Sonic_76 | 16.10.2012 17:38 | Google links leiten falsch um .... (Werbeseiten, Pornoseiten....etc.) Guten Abend
Seit einigen Tagen leiten die google links vom Internet Explorer und Opera
auf Werbeseiten sowie auf Pornoseiten um.
Ich bitte um eure Mithilfe.
Gruss
Sonic_76 Code:
Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org
Datenbank Version: v2012.10.15.11
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
DonTa :: EEEPC [Administrator]
16.10.2012 14:31:52
mbam-log-2012-10-16 (14-31-52).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 401559
Laufzeit: 1 Stunde(n), 10 Minute(n), 41 Sekunde(n)
Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)
(Ende)
Eset Online Scanner : Code:
Operating memory probably a variant of Win32/Ponmocup.AA trojan
OTL Code:
OTL logfile created on: 16.10.2012 18:14:18 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,99 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 68,49% Memory free
3,33 Gb Paging File | 2,84 Gb Available in Paging File | 85,41% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 61,20 Gb Total Space | 26,83 Gb Free Space | 43,84% Space Free | Partition Type: NTFS
Drive D: | 160,12 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 79,98 Gb Total Space | 79,92 Gb Free Space | 99,92% Space Free | Partition Type: NTFS
Computer Name: EEEPC | User Name: DonTa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Opera\opera.exe (Opera Software)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\onxr\adb.exe ()
PRC - C:\Programme\1&1 Surf-Stick\AssistantServices.exe ()
PRC - C:\Programme\1&1 Surf-Stick\UIExec.exe ()
PRC - C:\Programme\IVT Corporation\BlueSoleil\BlueSoleilCS.exe (IVT Corporation)
PRC - C:\Programme\IVT Corporation\BlueSoleil\BtTray.exe (IVT Corporation)
PRC - C:\Programme\IVT Corporation\BlueSoleil\BsHelpCS.exe (IVT Corporation)
PRC - C:\Programme\IVT Corporation\BlueSoleil\BsMobileCS.exe (IVT Corporation)
PRC - C:\ElsaWin\bin\LcSvrAdm.exe (Volkswagen AG)
PRC - C:\ElsaWin\bin\LcSvrHis.exe (Volkswagen AG)
PRC - C:\ElsaWin\bin\LcSvrSaz.exe (Volkswagen AG)
PRC - C:\ElsaWin\bin\LcSvrAuf.exe (Volkswagen AG)
PRC - C:\ElsaWin\bin\LcSvrPas.exe (Volkswagen AG)
PRC - C:\ElsaWin\bin\LcSvrDba.exe (Volkswagen AG)
PRC - C:\Programme\EeePC\ACPI\AsAcpiSvr.exe (ASUSTeK Computer Inc.)
PRC - C:\Programme\EeePC\ACPI\AsTray.exe (ASUSTeK Computer Inc.)
PRC - C:\Programme\EeePC\ACPI\AsEPCMon.exe (ASUSTeK Computer Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\SoundMan.exe (Realtek Semiconductor Corp.)
========== Modules (No Company Name) ==========
MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU ()
MOD - C:\Programme\Notepad++\NppShell_05.dll ()
MOD - C:\WINDOWS\system32\ac3filter.acm ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
MOD - C:\onxr\adb.exe ()
MOD - C:\Programme\1&1 Surf-Stick\AssistantServices.exe ()
MOD - C:\Programme\1&1 Surf-Stick\UIExec.exe ()
MOD - C:\Programme\IVT Corporation\BlueSoleil\setup.dll ()
MOD - C:\WINDOWS\system32\BsMobileCSps.dll ()
MOD - C:\Programme\IVT Corporation\BlueSoleil\Mobile\ExtraLib.dll ()
MOD - C:\Programme\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll ()
MOD - C:\ElsaWin\bin\svraufps.dll ()
MOD - C:\Programme\IVT Corporation\BlueSoleil\driver\usb\btcusb.dll ()
MOD - C:\Programme\IVT Corporation\BlueSoleil\Mobile\s40pack.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\WINDOWS\system32\msjetoledb40.dll ()
MOD - C:\Programme\IVT Corporation\BlueSoleil\Mobile\CsCvt.dll ()
MOD - C:\WINDOWS\system32\tsd32.dll ()
========== Services (SafeList) ==========
SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (UI Assistant Service) -- C:\Programme\1&1 Surf-Stick\AssistantServices.exe ()
SRV - (BlueSoleilCS) -- C:\Programme\IVT Corporation\BlueSoleil\BlueSoleilCS.exe (IVT Corporation)
SRV - (BsHelpCS) -- C:\Programme\IVT Corporation\BlueSoleil\BsHelpCS.exe (IVT Corporation)
SRV - (BsMobileCS) -- C:\Programme\IVT Corporation\BlueSoleil\BsMobileCS.exe (IVT Corporation)
SRV - (LcSvrAdm) -- C:\ElsaWin\bin\LcSvrAdm.exe (Volkswagen AG)
SRV - (LcSvrHis) -- C:\ElsaWin\bin\LcSvrHis.exe (Volkswagen AG)
SRV - (LcSvrSaz) -- C:\ElsaWin\bin\LcSvrSaz.exe (Volkswagen AG)
SRV - (LcSvrAuf) -- C:\ElsaWin\bin\LcSvrAuf.exe (Volkswagen AG)
SRV - (LcSvrPAS) -- C:\ElsaWin\bin\LcSvrPas.exe (Volkswagen AG)
SRV - (LcSvrDba) -- C:\ElsaWin\bin\LcSvrDba.exe (Volkswagen AG)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
========== Driver Services (SafeList) ==========
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (BTWUSB) -- System32\Drivers\btwusb.sys File not found
DRV - (btwmodem) -- system32\DRIVERS\btwmodem.sys File not found
DRV - (btwhid) -- system32\DRIVERS\btwhid.sys File not found
DRV - (BTWDNDIS) -- system32\DRIVERS\btwdndis.sys File not found
DRV - (BTDriver) -- system32\DRIVERS\btport.sys File not found
DRV - (btaudio) -- system32\drivers\btaudio.sys File not found
DRV - (aswMBR) -- C:\DOKUME~1\DonTa\LOKALE~1\Temp\aswMBR.sys File not found
DRV - (andnetadb) -- C:\WINDOWS\system32\drivers\lgandnetadb.sys (Google Inc)
DRV - (ANDNetModem) -- C:\WINDOWS\system32\drivers\lgandnetmodem.sys (LG Electronics Inc.)
