67,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453,63 Gb Total Space | 364,52 Gb Free Space | 80,36% Space Free | Partition Type: NTFS
Drive D: | 12,03 Gb Total Space | 1,70 Gb Free Space | 14,13% Space Free | Partition Type: NTFS
 
Computer Name: UNKNOWN | User Name: Sandro Krähenbühl | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
"DisableSR" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
"DisableSR" = 1
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{104FB32A-7CE3-4C4B-B2AA-70C613FF9DFA}" = iTunes
"{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support
"{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{6965A8D2-465D-4F98-9FAA-0E9E2348F329}" = Microsoft LifeCam
"{7598C430-8B00-4447-A710-0DDA0770370A}" = Logitech GamePanel Software 2.00
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"CCleaner" = CCleaner
"NVIDIA Drivers" = NVIDIA Drivers
"OfficeTrial" = Testversion von Microsoft Office Home and Student 2007
"PC-Doctor for Windows" = Hardwarediagnosetools
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam(TM)
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{179F3115-969C-454C-B524-464A026FD202}" = NavyFIELD Europa (DE)
"{17B4760F-334B-475D-829F-1A3E94A6A4E6}" = HP Setup
"{1D2C96C3-A3F3-49E7-B839-95279DED837F}" = Opera 10.60
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3F290582-3F4E-4B96-009C-E0BABAA40C42}" = Die Schlacht um Mittelerde(tm)
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{9580813D-94B1-4C28-9426-A441E2BB29A5}" = Counter-Strike: Source
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B60DCA15-56A3-4D2D-8747-22CF7D7B588B}" = HP Support Assistant
"{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer
"{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}" = HP Support Information
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Norton Online Backup
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C611CF88-969D-43E6-A877-D6D6439DD081}" = HP Remote Solution
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CB4532F7-A1BD-46D2-9938-3E7D4656FB18}" = Razer Lachesis
"{CC8E94A2-55C7-4460-953C-2A790180578C}" = LightScribe System Software
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004)
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"DivX Setup.divx.com" = DivX-Setup
"Drachenkrieg_is1" = Drachenkrieg (with media and plugins), version 1.1.29
"EasyBits Magic Desktop" = Magic Desktop
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.7
"Google Chrome" = Google Chrome
"HideIPEasy" = Hide IP Easy
"HP Remote Solution" = HP Remote Solution
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"League of Legends_is1" = League of Legends
"NSS" = Norton Security Scan
"RadioBar" = RadioBar Toolbar
"Spyware Doctor" = Spyware Doctor 8.0
"Steam App 240" = Counter-Strike: Source
"Steam App 630" = Alien Swarm
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"World of Warcraft" = World of Warcraft
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1323672493-424808687-322642512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >
--- --- ---
Alt 30.10.2010, 19:03   #5
markusg
/// Malware-holic
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


download malwarebytes:
Malwarebytes
instalieren, öffnen, registerkarte aktualisierung, programm updaten.
schalte alle laufenden programme ab, trenne die internetverbindung.
registerkarte scanner, komplett scan, funde entfernen, log posten.


Alt 30.10.2010, 20:32   #6
cmd_freak
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4999

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

30.10.2010 21:24:23
mbam-log-2010-10-30 (21-24-23).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 145622
Laufzeit: 17 Minute(n), 11 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Danke dir und ich weiss ich und mein bro haben keine ahnung von computer :P
aber ich habe mit ihm geredet und er hat sich entschuldigt, hehe.
aber ich habe mit pcdoctor auch nochmal gescannt(probeversion)
er hat 7 bedrohungen und 76 infizierungen gefunden, was soll ich jetzt glauben?
kann man eigendlich Malwarebytes als antivir benutzen, oder ist das nur ein viren-scann?

danke dir!!! ich kann meinen taskmanager wieder benutzen!!

Alt 30.10.2010, 20:36   #7
markusg
/// Malware-holic
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


das ist kein antiviren programm welches man als stand allone nutzen sollte, ich kenne das pc doctor log nicht, außerdem hatte ich nichts von einem pcdr scan geschrieben, bitte mache nur die von mir genannten scans, schau mal, ob man unter pcdr nen log findet

Alt 30.10.2010, 20:44   #8
cmd_freak
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


nein es gibt kein log bei pcdr, aber einfach ne auflistung(nicht editor und ich kanns ned kopieren...)
aber der log den ich vorhin geschickt hab ist vom malwarebytes!

