Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows Recovery eingefangen!

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 17.05.2011, 16:06   #31
ezechiel32
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Hab's hinbekommen. Ein Dateiname hatte ein unzulässiges Zeichen. Hab den Ordner hochgeladen.

Alt 17.05.2011, 18:03   #32
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Combofix - Scripten

1. Starte das Notepad (Start / Ausführen / notepad[Enter])

2. Jetzt füge mit copy/paste den ganzen Inhalt der untenstehenden Codebox in das Notepad Fenster ein.

Code:
ATTFilter
DEQUARANTINE::
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp
QUIT::
         
3. Speichere im Notepad als CFScript.txt auf dem Desktop.

4. Deaktivere den Guard Deines Antivirenprogramms und eine eventuell vorhandene Software Firewall.
(Auch Guards von Ad-, Spyware Programmen und den Tea Timer (wenn vorhanden) !)

5. Dann ziehe die CFScript.txt auf die cofi.exe, so wie es im unteren Bild zu sehen ist. Damit wird Combofix neu gestartet.



6. Nach dem Neustart (es wird gefragt ob Du neustarten willst), poste bitte die folgenden Log Dateien:
Combofix.txt

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!


Danach bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________

__________________

Alt 17.05.2011, 22:15   #33
ezechiel32
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Ich bin die Vorgaben Schritt für Schritt durchgegangen. Zog die CFScript.txt auf die cofi.exe und nach kurzer Zeit spuckte diese dann folgende Log-Datei aus, aber nicht mit dem Titel Combofix.txt:

DeQuarantine.txt:

