Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Internet Explorer öffnet Seiten mit Werbung (https://www.trojaner-board.de/86399-internet-explorer-oeffnet-seiten-werbung.html)

Solluno 25.05.2010 04:58
Internet Explorer öffnet Seiten mit Werbung
 
Hallo liebes Trojaner-Board,

ich wende mich heute mit einer Bitte an euch mir mit folgendem Problem zu helfen:
Mein Internet Explorer öffnet andauernd Seiten mit Werbung die ich zwar wieder wegklicken kann, aber es nervt. Dazu tretten noch andere komische Phänomene auf, wie zum Beispiel, dass ich nichts mehr öffnen kann mit Doppelklick. Stattdessen erscheint die Editierbox für den Namen der Datei oder des Ordners oder was auch immer.
Im folgenden "arbeite" ich die Punkte ab.
1.CCleaner vollständig ausgeführt
2.Malwarebytes gibt mir folgende Logdatei:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4140

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

25.05.2010 05:42:06
mbam-log-2010-05-25 (05-42-06).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 117168
Laufzeit: 5 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 4
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 6

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\Software\M5T8QL3YW3 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\QZAIB7KITK (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\m5t8ql3yw3 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Users\Florian\AppData\Local\Temp\Jxf.exe (Trojan.Fraudpack) -> Quarantined and deleted successfully.
C:\Users\Florian\downloads\Serial_RecordPad.45059.exe (Trojan.Fraudpack) -> Quarantined and deleted successfully.
C:\Windows\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Florian\AppData\Local\Temp\Jxh.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Windows\System32\sshnas21.dll (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

3. Rsit konnte ich nicht verwenden aus folgendem Grund:
Kostenloser Bilder Upload Service - Gratis Bilder hochladen / uploaden ohne Anmeldung

Jedoch funktioniert HijackThis selber immer noch, daher kann ich ein Logfile wenn nötig nachreichen.

Ich arbeite mit Win7 Enterprise 32bit Version.

Ich hoffe ihr könnt mir mit meinem Problem weiterhelfen

MfG Solluno =)

cosinus 25.05.2010 14:10
Hallo und :hallo:

bitte nen Vollscan mit malwarebytes machen und Log posten. Danach OTL:

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in den Thread.

Solluno 25.05.2010 15:36
Vielen dank für die Antwort =)

Malewarebyts, Voller Scan - Log:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4140

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

25.05.2010 16:23:24
mbam-log-2010-05-25 (16-23-24).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Durchsuchte Objekte: 227824
Laufzeit: 59 Minute(n), 33 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 2
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\Software\M5T8QL3YW3 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Users\Florian\Desktop\Adobe.Photoshop.CS5.Extended.v12.0.Multilanguage\keygen.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Windows\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

Solluno 25.05.2010 15:39
OTL Logfile:
Code:
OTL logfile created on: 25.05.2010 16:25:25 - Run 1
OTL by OldTimer - Version 3.2.5.0    Folder = C:\Users\Florian\Downloads
 Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 45,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 63,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 75,96 Gb Total Space | 23,97 Gb Free Space | 31,56% Space Free | Partition Type: NTFS
Drive D: | 54,25 Gb Total Space | 18,07 Gb Free Space | 33,31% Space Free | Partition Type: FAT32
Drive E: | 18,82 Gb Total Space | 17,39 Gb Free Space | 92,41% Space Free | Partition Type: FAT32
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 596,02 Gb Total Space | 264,16 Gb Free Space | 44,32% Space Free | Partition Type: FAT32
 