DRV - (AndNetDiag) -- C:\WINDOWS\system32\drivers\lgandnetdiag.sys (LG Electronics Inc.)
DRV - (dtsoftbus01) -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (MBB Incorporated)
DRV - (BTCOMBUS) -- C:\WINDOWS\system32\drivers\btcombus.sys (IVT Corporation.)
DRV - (BTCOM) -- C:\WINDOWS\system32\drivers\btcomport.sys (IVT Corporation.)
DRV - (BT) -- C:\WINDOWS\system32\drivers\btnetdrv.sys (IVT Corporation.)
DRV - (Btcsrusb) -- C:\WINDOWS\system32\drivers\btcusb.sys (IVT Corporation.)
DRV - (btnetBUs) -- C:\WINDOWS\system32\drivers\btnetBus.sys ()
DRV - (IvtBtBUs) -- C:\WINDOWS\system32\drivers\IvtBtBus.sys (IVT Corporation.)
DRV - (BtHidBus) -- C:\WINDOWS\system32\drivers\BtHidBus.sys (IVT Corporation.)
DRV - (VHidMinidrv) -- C:\WINDOWS\system32\drivers\VHIDMini.sys (IVT Corporation.)
DRV - (NSHE) -- C:\WINDOWS\system32\drivers\NSHE.SYS (T0r0 2008)
DRV - (RT80x86) -- C:\WINDOWS\system32\drivers\rt2860.sys (Ralink Technology, Corp.)
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (AsusACPI) -- C:\WINDOWS\system32\drivers\ASUSACPI.SYS (ASUSTeK Computer Inc.)
DRV - (L1e) -- C:\WINDOWS\system32\drivers\l1e51x86.sys (Atheros Communications, Inc.)
DRV - (iegdmini) -- C:\WINDOWS\system32\drivers\iegdmini.sys (Intel Corporation)
DRV - (tv) -- C:\WINDOWS\system32\drivers\tv.sys ()
DRV - (sdvo) -- C:\WINDOWS\system32\drivers\sdvo.sys ()
DRV - (lvds) -- C:\WINDOWS\system32\drivers\lvds.sys ()
DRV - (Hardlock) -- C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)
DRV - (Ser2pl) -- C:\WINDOWS\system32\drivers\ser2pl.sys (Prolific Technology Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\..\SearchScopes,DefaultScope = {2518B084-1F12-41C6-9E64-3B77A75EB683}
IE - HKCU\..\SearchScopes\{2518B084-1F12-41C6-9E64-3B77A75EB683}: "URL" = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
O1 HOSTS File: ([2003.04.02 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\alcwzrd.exe (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [AsusACPIServer] C:\Programme\EeePC\ACPI\AsAcpiSvr.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AsusEPCMonitor] C:\Programme\EeePC\ACPI\AsEPCMon.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AsusTray] C:\Programme\EeePC\ACPI\AsTray.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [B2C_AGENT] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe (LG Electronics)
O4 - HKLM..\Run: [BtTray] C:\Programme\IVT Corporation\BlueSoleil\BtTray.exe (IVT Corporation)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SoundMan.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [UIExec] C:\Programme\1&1 Surf-Stick\UIExec.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\VR-NetWorld Auftragsprüfung.lnk = C:\Programme\VR-NetWorld\VRToolCheckOrder.exe (VR-NetWorld Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O12 - Plugin for: .spop - C:\Programme\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1345500544984 (WUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7A90DC9-AFFF-4079-A5C8-715B511006C6}: NameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EFF35169-BE9C-41FA-B15C-DE2E73A388E8}: NameServer = 192.168.178.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll (Skype Technologies)
O18 - Protocol\Handler\vw-wi {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiprot.dll (TODO: <Company name>)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.04.02 18:00:01 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{3d784da0-3e7e-11df-a165-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{3d784da0-3e7e-11df-a165-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{3d784da0-3e7e-11df-a165-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LGAutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2012.10.16 00:34:01 | 000,000,000 | ---D | C] -- C:\onxr
[2012.10.16 00:28:12 | 000,000,000 | ---D | C] -- C:\LGP880
[2012.10.16 00:26:16 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr90.dll
[2012.10.16 00:26:16 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp90.dll
[2012.10.16 00:26:16 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcm90.dll
[2012.10.16 00:26:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\LGMobile Support Tool
[2012.10.16 00:26:06 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4a.dll
[2012.10.16 00:25:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LGMOBILEAX
[2012.10.16 00:25:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2012.10.16 00:25:36 | 000,027,776 | ---- | C] (LG Electronics Inc.) -- C:\WINDOWS\System32\drivers\lgandnetmodem.sys
[2012.10.16 00:25:36 | 000,025,856 | ---- | C] (Google Inc) -- C:\WINDOWS\System32\drivers\lgandnetadb.sys
[2012.10.16 00:25:36 | 000,023,040 | ---- | C] (LG Electronics Inc.) -- C:\WINDOWS\System32\drivers\lgandnetdiag.sys
[2012.10.16 00:25:35 | 001,419,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01005.dll
[2012.10.16 00:25:35 | 000,000,000 | ---D | C] -- C:\Programme\LG Electronics
[2012.10.16 00:04:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2012.10.16 00:04:15 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.10.16 00:04:15 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2012.10.15 22:39:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\DriverCure
[2012.10.15 22:39:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\SpeedyPC Software
[2012.10.15 22:32:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SpeedyPC Software
[2012.10.15 17:39:29 | 000,000,000 | ---D | C] -- C:\Programme\ESET
[2012.10.14 16:32:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Lokale Einstellungen\Anwendungsdaten\Threat Expert