C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Default Programs.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Default Programs.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Windows Update.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Windows Update.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\æTorrent.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\æTorrent.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Adobe Reader 9.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Adobe Reader 9.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Media Center.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Media Center.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Sidebar.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Sidebar.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Anytime Upgrade.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Anytime Upgrade.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows DVD Maker.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows DVD Maker.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Fax and Scan.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Fax and Scan.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Media Player.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Media Player.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\XPS Viewer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\XPS Viewer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\7-Zip\7-Zip File Manager.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\7-Zip\7-Zip Help.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\7-Zip\7-Zip Help.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Calculator.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Calculator.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\displayswitch.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\displayswitch.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Math Input Panel.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Math Input Panel.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Mobility Center.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Mobility Center.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\NetworkProjection.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\NetworkProjection.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Paint.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Paint.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Remote Desktop Connection.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Snipping Tool.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Snipping Tool.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sound Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sound Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sticky Notes.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sticky Notes.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sync Center.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sync Center.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Welcome Center.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Welcome Center.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Wordpad.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Wordpad.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Speech Recognition.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Media Center\Media Center Programs\The Lord of the Rings Online.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Media Center\Media Center Programs\The Lord of the Rings Online.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Character Map.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Character Map.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\dfrgui.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Disk Cleanup.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Resource Monitor.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Information.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Information.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Restore.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Restore.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Task Scheduler.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\ShapeCollector.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\TabTip.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Windows Journal.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Component Services.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Component Services.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Computer Management.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Computer Management.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Data Sources (ODBC).lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Event Viewer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Event Viewer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\iSCSI Initiator.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Performance Monitor.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Print Management.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Print Management.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Security Configuration Management.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\services.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\services.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\System Configuration.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\System Configuration.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Task Scheduler.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows PowerShell Modules.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon MP3-Downloader\Amazon MP3-Downloader.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon MP3-Downloader\Amazon MP3-Downloader.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon MP3-Downloader\Uninstall Amazon MP3-Downloader.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon MP3-Downloader\Uninstall Amazon MP3-Downloader.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Dictation Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Dictation Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\DJ Mixing Software.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\DJ Mixing Software.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Multichannel Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Multichannel Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Multitrack Mixer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Multitrack Mixer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Sound File Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Sound File Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Sound File Editor.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Sound File Editor.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Sound File Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Sound File Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Streaming Audio Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Streaming Audio Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Streaming Audio Server.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Streaming Audio Server.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Text-to-Speech Reader.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Audio Related Programs\Text-to-Speech Reader.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Avira\AntiVir Desktop\AntiVir Hilfe.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Avira\AntiVir Desktop\AntiVir Hilfe.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Avira\AntiVir Desktop\AntiVir im Internet.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Avira\AntiVir Desktop\AntiVir im Internet.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Avira\AntiVir Desktop\AntiVir starten.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Avira\AntiVir Desktop\AntiVir starten.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\CCleaner\CCleaner Homepage.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\CCleaner\CCleaner Homepage.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\CCleaner\CCleaner.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\CCleaner\CCleaner.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\CCleaner\Uninstall CCleaner.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\CCleaner\Uninstall CCleaner.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\D-Link\D-Link Wireless N DWA-140\Connection Wizard.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\D-Link\D-Link Wireless N DWA-140\Connection Wizard.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\D-Link\D-Link Wireless N DWA-140\Uninstall.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\D-Link\D-Link Wireless N DWA-140\Uninstall.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\D-Link\D-Link Wireless N DWA-140\Wireless Connection Manager.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\D-Link\D-Link Wireless N DWA-140\Wireless Connection Manager.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DAEMON Tools Lite\SPTD Setup.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DAEMON Tools Lite\SPTD Setup.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DAEMON Tools Lite\Uninstall.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DAEMON Tools Lite\Uninstall.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\ReadMe.txt anzeigen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\ReadMe.txt anzeigen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\S.T.A.L.K.E.R. - Clear Sky entfernen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\S.T.A.L.K.E.R. - Clear Sky entfernen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\S.T.A.L.K.E.R. - Clear Sky.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\S.T.A.L.K.E.R. - Clear Sky.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\Spielanleitung.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\Spielanleitung.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\Website des Publishers.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\Website des Publishers.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\Website zum Spiel.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\Website zum Spiel.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Bringe DivX©-Videos auf Deine Website.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Bringe DivX©-Videos auf Deine Website.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Codec-Einstellungen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Codec-Einstellungen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\DivX Plus Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\DivX Plus Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\DivX Plus Player.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\DivX Plus Player.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\DivX Technische Untersttzung.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\DivX Technische Untersttzung.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Nach Updates suchen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Nach Updates suchen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Registrieren.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Registrieren.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Warum DivX Pro kaufen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\DivX Plus\Warum DivX Pro kaufen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Dragon Age Origins deinstallieren.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Dragon Age Origins deinstallieren.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Dragon Age Origins.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Dragon Age Origins.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\EA Product Support-Hilfe.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\EA Product Support-Hilfe.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Readme lesen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Readme lesen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\BioWare-Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\BioWare-Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\Dragon Age Origins-Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\Dragon Age Origins-Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\EA-Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\EA-Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\Support-Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Dragon Age Origins\Links\Support-Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Burn\Express Burn Help.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Burn\Express Burn Help.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Burn\Express Burn.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Burn\Express Burn.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Rip\Express Rip Help.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Rip\Express Rip Help.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Rip\Express Rip.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Express Rip\Express Rip.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Audio Pack\Free Mp3 Wma Converter entfernen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Audio Pack\Free Mp3 Wma Converter entfernen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Audio Pack\Free Mp3 Wma Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Audio Pack\Free Mp3 Wma Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Documentation.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Documentation.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\FDM remote control server.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\FDM remote control server.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Free Download Manager on the Web.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Free Download Manager on the Web.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Free Download Manager.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Free Download Manager.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Uninstall Free Download Manager.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Free Download Manager\Uninstall Free Download Manager.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\FreeRIP on the Web.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\FreeRIP on the Web.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\FreeRIP.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\FreeRIP.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\License.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\License.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\Read me.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\Read me.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\Version history.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\FreeRIP3\Version history.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\Dead Rising 2.