Computer Name: FLORIAN-PC
Current User Name: Florian
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Florian\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
PRC - C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Program Files\IObit\Game Booster\gbtray.exe ()
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Media Player\wmprph.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\prevhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\libusbd-nt.exe (hxxp://libusb-win32.sourceforge.net)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Florian\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (WLMS) -- C:\Windows\System32\wlms\wlms.exe (Microsoft Corporation)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
SRV - (Capture Device Service) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe (InterVideo Inc.)
SRV - (libusbd) -- C:\Windows\System32\libusbd-nt.exe (hxxp://libusb-win32.sourceforge.net)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (amdkmdag) -- C:\Windows\System32\drivers\atipmdag.sys (ATI Technologies Inc.)
DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (AtiHdmiService) -- C:\Windows\System32\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV - (U6000ALL) U6000 TV Box(ALL) -- C:\Windows\System32\drivers\U6000ALL.sys ()
DRV - (cpudrv) -- C:\Program Files\SystemRequirementsLab\cpudrv.sys ()
DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (LGVirHid) -- C:\Windows\System32\drivers\LGVirHid.sys (Logitech Inc.)
DRV - (LGBusEnum) -- C:\Windows\System32\drivers\LGBusEnum.sys (Logitech Inc.)
DRV - (DSDrv4) -- C:\PROGRA~2\DScaler\DSDrv4.sys ()
DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (HidBatt) -- C:\Windows\system32\DRIVERS\HidBatt.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (Atc002) -- C:\Windows\System32\drivers\l260x86.sys (Atheros Communications, Inc.)
DRV - (EIO1) -- C:\Windows\System32\drivers\EIO1.sys (ASUSTeK Computer Inc.)
DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\Windows\System32\drivers\sfvfs02.sys (Protection Technology)
DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\Windows\System32\drivers\sfdrv01.sys (Protection Technology)
DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\Windows\System32\drivers\sfhlp02.sys (Protection Technology)
DRV - (libusb0) -- C:\Windows\System32\drivers\libusb0.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "www.seelensturm.com"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.80
FF - prefs.js..extensions.enabledItems: {5c8bfb7c-9a54-11dc-8314-0800200c9a66}:3.6.3
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.05.08 04:39:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.05.24 09:48:05 | 000,000,000 | ---D | M]
 