[2012.10.14 15:28:58 | 000,000,000 | ---D | C] -- C:\Program Files
[2012.10.14 15:20:28 | 000,203,120 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTSD.sys
[2012.10.14 15:20:28 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\PC Tools
[2012.10.14 15:19:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2012.10.14 15:19:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Tools
[2012.10.14 15:19:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\TestApp
[2012.10.14 15:18:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\TrojanHunter
[2012.10.14 15:07:49 | 000,000,000 | ---D | C] -- C:\Programme\TrojanHunter 5.5
[2012.10.14 13:35:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Lokale Einstellungen\Anwendungsdaten\Opera
[2012.10.14 13:35:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\Opera
[2012.10.14 13:34:54 | 000,000,000 | ---D | C] -- C:\Programme\Opera
[2012.10.14 11:48:48 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\DonTa\Recent
[2012.10.14 11:47:32 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner
[2012.10.14 11:47:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spybot - Search & Destroy
[2012.10.14 11:46:58 | 000,000,000 | ---D | C] -- C:\Programme\Spybot - Search & Destroy
[2012.10.14 11:46:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
[2012.10.13 22:08:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\Malwarebytes
[2012.10.13 22:07:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012.10.13 21:45:22 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\DonTa\IECompatCache
[2012.10.13 13:02:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2012.10.03 13:04:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Lokale Einstellungen\Anwendungsdaten\WBFSManager
[2012.10.03 13:01:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WBFS Manager
[2012.10.03 13:01:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\WBFS Manager Covers
[2012.10.03 13:01:10 | 000,000,000 | ---D | C] -- C:\Programme\WBFS
[2012.10.03 12:18:45 | 000,477,168 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012.10.03 12:18:45 | 000,157,680 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012.10.03 12:18:45 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012.10.03 12:18:45 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012.10.03 12:18:45 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012.10.03 12:18:29 | 000,000,000 | ---D | C] -- C:\Programme\Java
[2012.10.03 12:08:40 | 000,000,000 | ---D | C] -- C:\Programme\JDownloader
[2012.10.02 14:36:12 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_7.dll
[2012.10.02 14:36:12 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_7.dll
[2012.10.02 14:36:12 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_5.dll
[2012.10.02 14:36:11 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_43.dll
[2012.10.02 14:36:11 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_43.dll
[2012.10.02 14:36:10 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_43.dll
[2012.10.02 14:36:10 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_43.dll
[2012.10.02 14:36:09 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_43.dll
[2012.10.02 14:36:08 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_6.dll
[2012.10.02 14:36:08 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_6.dll
[2012.10.02 14:36:08 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_4.dll
[2012.10.02 14:36:08 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_7.dll
[2012.10.02 14:36:07 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_5.dll
[2012.10.02 14:36:06 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_42.dll
[2012.10.02 14:36:06 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_5.dll
[2012.10.02 14:36:05 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_42.dll
[2012.10.02 14:36:05 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_42.dll
[2012.10.02 14:36:04 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2012.10.02 14:36:04 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_42.dll
[2012.10.02 14:36:03 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2012.10.02 14:36:03 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2012.10.02 14:36:02 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2012.10.02 14:36:01 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2012.10.02 14:36:01 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2012.10.02 14:36:01 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2012.10.02 14:36:01 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2012.10.02 14:36:00 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2012.10.02 14:36:00 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2012.10.02 14:35:59 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2012.10.02 14:35:58 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2012.10.02 14:35:58 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2012.10.02 14:35:58 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2012.10.02 14:35:57 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll
[2012.10.02 14:35:57 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2012.10.02 14:35:56 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll
[2012.10.02 14:35:56 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll
[2012.10.02 14:35:55 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll
[2012.10.02 14:35:55 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll
[2012.10.02 14:35:55 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll
[2012.10.02 14:35:54 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_1.dll
[2012.10.02 14:35:54 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_0.dll
[2012.10.02 14:35:53 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_1.dll
[2012.10.02 14:35:53 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_4.dll
[2012.10.02 14:35:52 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_38.dll
[2012.10.02 14:35:52 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_38.dll
[2012.10.02 14:35:51 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_38.dll
[2012.10.02 14:35:51 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll
[2012.10.02 14:35:50 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll
[2012.10.02 14:35:50 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll
[2012.10.02 14:35:49 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll
[2012.10.02 14:35:49 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll
[2012.10.02 14:35:48 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2012.10.02 14:35:48 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2012.10.02 14:35:47 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2012.10.02 14:35:47 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2012.10.02 14:35:46 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2012.10.02 14:35:45 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2012.10.02 14:35:44 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2012.10.02 14:35:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2012.10.02 14:35:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2012.10.02 14:35:43 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_8.dll
[2012.10.02 14:35:43 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_2.dll
[2012.10.02 14:35:42 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_34.dll
[2012.10.02 14:35:42 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_34.dll
[2012.10.02 14:35:42 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_34.dll
[2012.10.02 14:35:41 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2012.10.02 14:35:39 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_7.dll
[2012.10.02 14:35:37 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_33.dll
[2012.10.02 14:35:37 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_33.dll
[2012.10.02 14:35:35 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_33.dll
[2012.10.02 14:35:34 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_6.dll
[2012.10.02 14:35:34 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_5.dll
[2012.10.02 14:35:33 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll
[2012.10.02 14:35:33 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2012.10.02 14:35:33 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_4.dll
[2012.10.02 14:35:33 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_1.dll
[2012.10.02 14:35:32 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_3.dll
[2012.10.02 14:35:32 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_2.dll
[2012.10.02 14:35:32 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_2.dll
[2012.10.02 14:35:32 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_1.dll
[2012.10.02 14:35:31 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_1.dll
[2012.10.02 14:35:29 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2012.10.02 14:35:28 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2012.10.02 14:35:28 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll
[2012.10.02 14:35:28 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll
[2012.10.02 14:35:27 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2012.10.02 14:35:27 | 000,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll
[2012.10.02 14:35:26 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2012.10.02 14:35:26 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2012.10.02 14:35:25 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2012.10.02 14:35:24 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll
[2012.10.02 14:33:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2012.10.01 14:55:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\ymod
[2012.09.30 14:38:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ivtMobCache
[2012.09.30 14:28:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Bluetooth
[2012.09.30 14:27:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Lokale Einstellungen\Anwendungsdaten\bluesoleil
[2012.09.30 14:24:43 | 000,000,000 | ---D | C] -- C:\Programme\IVT Corporation
[2012.09.30 14:24:26 | 000,090,624 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcls.dll
[2012.09.30 14:24:26 | 000,000,000 | ---D | C] -- C:\Programme\Nokia
[2012.09.30 14:24:19 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2012.09.30 14:24:09 | 000,000,000 | ---D | C] -- C:\Programme\PC Connectivity Solution
[2012.09.30 14:23:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations
[2012.09.30 14:00:30 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll
[2012.09.28 15:39:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Any Video Converter
[2012.09.28 15:39:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\DonTa\Anwendungsdaten\AnvSoft
[2012.09.28 15:38:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AnvSoft
[2012.09.28 15:38:39 | 000,000,000 | ---D | C] -- C:\Programme\AnvSoft
[2012.09.28 15:04:28 | 000,000,000 | ---D | C] -- C:\Programme\FileConverter_1.3
[2012.09.26 16:38:08 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.10.16 11:48:22 | 000,002,413 | ---- | M] () -- C:\WINDOWS\System32\lgAxconfig.ini