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\Dead Rising 2.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\Dead Space 2.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\Dead Space 2.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\Dragon Age Origins.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\Dragon Age Origins.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\GameExplorer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Games\GameExplorer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Hamachi\LogMeIn Hamachi.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Hamachi\LogMeIn Hamachi.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Hamachi\Uninstall.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Hamachi\Uninstall.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Last.fm\Go to www.last.fm.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Last.fm\Go to www.last.fm.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Last.fm\Last.fm entfernen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Last.fm\Last.fm entfernen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Last.fm\Last.fm.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Last.fm\Last.fm.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Backup and Restore Center.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Create Recovery Disc.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Remote Assistance.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Remote Assistance.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Access 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Access 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Groove 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Groove 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office InfoPath 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office InfoPath 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office OneNote 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office OneNote 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Outlook 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Outlook 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office PowerPoint 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office PowerPoint 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Publisher 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Publisher 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Word 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Word 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Digitales Zertifikat fr VBA-Projekte.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Digitales Zertifikat fr VBA-Projekte.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Spracheinstellungen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Spracheinstellungen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office-Diagnose.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office-Diagnose.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Handbuch fr den ergonomischen Umgang mit der Maus.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Handbuch fr den ergonomischen Umgang mit der Maus.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Maus fr Bluetooth verbinden.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Maus fr Bluetooth verbinden.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Maushilfe.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Maushilfe.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Microsoft-Maus.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Microsoft-Maus.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Qualit„tseinstellungen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Maus\Qualit„tseinstellungen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Handbuch fr den ergonomischen Umgang mit der Tastatur.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Handbuch fr den ergonomischen Umgang mit der Tastatur.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Microsoft-Tastatur.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Microsoft-Tastatur.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Qualit„tseinstellungen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Qualit„tseinstellungen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Tastatur fr Bluetooth verbinden.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Tastatur fr Bluetooth verbinden.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Tastaturhilfe.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Microsoft-Tastatur\Tastaturhilfe.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\MiniTool Partition Wizard Help.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\MiniTool Partition Wizard Help.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\MiniTool Partition Wizard Home Edition on the Web.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\MiniTool Partition Wizard Home Edition on the Web.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\MiniTool Partition Wizard Home Edition.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\MiniTool Partition Wizard Home Edition.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\Uninstall MiniTool Partition Wizard Home Edition.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\MiniTool Partition Wizard Home Edition 5.2\Uninstall MiniTool Partition Wizard Home Edition.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Dictate Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Dictate Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Rip CD Ripper.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Rip CD Ripper.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Talk Softphone.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Express Talk Softphone.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Golden Records LP Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Golden Records LP Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\IVM Telephone Answering Attendant.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\IVM Telephone Answering Attendant.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Prism Video File Format Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Prism Video File Format Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Switch Sound File Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\Switch Sound File Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\VRS Sound Recorder.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\VRS Sound Recorder.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\WavePad Sound Editor.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\NCH Software Suite\WavePad Sound Editor.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\Hilfe.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\Hilfe.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\News File Grabber entfernen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\News File Grabber entfernen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\News File Grabber.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\News File Grabber.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\UnRAR.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\News File Grabber\UnRAR.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Quests and Legends\Uninstall Quests and Legends Patches.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Quests and Legends\Uninstall Quests and Legends Patches.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickPar\QuickPar.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickPar\QuickPar.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickPar\Uninstall.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickPar\Uninstall.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickPar\Website.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickPar\Website.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\PictureViewer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\PictureViewer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime - Bitte lesen.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime - Bitte lesen.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime deinstallieren.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime deinstallieren.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime Player.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime Player.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\RAR Password Recovery\RAR Password Recovery Help.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\RAR Password Recovery\RAR Password Recovery Help.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\RAR Password Recovery\RAR Password Recovery.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\RAR Password Recovery\RAR Password Recovery.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\RAR Password Recovery\Uninstall RAR Password Recovery.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\RAR Password Recovery\Uninstall RAR Password Recovery.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\SopCast\SopCast web site.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\SopCast\SopCast web site.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\SopCast\SopCast.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\SopCast\SopCast.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\SopCast\Uninstall.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\SopCast\Uninstall.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Startup\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Startup\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Account Management Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Account Management Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Community Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Community Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\README.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\README.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Support Website.url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Support Website.url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\The Lord of the Rings Online.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\The Lord of the Rings Online.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Turbine, Inc..url -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Turbine, Inc..url
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Uninstall The Lord of the Rings Online.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\Uninstall The Lord of the Rings Online.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\User Manual (pdf).lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Turbine\The Lord of the Rings Online\User Manual (pdf).lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Two Worlds II\Liesmich.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Two Worlds II\Liesmich.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Two Worlds II\Two Worlds II deinstallieren.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Two Worlds II\Two Worlds II deinstallieren.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Two Worlds II\Two Worlds II.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Two Worlds II\Two Worlds II.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Slideshow Creator Software.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Slideshow Creator Software.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video Capture Software.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video Capture Software.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video File Format Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video File Format Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video Streaming Server.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video Streaming Server.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video Tape to DVD Converter.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Video Related Programs\Video Tape to DVD Converter.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\Documentation.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\Documentation.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\Release Notes.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\Release Notes.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\VideoLAN Website.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\VLC media player skinned.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\VLC media player.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\VideoLAN\VLC media player.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Live\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\Windows Live\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\WinRAR\Benutzerhandbuch fr die Konsolenversion von RAR.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\WinRAR\Benutzerhandbuch fr die Konsolenversion von RAR.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\WinRAR\Hilfe zu WinRAR.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\WinRAR\WinRAR.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\1\Programs\WinRAR\WinRAR.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Google Chrome.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Google Chrome.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Last.fm.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Last.fm.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Media Center.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Media Center.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office Excel 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office Excel 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office OneNote 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office OneNote 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office PowerPoint 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office PowerPoint 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office Word 2007.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Microsoft Office Word 2007.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\SopCast.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\SopCast.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Windows Explorer.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Windows Explorer.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Windows Media Player.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\Windows Media Player.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\æTorrent.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\3\æTorrent.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\4\CCleaner.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\4\CCleaner.lnk
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\4\desktop.ini -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\4\desktop.ini
C:\Qoobox\Quarantine\C\Users\BOELZE~1\AppData\Local\Temp\smtmp\4\News File Grabber.lnk -> C:\Users\BOELZE~1\AppData\Local\Temp\smtmp\4\News File Grabber.lnk
249 Datei(en) kopiert