[2010.05.08 03:40:57 | 000,000,000 | ---D | M] -- C:\Users\Florian\AppData\Roaming\mozilla\Extensions
[2010.05.24 17:46:07 | 000,000,000 | ---D | M] -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions
[2010.05.08 13:48:56 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2010.05.08 05:21:59 | 000,000,000 | ---D | M] (Aero Fox) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}
[2010.05.08 05:24:43 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.05.08 05:22:00 | 000,000,000 | ---D | M] -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\opensearch@ask.com
[2010.05.08 05:21:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\mac\browser\extensions
[2010.05.08 05:21:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\mac\mozapps\extensions
[2010.05.08 05:21:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\browser\extensions
[2010.05.08 05:21:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Florian\AppData\Roaming\mozilla\Firefox\Profiles\5z3ikmye.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\mozapps\extensions
[2010.05.25 14:28:55 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2010.05.25 14:28:55 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.05.08 04:09:18 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.05.08 04:09:03 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.14 00:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{09ae9360-6707-11df-a19c-001e8c12810e}\Shell - "" = AutoRun
O33 - MountPoints2\{09ae9360-6707-11df-a19c-001e8c12810e}\Shell\AutoRun\command - "" = H:\Set-up.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.05.25 14:31:28 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\skypePM
[2010.05.25 14:29:05 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Skype
[2010.05.25 14:28:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010.05.25 14:28:37 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2010.05.25 14:28:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010.05.25 05:49:34 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.05.25 05:49:34 | 000,000,000 | ---D | C] -- C:\rsit
[2010.05.25 05:34:30 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Malwarebytes
[2010.05.25 05:34:19 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.05.25 05:34:17 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.05.25 05:34:17 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.05.25 05:34:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.05.25 05:25:45 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010.05.24 14:53:40 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Florian\Desktop\HiJackThis204.exe
[2010.05.24 14:48:59 | 000,000,000 | ---D | C] -- C:\Users\Florian\Desktop\audacity_temp
[2010.05.24 13:41:32 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Recordpad
[2010.05.24 13:41:32 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Recordpad
[2010.05.24 13:41:30 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Swift Sound
[2010.05.24 13:41:30 | 000,000,000 | ---D | C] -- C:\Program Files\NCH Software
[2010.05.24 13:41:26 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\NCH Swift Sound
[2010.05.24 10:00:06 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2010.05.24 09:55:08 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Media Player
[2010.05.24 09:53:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010.05.24 09:32:20 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2010.05.24 09:31:51 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\DAEMON Tools Lite
[2010.05.24 09:31:49 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010.05.24 09:25:22 | 000,000,000 | ---D | C] -- C:\Users\Florian\Desktop\Adobe.Photoshop.CS5.Extended.v12.0.Multilanguage
[2010.05.24 01:36:22 | 000,000,000 | ---D | C] -- C:\Program Files\Veetle
[2010.05.24 01:33:51 | 000,000,000 | ---D | C] -- C:\Program Files\SopCast
[2010.05.23 22:31:39 | 000,060,273 | ---- | C] (Open Source Software community project) -- C:\Windows\System32\pthreadGC2.dll
[2010.05.23 16:54:09 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Logitech
[2010.05.23 16:53:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2010.05.23 16:53:40 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2010.05.23 14:31:27 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\GHISLER
[2010.05.23 14:25:54 | 000,000,000 | ---D | C] -- C:\totalcmd
[2010.05.23 14:25:54 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\GHISLER
[2010.05.23 12:08:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2010.05.21 21:49:11 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Ulead VideoStudio SE
[2010.05.21 21:44:32 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield
[2010.05.21 21:44:24 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media-Komponenten
[2010.05.21 21:21:00 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\mIRC
[2010.05.21 21:21:00 | 000,000,000 | ---D | C] -- C:\Program Files\mIRC
[2010.05.21 18:57:06 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2010.05.20 21:08:57 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\DScaler4
[2010.05.20 20:41:39 | 000,000,000 | ---D | C] -- C:\Program Files\DScaler
[2010.05.20 20:19:17 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Adobe
[2010.05.20 20:18:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010.05.20 20:17:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.05.20 20:17:41 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010.05.20 17:25:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mydrv
[2010.05.20 16:58:02 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Ulead VideoStudio
[2010.05.20 16:57:34 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Ulead Systems
[2010.05.20 16:55:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InterVideo
[2010.05.20 16:54:58 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Components
[2010.05.20 16:53:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Ulead Systems
[2010.05.20 16:53:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ulead Systems
[2010.05.20 16:37:15 | 000,035,892 | ---- | C] (Prolific Technology Inc.) -- C:\Windows\System32\SER9PL.sys
[2010.05.20 16:28:19 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\MAGIX
[2010.05.20 16:25:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MAGIX Shared
[2010.05.20 16:25:41 | 000,909,312 | ---- | C] (MAGIX AG) -- C:\Windows\System32\MXRestore.exe
[2010.05.20 16:25:41 | 000,278,528 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLRES32.dll
[2010.05.20 16:25:41 | 000,090,112 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLPRF32.dll