[2012.10.16 11:48:09 | 000,001,085 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\LGMobile Support Tool.lnk
[2012.10.16 01:17:01 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2012.10.16 01:11:47 | 000,006,510 | ---- | M] () -- C:\WINDOWS\System32\LOCALSERVICE.INI
[2012.10.16 01:11:47 | 000,001,202 | ---- | M] () -- C:\WINDOWS\System32\bscs.ini
[2012.10.16 01:11:47 | 000,000,185 | ---- | M] () -- C:\WINDOWS\System32\LOCALDEVICE.INI
[2012.10.16 00:49:27 | 000,000,000 | ---- | M] () -- C:\root
[2012.10.16 00:43:36 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\root
[2012.10.16 00:35:37 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_lgandnetadb_01005.Wdf
[2012.10.16 00:30:50 | 000,000,236 | ---- | M] () -- C:\WINDOWS\System32\REMOTEDEVICE.INI
[2012.10.16 00:30:30 | 000,003,289 | ---- | M] () -- C:\WINDOWS\System32\SHORTCUT.INI
[2012.10.16 00:04:18 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012.10.15 23:39:11 | 000,449,044 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.10.15 23:39:11 | 000,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.10.15 23:39:11 | 000,080,306 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.10.15 23:39:11 | 000,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.10.15 22:03:08 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\XFUOQDIWQV.job
[2012.10.15 22:03:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.10.15 19:47:04 | 000,000,185 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\eset.url
[2012.10.15 18:41:39 | 000,001,374 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.10.14 15:20:59 | 000,610,361 | ---- | M] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2012.10.14 15:08:05 | 000,059,392 | R--- | M] () -- C:\WINDOWS\System32\streamhlp.dll
[2012.10.14 14:49:46 | 000,004,625 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.10.14 13:35:02 | 000,001,456 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk
[2012.10.14 12:25:22 | 000,004,598 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2012.10.14 11:47:34 | 000,000,654 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2012.10.14 11:47:05 | 000,000,905 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\Spybot - Search & Destroy.lnk
[2012.10.13 13:02:57 | 000,090,112 | RHS- | M] () -- C:\WINDOWS\System32\skdllz.dll
[2012.10.12 17:15:59 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012.10.12 17:15:58 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.10.03 17:57:41 | 000,002,419 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\WBFS Manager 4.0.lnk
[2012.10.03 12:18:33 | 000,477,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012.10.03 12:18:33 | 000,473,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012.10.03 12:18:33 | 000,157,680 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012.10.03 12:18:33 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012.10.03 12:18:33 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012.10.03 12:18:33 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012.10.03 12:09:23 | 000,001,658 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\JDownloader.lnk
[2012.10.01 14:54:54 | 000,019,091 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\ymod.rar
[2012.09.30 18:19:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\BsMobileModel.ini
[2012.09.30 14:25:48 | 000,000,032 | ---- | M] () -- C:\WINDOWS\0
[2012.09.30 14:25:47 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\BSPRINT.INI
[2012.09.30 14:24:50 | 000,001,652 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\BlueSoleil Space.lnk
[2012.09.30 14:24:36 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\0
[2012.09.30 14:00:37 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_xusb21_01007.Wdf
[2012.09.30 14:00:35 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2012.09.28 15:38:56 | 000,000,861 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\Any Video Converter.lnk
[2012.09.26 19:30:52 | 000,095,864 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.09.25 22:42:41 | 001,715,236 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscam_1.00
[2012.09.25 18:03:42 | 000,006,656 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.09.22 11:43:11 | 000,538,295 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\kreditvertrag2.pdf
[2012.09.21 22:52:42 | 047,743,175 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\openaaf-2.0-et9x00-20120918_usb.zip
[2012.09.21 22:38:35 | 000,345,793 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscamYmod18-t30.rar
[2012.09.21 22:30:05 | 001,029,964 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscamYmod18-t30
[2012.09.21 22:30:05 | 001,029,964 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscam-unstable
[2012.09.21 15:56:19 | 082,743,162 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\et9x00_hdfreaks.v4.9.5_PLi2.1_13072012.zip
[2012.09.20 22:39:31 | 046,703,509 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\OpenPLi-3.0-beta-et9x00-20120920_usb.zip
[2012.09.20 22:19:12 | 000,129,675 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\et9000-bootloader.zip
[2012.09.20 22:06:24 | 076,615,639 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\et9x00_hdfreaks.v5_PLi3.0.zip
[2012.09.20 17:52:22 | 000,824,922 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\enigma2-plugin-glasssysutil_5.07_all.zip
[2012.09.20 16:56:23 | 000,599,723 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\enigmaplugin-glasssysutil_3.98_mipsel.zip
[2012.09.19 17:29:22 | 000,038,013 | ---- | M] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Lohnscheine.pdf