Danach habe ich die unhide.exe ausgeführt. Im Moment scheint die Situation aber unverändert.
__________________

Alt 18.05.2011, 10:19   #34
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Hm, eigentlich sollte unhide die Verküpfungen selbst zurück an die richtige Stelle kopieren. Wenn nicht, mach es selbst.

Deine Verknüpfungen liegen jetzt in:

C:\Users\BOELZE~1\AppData\Local\Temp\smtmp

Und müssen passend nach

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

kopiert werden
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 18.05.2011, 11:58   #35
ezechiel32
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Klasse! Vielen, vielen Dank! Absolute Spitze!

Alles ist wieder an seinem Platz! Und der Virus scheint weg zu sein.

Wie kann ich es denn vermeiden, mir nochmal so etwas einzufangen bzw. mich besser absichern?


Alt 18.05.2011, 12:10   #36
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Halte Dich am besten grob an diese fünf Regeln:

1) Sei misstrauisch im Internet und v.a. bei unbekannten E-Mails, sei vorsichtig bei der Herausgabe persönlicher Daten!!
2) Halte Windows und alle verwendeten Programme immer aktuell
3) Führe regelmäßig Backups auf externe Medien durch
4) Arbeite mit eingeschränkten Rechten
5) Nutze sichere Programme wie zB Opera oder Firefox zum Surfen statt den IE, zum Mailen Thunderbird statt Outlook Express - E-Mails nur als reinen text anzeigen lassen

Alles noch genauer erklärt steht hier => Kompromittierung unvermeidbar?