[2010.05.20 16:25:41 | 000,065,536 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\STRING32.dll
[2010.05.20 16:25:41 | 000,065,536 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLPTL32.dll
[2010.05.20 16:25:41 | 000,057,344 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLTPO32.dll
[2010.05.20 16:25:41 | 000,053,248 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLPRJ32.dll
[2010.05.20 16:25:41 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml4a.dll
[2010.05.20 16:25:41 | 000,040,960 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLRD32.dll
[2010.05.20 16:25:41 | 000,024,576 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\TTIC32.dll
[2010.05.20 16:25:41 | 000,024,576 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\TTI32.dll
[2010.05.20 16:25:40 | 000,724,992 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLAV32.dll
[2010.05.20 16:25:40 | 000,221,184 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLDRV32.dll
[2010.05.20 16:25:40 | 000,212,992 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLDEV32.dll
[2010.05.20 16:25:40 | 000,147,456 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLCPY32.dll
[2010.05.20 16:25:40 | 000,114,688 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLCDA32.dll
[2010.05.20 16:25:40 | 000,094,208 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLIO32.dll
[2010.05.20 16:25:40 | 000,077,824 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLPNT32.dll
[2010.05.20 16:25:40 | 000,061,440 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLCDF32.dll
[2010.05.20 16:25:40 | 000,045,056 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLIMG32.dll
[2010.05.20 16:25:40 | 000,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLMSC32.dll
[2010.05.20 16:25:40 | 000,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLISO32.dll
[2010.05.20 16:25:40 | 000,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLDIR32.dll
[2010.05.20 16:25:40 | 000,024,576 | ---- | C] (PoINT Software & Systems GmbH) -- C:\Windows\System32\DLLIX.dll
[2010.05.20 16:23:59 | 000,000,000 | ---D | C] -- C:\ProgramData\MAGIX
[2010.05.20 16:22:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MAGIX Services
[2010.05.20 16:19:45 | 000,000,000 | ---D | C] -- C:\Program Files\Noël Danjou
[2010.05.20 14:27:22 | 000,000,000 | ---D | C] -- C:\Program Files\EZ Grabber
[2010.05.15 02:15:24 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\dvdcss
[2010.05.13 17:59:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam
[2010.05.13 17:59:28 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2010.05.12 17:48:51 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Verlauf
[2010.05.11 14:27:09 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\OpenOffice.org
[2010.05.11 14:22:16 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2010.05.09 23:17:32 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2010.05.09 22:25:09 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2010.05.09 18:55:34 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2010.05.09 17:38:15 | 000,000,000 | ---D | C] -- C:\Program Files\Messer
[2010.05.09 16:09:46 | 000,000,000 | ---D | C] -- C:\Program Files\No23 Recorder
[2010.05.09 13:32:12 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Acreon
[2010.05.09 13:32:10 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\._Revolution_
[2010.05.09 09:39:54 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010.05.09 09:39:54 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010.05.09 09:39:54 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010.05.09 09:39:50 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2010.05.09 09:39:48 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2010.05.09 09:39:48 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
[2010.05.09 09:39:43 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2010.05.09 09:39:43 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2010.05.09 09:39:42 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2010.05.09 09:39:41 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2010.05.09 09:39:36 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2010.05.09 09:39:36 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010.05.09 09:39:36 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010.05.09 09:39:34 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2010.05.09 09:39:32 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2010.05.09 09:39:32 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2010.05.09 09:39:32 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2010.05.09 09:39:30 | 003,954,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2010.05.09 09:39:30 | 003,899,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2010.05.09 09:39:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2010.05.09 09:39:21 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2010.05.08 23:19:03 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\TechSmith
[2010.05.08 23:18:53 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Camtasia Studio
[2010.05.08 23:16:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\QuickTime
[2010.05.08 23:16:35 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
[2010.05.08 23:16:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\TechSmith Shared
[2010.05.08 23:16:16 | 000,000,000 | ---D | C] -- C:\Program Files\TechSmith
[2010.05.08 22:25:00 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Harry Potter
[2010.05.08 19:46:08 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\ICQ
[2010.05.08 16:41:11 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\vlc
[2010.05.08 16:32:03 | 000,046,592 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\System32\libusb0.dll
[2010.05.08 16:32:03 | 000,019,456 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\System32\libusbd-9x.exe
[2010.05.08 16:32:03 | 000,018,944 | ---- | C] (hxxp://libusb-win32.sourceforge.net) -- C:\Windows\System32\libusbd-nt.exe
[2010.05.08 16:32:03 | 000,000,000 | ---D | C] -- C:\Program Files\LibUSB-Win32-0.1.10.1
[2010.05.08 14:15:15 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\gtk-2.0
[2010.05.08 13:58:07 | 000,000,000 | ---D | C] -- C:\Users\Florian\.thumbnails
[2010.05.08 13:56:46 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\gegl-0.0
[2010.05.08 13:56:46 | 000,000,000 | ---D | C] -- C:\Users\Florian\.gimp-2.6
[2010.05.08 13:50:02 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\FireShot
[2010.05.08 13:21:04 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Avira