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.10.16 15:50:52 | 000,000,185 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\eset.url
[2012.10.16 00:49:27 | 000,000,000 | ---- | C] () -- C:\root
[2012.10.16 00:42:06 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\root
[2012.10.16 00:35:37 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_lgandnetadb_01005.Wdf
[2012.10.16 00:26:16 | 000,001,085 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\LGMobile Support Tool.lnk
[2012.10.16 00:26:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\CommonDL.dll
[2012.10.16 00:26:06 | 000,002,413 | ---- | C] () -- C:\WINDOWS\System32\lgAxconfig.ini
[2012.10.16 00:04:18 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012.10.14 15:20:35 | 000,610,361 | ---- | C] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2012.10.14 15:07:50 | 000,059,392 | R--- | C] () -- C:\WINDOWS\System32\streamhlp.dll
[2012.10.14 13:35:02 | 000,001,462 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Opera.lnk
[2012.10.14 13:35:02 | 000,001,456 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk
[2012.10.14 13:29:55 | 000,004,625 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2012.10.14 12:25:01 | 000,004,598 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2012.10.14 11:47:34 | 000,000,654 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2012.10.14 11:47:05 | 000,000,905 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\Spybot - Search & Destroy.lnk
[2012.10.13 13:02:58 | 000,000,308 | ---- | C] () -- C:\WINDOWS\tasks\XFUOQDIWQV.job
[2012.10.13 13:02:57 | 000,090,112 | RHS- | C] () -- C:\WINDOWS\System32\skdllz.dll
[2012.10.03 17:20:16 | 000,067,416 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2012.10.03 13:01:18 | 000,002,419 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\WBFS Manager 4.0.lnk
[2012.10.03 12:09:23 | 000,001,658 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\JDownloader.lnk
[2012.10.03 12:09:15 | 000,001,622 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\JDownloader.lnk
[2012.10.03 12:09:15 | 000,001,566 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\JDownloader Deinstallationsprogramm.lnk
[2012.10.03 12:09:15 | 000,001,545 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\JDownloader Update.lnk
[2012.10.01 14:54:54 | 000,019,091 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\ymod.rar
[2012.09.30 14:39:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\BsMobileModel.ini
[2012.09.30 14:37:01 | 000,003,289 | ---- | C] () -- C:\WINDOWS\System32\SHORTCUT.INI
[2012.09.30 14:36:07 | 000,000,236 | ---- | C] () -- C:\WINDOWS\System32\REMOTEDEVICE.INI
[2012.09.30 14:28:31 | 000,006,510 | ---- | C] () -- C:\WINDOWS\System32\LOCALSERVICE.INI
[2012.09.30 14:27:30 | 000,000,185 | ---- | C] () -- C:\WINDOWS\System32\LOCALDEVICE.INI
[2012.09.30 14:25:47 | 000,000,104 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Bluetooth-Umgebung.lnk
[2012.09.30 14:25:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\BSPRINT.INI
[2012.09.30 14:24:50 | 000,001,652 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\BlueSoleil Space.lnk
[2012.09.30 14:24:36 | 000,000,032 | ---- | C] () -- C:\WINDOWS\0
[2012.09.30 14:24:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\0
[2012.09.30 14:00:37 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_xusb21_01007.Wdf
[2012.09.30 14:00:35 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2012.09.28 15:38:56 | 000,000,861 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Desktop\Any Video Converter.lnk
[2012.09.25 22:42:39 | 001,715,236 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscam_1.00
[2012.09.25 22:39:07 | 001,029,964 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscamYmod18-t30
[2012.09.22 11:43:10 | 000,538,295 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\kreditvertrag2.pdf
[2012.09.21 22:52:39 | 047,743,175 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\openaaf-2.0-et9x00-20120918_usb.zip
[2012.09.21 22:38:57 | 001,029,964 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscam-unstable
[2012.09.21 22:38:35 | 000,345,793 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\oscamYmod18-t30.rar
[2012.09.21 15:56:15 | 082,743,162 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\et9x00_hdfreaks.v4.9.5_PLi2.1_13072012.zip
[2012.09.20 22:39:29 | 046,703,509 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\OpenPLi-3.0-beta-et9x00-20120920_usb.zip
[2012.09.20 22:12:17 | 000,129,675 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\et9000-bootloader.zip
[2012.09.20 22:06:21 | 076,615,639 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\et9x00_hdfreaks.v5_PLi3.0.zip
[2012.09.20 17:52:16 | 000,824,922 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\enigma2-plugin-glasssysutil_5.07_all.zip
[2012.09.20 16:56:22 | 000,599,723 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\enigmaplugin-glasssysutil_3.98_mipsel.zip
[2012.09.19 17:29:22 | 000,038,013 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Lohnscheine.pdf
[2012.08.25 14:04:38 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012.08.25 14:04:33 | 000,112,640 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012.08.21 17:24:06 | 000,164,864 | ---- | C] () -- C:\WINDOWS\System32\UNWISE32.EXE
[2012.08.21 15:31:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2012.08.12 12:28:10 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll
[2012.04.28 10:02:14 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.04.26 20:20:12 | 000,030,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\tv.sys
[2012.04.26 20:20:11 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\drivers\sdvo.sys
[2012.04.26 20:20:11 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\lvds.sys
[2012.04.26 20:20:09 | 000,450,560 | ---- | C] () -- C:\WINDOWS\System32\iegd3dg3.dll
[2012.04.26 20:14:54 | 000,000,037 | ---- | C] () -- C:\WINDOWS\System32\conmansrv.ini
[2012.04.26 20:14:29 | 000,000,365 | ---- | C] () -- C:\WINDOWS\System32\softingedicdriver.ini
[2012.04.26 20:11:17 | 000,000,104 | ---- | C] () -- C:\WINDOWS\HWEDIC.INI
[2012.04.26 20:11:17 | 000,000,047 | ---- | C] () -- C:\WINDOWS\NETEDIC.INI
[2012.04.03 07:18:51 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.04.02 23:30:44 | 000,006,656 | ---- | C] () -- C:\Dokumente und Einstellungen\DonTa\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.12.07 21:32:24 | 000,216,064 | ---- | C] ( ) -- C:\WINDOWS\System32\Lagarith.dll
[2011.07.08 15:59:38 | 000,001,202 | ---- | C] () -- C:\WINDOWS\System32\bscs.ini
[2011.05.30 15:42:50 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011.05.18 21:41:42 | 000,000,056 | ---- | C] () -- C:\WINDOWS\Acroread.ini
[2011.05.18 10:02:43 | 000,000,892 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011.05.14 00:56:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\hlduinst.exe
[2011.05.14 00:56:15 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE
[2011.05.14 00:56:15 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI
[2011.04.13 12:00:58 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\BsMobileCSps.dll
========== ZeroAccess Check ==========
[2012.08.20 17:51:12 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2011.12.19 10:53:33 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 12:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 04:22:32 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Alternate Data Streams ==========
@Alternate Data Stream - 127 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:430C6D84
@Alternate Data Stream - 105 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2
< End of report >
OTL Extras Code:
OTL Extras logfile created on: 16.10.2012 18:14:18 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,99 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 68,49% Memory free
3,33 Gb Paging File | 2,84 Gb Available in Paging File | 85,41% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 61,20 Gb Total Space | 26,83 Gb Free Space | 43,84% Space Free | Partition Type: NTFS
Drive D: | 160,12 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 79,98 Gb Total Space | 79,92 Gb Free Space | 99,92% Space Free | Partition Type: NTFS
Computer Name: EEEPC | User Name: DonTa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Programme\Opera\Opera.exe (Opera Software)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Programme\Opera\Opera.exe (Opera Software)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Programme\Opera\Opera.exe" "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableUnicastResponsesToMulticastBroadcast" = 1
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"2799:UDP" = 2799:UDP:*:Enabled:Altova License Metering Port (UDP)
"2799:TCP" = 2799:TCP:*:Enabled:Altova License Metering Port (TCP)
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\KCC3_2\KCC3_2\KCC.exe" = C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\KCC3_2\KCC3_2\KCC.exe:*:Enabled:KCC -- (VisMan)
"C:\totalcmd\TOTALCMD.EXE" = C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit -- (Ghisler Software GmbH)
"C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\ufs910_emergency-update\tftpd32.exe" = C:\Dokumente und Einstellungen\DonTa\Eigene Dateien\ufs910_emergency-update\tftpd32.exe:*:Enabled:tftpd32 -- ()
"C:\Programme\IVT Corporation\BlueSoleil\BlueSoleilCS.exe" = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS -- (IVT Corporation)
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation)
"C:\Programme\SweetIM\Communicator\SweetPacksUpdateManager.exe" = C:\Programme\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager
"C:\Programme\Opera\opera.exe" = C:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{19F5658D-92E8-4A08-8657-D38ABB1574B2}" = Asus ACPI Driver
"{26A24AE4-039D-4CA4-87B4-2F83216035FF}" = Java(TM) 6 Update 35
"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3577E42B-3347-4EB8-BFDA-D36E8ED3C519}" = Windows 7 USB/DVD Download Tool
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{825E9A84-1E03-4526-9F8E-45015C938A7C}" = WBFS Manager 4.0
"{83258E90-1F76-4E13-9F60-A0F8ED41E76F}" = PC Connectivity Solution
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8815F011-43AF-4F50-BBD8-D78ED3D6F5B9}" = VR-NetWorld
"{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}" = Azurewave Wireless LAN
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = 1&1 Surf-Stick
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}" = Internet Explorer Toolbar 4.6 by SweetPacks
"{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}" = Nokia Connectivity Cable Driver
"{C4AC672B-C8A2-4EAC-845A-35D0392E5BC2}" = VAS-PC Car Diagnostic System
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E5EF526D-3F74-4528-AD76-E7017E3DCE00}" = BlueSoleil 8.0.356.0
"{E84C3D56-7B4A-4853-BB4D-DA1B25A1E3FD}" = AltovaXML 2006
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"0F18AE378A33F6DF6CB5E2CDB45E2E445F7D55C6" = Windows-Treiberpaket - Broadcom (btwhid) HIDClass (03/06/2008 5.5.0.2600)