Alt 30.10.2010, 20:57   #9
markusg
/// Malware-holic
 
Bifrost_1.2.1.exe , hartnäckig - Standard

Bifrost_1.2.1.exe , hartnäckig


bitte instaliere mal avira, damit sollte es klappen.
avira
http://www.trojaner-board.de/54192-a...tellungen.html
avira 10 so instalieren bzw. dann konfigurieren. wenn du die konfiguration übernommen hast, update das programm.
klicke dann auf "lokaler schutz" "lokale laufwerke" eventuelle funde in quarantäne, log posten.

Alt 31.10.2010, 00:53   #10
cmd_freak
 
Bifrost_1.2.1.exe , hartnäckig - Reden

Bifrost_1.2.1.exe , hartnäckig


Hallo, hier noch der vollständige scan-log von malwarebytes...

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4999

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

31.10.2010 01:50:14
mbam-log-2010-10-31 (01-50-14).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 365080
Laufzeit: 4 Stunde(n), 9 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

das hat echt lange gedauert -.-

hehe ok danke ich lade es sofort herunter!

Antwort

Themen zu Bifrost_1.2.1.exe , hartnäckig
bereinigt, bifrost, bifrost_1.2.1.exe, bruder, computer, einfach, essen, forum, hartnäckig, hilfe!, jahre, konnte, meldung, microsoft, microsoft security, microsoft security essentials, neu, nicht öffnen, probleme, schnell, schonmal, security, viren, virus, wahrscheinlich, win, wirklich, öffnen


« Trojaner --> ganzen PC neu aufsetzen? | quickKey.exe Fehlalarm? »


Ähnliche Themen: Bifrost_1.2.1.exe , hartnäckig


  1. Win XP, tr-trash-gen hartnäckig
    Log-Analyse und Auswertung - 28.01.2014 (9)
  2. GVU sehr hartnäckig
    Plagegeister aller Art und deren Bekämpfung - 07.06.2013 (25)
  3. GVU-Trojaner mit Webcam hartnäckig!
    Plagegeister aller Art und deren Bekämpfung - 24.08.2012 (18)
  4. mystart incredibar - hartnäckig!
    Plagegeister aller Art und deren Bekämpfung - 06.08.2012 (1)
  5. Gema Virus hartnäckig!
    Log-Analyse und Auswertung - 18.06.2012 (74)
  6. gema virus hartnäckig
    Log-Analyse und Auswertung - 30.03.2012 (1)
  7. Bifrost_1.2.1.exe , hartnäckig die 2te
    Plagegeister aller Art und deren Bekämpfung - 26.01.2011 (15)
  8. TR/Vilsel.akvj. hartnäckig
    Log-Analyse und Auswertung - 03.08.2010 (6)
  9. Trojaner ist hartnäckig...
    Mülltonne - 25.10.2008 (0)
  10. Virtumonde !hartnäckig!
    Plagegeister aller Art und deren Bekämpfung - 27.07.2008 (11)
  11. smitfraud-c. - extrem hartnäckig
    Log-Analyse und Auswertung - 01.01.2007 (3)
  12. about:blank - sehr hartnäckig / HJT log
    Log-Analyse und Auswertung - 07.01.2005 (1)
  13. Hartnäckig verseucht ;(
    Log-Analyse und Auswertung - 18.11.2004 (11)
  14. Unbekannt und HARTNÄCKIG
    Log-Analyse und Auswertung - 02.10.2004 (1)
  15. winsvs32.exe - ziemlich hartnäckig
    Plagegeister aller Art und deren Bekämpfung - 13.08.2004 (3)
  16. trojaner ist hartnäckig
    Log-Analyse und Auswertung - 23.06.2004 (6)
  17. Ein Trojaner ?? Ein Virus ?? Hartnäckig !!!
    Archiv - 15.01.2003 (6)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Bifrost_1.2.1.exe , hartnäckig - Hallo allerseits! Ich bin neu hier im Forum und bin 16 Jahre alt! Ich habe aber leider ein Problem...... ich habe einen heftigen Virus auf meinem pc, aber Microsoft Security - Bifrost_1.2.1.exe , hartnäckig...
Archiv
Du betrachtest: Bifrost_1.2.1.exe , hartnäckig auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55