Dann wären wir durch!

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update



PDF-Reader aktualisieren
Dein Adobe Reader ist nicht aktuell, was ein großes Sicherheitsrisiko darstellt. Du solltest daher besser die alte Version über Systemsteuerung => Software deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst.

Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________
--> Windows Recovery eingefangen!

Alt 18.05.2011, 12:45   #37
ezechiel32
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Klasse! Du warst eine fantastische Hilfe, Arne!

Das ist mir dann auch noch eine Spende an Trojaner-Board wert. So viel Arbeit sollte honoriert werden! Alleine hätte ich das niemals hinbekommen!

Ich werde die Tipps beherzigen!

Nochmal vielen Dank!

Alt 18.05.2011, 13:17   #38
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows Recovery eingefangen! - Standard

Windows Recovery eingefangen!



Zitat:
Das ist mir dann auch noch eine Spende an Trojaner-Board wert.
__________________
Logfiles bitte immer in CODE-Tags posten

Antwort

Themen zu Windows Recovery eingefangen!
anhang, anleitung, bildschirm, desktop, eingefangen, entfernen, entfernt, fenster, festplatte, forum, gen, großes, hochfahren, kompetent, komplette, malwarebytes, morgen, platte, rechner, recovery, schei, schwarzer bildschirm, seite, thema, weiße, windows




Ähnliche Themen: Windows Recovery eingefangen!


  1. File Recovery Virus eingefangen
    Log-Analyse und Auswertung - 11.09.2012 (1)
  2. Data Recovery Malware eingefangen und gemäß Anleitung hier bekämpft
    Log-Analyse und Auswertung - 06.11.2011 (1)
  3. Windows XP Recovery GAU
    Plagegeister aller Art und deren Bekämpfung - 18.06.2011 (15)
  4. Windows Recovery
    Log-Analyse und Auswertung - 10.06.2011 (20)
  5. windows xp recovery eingefangen!!
    Plagegeister aller Art und deren Bekämpfung - 03.06.2011 (7)
  6. Windows 7 recovery
    Log-Analyse und Auswertung - 24.05.2011 (9)
  7. Trojaner eingefangen: Windows Recovery
    Log-Analyse und Auswertung - 10.05.2011 (20)
  8. Windows Recovery eingefangen
    Log-Analyse und Auswertung - 09.05.2011 (24)
  9. Windows Recovery auf PC
    Log-Analyse und Auswertung - 08.05.2011 (6)
  10. Windows Recovery Trojaner eingefangen
    Log-Analyse und Auswertung - 08.05.2011 (1)
  11. Windows recovery eingefangen
    Log-Analyse und Auswertung - 04.05.2011 (31)
  12. Windows Recovery
    Log-Analyse und Auswertung - 04.05.2011 (7)
  13. Windows Recovery? TR/Kazy.mekml.1 eingefangen laut AntiVir!
    Log-Analyse und Auswertung - 30.04.2011 (6)
  14. Windows Recovery eingefangen - OTL Logs angefügt
    Log-Analyse und Auswertung - 27.04.2011 (1)
  15. Windows recovery
    Log-Analyse und Auswertung - 26.04.2011 (13)
  16. Windows Recovery :(
    Plagegeister aller Art und deren Bekämpfung - 24.04.2011 (1)
  17. Windows Recovery eingefangen
    Log-Analyse und Auswertung - 23.04.2011 (7)

Zum Thema Windows Recovery eingefangen! - Hab's hinbekommen. Ein Dateiname hatte ein unzulässiges Zeichen. Hab den Ordner hochgeladen. - Windows Recovery eingefangen!...
Archiv
Du betrachtest: Windows Recovery eingefangen! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.