"1A4D4E18848A1D12BC7E5E01FF2FE1BAB2A13D29" = Windows-Treiberpaket - Broadcom (BTWUSB) BTW (08/18/2008 5.5.0.4300)
"2989ADD4F917BF520586E8F882ADE79891EE5B9F" = Windows-Treiberpaket - Broadcom HIDClass (03/08/2008 6.1.0.4500)
"3AC3E4378F166BF2D2009BF405CAF9CEAC4AD1F4" = Windows-Treiberpaket - Broadcom (BTDriver) Ports (02/27/2008 5.5.0.2300)
"41DDA2A66795862E28EDF73F9B3F9ACF28234F9F" = Windows-Treiberpaket - Broadcom (BTWDNDIS) Net (07/22/2008 5.5.0.4000)
"4748191033DEB28F1187D8FFFE20DBFD7F54EFF8" = Windows-Treiberpaket - WIDCOMM Image (02/27/2008 5.5.0.2300)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"5513-1208-7298-9440" = JDownloader 0.9
"6ECCF4ABF0B082739A25CC53E8A0D2C5C2ADAD53" = Windows-Treiberpaket - Broadcom (btwmodem) Modem (02/27/2008 5.5.0.2300)
"7-Zip" = 7-Zip 9.20
"81A4E14B691B08320B267B6D80578FBEF1DA1277" = Windows-Treiberpaket - Broadcom (btwmodem) Modem (02/27/2008 5.5.0.2300)
"AAF Recovery tool UFS910_is1" = AAF_Recovery_tool installer UFS910 V1.9
"AAF UFS910/UFS922/TF7700 MultiPart Installer_is1" = AAF UFS910/UFS922/TF7700 MultiPart Installer V2.1
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Any Video Converter_is1" = Any Video Converter 3.5.5
"C6AC7118DE5D37E6FB01508412B25952E764D89D" = Windows-Treiberpaket - Broadcom (btkrnl) BTW (08/18/2008 5.5.0.4300)
"CCleaner" = CCleaner
"D52FB82A164E9824A470C1243B35382C0537BA3A" = Windows-Treiberpaket - Broadcom Corp. (btaudio) Media (05/28/2008 5.5.0.3500)
"DAEMON Tools Lite" = DAEMON Tools Lite
"D-PDU API V1.10.033 D-PDU API for VOLKSWAGEN" = D-PDU API V1.10.033 D-PDU API for VOLKSWAGEN
"DTS V7.71.095" = DTS V7.71.095
"ElsaWin" = ElsaWin
"ESET Online Scanner" = ESET Online Scanner v3
"Hardlock Gerätetreiber" = Hardlock Gerätetreiber
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HTPE3" = HyperTerminal Private Edition v7.0
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.2.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.0.1400
"Maxiboot Installer_is1" = Maxiboot Installer V1.5
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Notepad++" = Notepad++
"Opera 12.02.1578" = Opera 12.02
"Totalcmd" = Total Commander (Remove or Repair)
"VAS505x-2 v9.10.003 Application" = VAS505x-2 v9.10.003 Application
"VAS-PC-2 BaseSystem" = VAS-PC-2 Diagnostic Base System
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 21.08.2012 12:36:26 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung KCC.exe, Version 3.2.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:33:20 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung UFSxxx MultiPart installer.exe, Version 1.0.0.0,
Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:33:56 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung UFSxxx MultiPart installer.exe, Version 1.0.0.0,
Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:38:24 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung KCC.exe, Version 3.2.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:51:24 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung explorer.exe, Version 6.0.2900.5512, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:57:28 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung KCC.exe, Version 3.2.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:58:10 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung KCC.exe, Version 3.2.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.08.2012 17:59:49 | Computer Name = EEEPC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 kcc.exe, P2 3.2.0.0, P3 49b3816a, P4 mscorlib,
P5 2.0.0.0, P6 492b834a, P7 343f, P8 21c, P9 system.io.ioexception, P10 NIL.
Error - 24.08.2012 08:48:04 | Computer Name = EEEPC | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung epsxe.exe, Version 0.0.0.0, fehlgeschlagenes
Modul gpunaksoft.dll, Version 1.0.0.1, Fehleradresse 0x00001a81.
Error - 26.08.2012 13:49:34 | Computer Name = EEEPC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
[ System Events ]
Error - 15.10.2012 13:35:19 | Computer Name = EEEPC | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "netman"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
Error - 15.10.2012 13:35:26 | Computer Name = EEEPC | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 15.10.2012 13:35:34 | Computer Name = EEEPC | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error - 15.10.2012 13:36:06 | Computer Name = EEEPC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "DHCP-Client" ist vom Dienst "NetBios über TCP/IP" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 15.10.2012 13:36:06 | Computer Name = EEEPC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "DNS-Client" ist vom Dienst "TCP/IP-Protokolltreiber" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 15.10.2012 13:36:06 | Computer Name = EEEPC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "TCP/IP-NetBIOS-Hilfsprogramm" ist vom Dienst "AFD" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 15.10.2012 13:36:06 | Computer Name = EEEPC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "IPSEC-Dienste" ist vom Dienst "IPSEC-Treiber" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%31
Error - 15.10.2012 13:36:06 | Computer Name = EEEPC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
Error - 15.10.2012 13:36:50 | Computer Name = EEEPC | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 15.10.2012 16:31:16 | Computer Name = EEEPC | Source = PlugPlayManager | ID = 12
Description = Das Gerät "802.11n Wireless LAN Card" (PCI\VEN_1814&DEV_0781&SUBSYS_27901814&REV_00\4&37028e5f&0&00E3)
wurde ohne vorbereitende Maßnahmen vom System entfernt.
< End of report > |