[2010.05.08 12:53:18 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010.05.08 12:53:17 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010.05.08 12:53:17 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010.05.08 12:52:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2010.05.08 12:52:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2010.05.08 12:25:24 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2010.05.08 12:20:37 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
[2010.05.08 12:20:37 | 000,274,432 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\Oemdspif.dll
[2010.05.08 12:20:37 | 000,159,744 | ---- | C] (AMD) -- C:\Windows\System32\atitmmxx.dll
[2010.05.08 12:20:37 | 000,100,352 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\drivers\AtiHdmi.sys
[2010.05.08 12:20:37 | 000,050,176 | ---- | C] (AMD) -- C:\Windows\System32\coinst.dll
[2010.05.08 12:20:37 | 000,027,136 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
[2010.05.08 12:20:37 | 000,020,480 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
[2010.05.08 12:20:36 | 014,129,664 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
[2010.05.08 12:20:36 | 005,320,192 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atipmdag.sys
[2010.05.08 12:20:36 | 005,320,192 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
[2010.05.08 12:20:36 | 003,649,536 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
[2010.05.08 12:20:36 | 000,446,464 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIDEMGX.dll
[2010.05.08 12:20:36 | 000,426,496 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\aticfx32.dll
[2010.05.08 12:20:36 | 000,372,736 | ---- | C] (AMD) -- C:\Windows\System32\atieclxx.exe
[2010.05.08 12:20:36 | 000,233,472 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
[2010.05.08 12:20:36 | 000,172,032 | ---- | C] (AMD) -- C:\Windows\System32\atiesrxx.exe
[2010.05.08 12:20:36 | 000,150,016 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
[2010.05.08 12:20:36 | 000,143,360 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
[2010.05.08 12:20:36 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
[2010.05.08 12:20:36 | 000,053,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
[2010.05.08 12:20:36 | 000,053,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
[2010.05.08 12:20:36 | 000,052,224 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
[2010.05.08 12:20:36 | 000,052,224 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
[2010.05.08 12:20:36 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\ati2edxx.dll
[2010.05.08 12:20:36 | 000,014,848 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
[2010.05.08 12:20:36 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
[2010.05.08 12:20:36 | 000,011,776 | ---- | C] (AMD) -- C:\Windows\System32\atimuixx.dll
[2010.05.08 12:20:32 | 000,000,000 | ---D | C] -- C:\Users\Florian\ati8703_Win7Vista32
[2010.05.08 12:20:15 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\WinRAR
[2010.05.08 12:17:37 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Download Manager
[2010.05.08 12:13:53 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2010.05.08 11:42:12 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Blizzard Entertainment
[2010.05.08 11:39:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Messenger Plus!
[2010.05.08 11:33:29 | 000,012,672 | ---- | C] (ASUSTeK Computer Inc.) -- C:\Windows\System32\drivers\EIO1.sys
[2010.05.08 11:33:28 | 000,000,000 | ---D | C] -- C:\Program Files\VGAINFO
[2010.05.08 06:05:56 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\ATI
[2010.05.08 06:05:56 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\ATI
[2010.05.08 06:00:36 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\ElevatedDiagnostics
[2010.05.08 05:58:52 | 000,000,000 | ---D | C] -- C:\Windows\System32\Atheros_L2
[2010.05.08 05:53:43 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2010.05.08 05:51:57 | 001,783,056 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesLib.dll
[2010.05.08 05:51:55 | 001,738,072 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesGUILib.dll
[2010.05.08 05:51:54 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2010.05.08 05:51:54 | 000,185,584 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2010.05.08 05:51:54 | 000,173,296 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2010.05.08 05:51:54 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2010.05.08 05:51:50 | 001,083,936 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2010.05.08 05:51:48 | 003,086,752 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\drivers\RTKVHDA.sys
[2010.05.08 05:51:47 | 001,775,136 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2010.05.08 05:51:44 | 000,058,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2010.05.08 05:51:43 | 000,367,136 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2010.05.08 05:51:39 | 003,583,008 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2010.05.08 05:51:31 | 000,357,576 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll
[2010.05.08 05:51:31 | 000,168,648 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll
[2010.05.08 05:51:31 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll
[2010.05.08 05:51:31 | 000,062,664 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll
[2010.05.08 05:51:29 | 000,293,584 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll
[2010.05.08 05:51:29 | 000,293,584 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll
[2010.05.08 05:51:28 | 000,253,272 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxVolumeSDAPO.dll
[2010.05.08 05:51:27 | 001,312,088 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioRealtek.dll
[2010.05.08 05:51:25 | 001,938,704 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioEQ.dll
[2010.05.08 05:51:25 | 000,253,784 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO30.dll
[2010.05.08 05:51:25 | 000,232,792 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO20.dll
[2010.05.08 05:51:25 | 000,132,368 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO.dll
[2010.05.08 05:51:22 | 001,131,280 | ---- | C] (DTS) -- C:\Windows\System32\DTSS2SpeakerDLL.dll
[2010.05.08 05:51:22 | 000,427,792 | ---- | C] (DTS) -- C:\Windows\System32\DTSSymmetryDLL.dll
[2010.05.08 05:51:22 | 000,405,776 | ---- | C] (DTS) -- C:\Windows\System32\DTSVoiceClarityDLL.dll
[2010.05.08 05:51:22 | 000,299,424 | ---- | C] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll
[2010.05.08 05:51:21 | 000,961,296 | ---- | C] (DTS) -- C:\Windows\System32\DTSS2HeadphoneDLL.dll
[2010.05.08 05:51:21 | 000,900,368 | ---- | C] (DTS) -- C:\Windows\System32\DTSBoostDLL.dll
[2010.05.08 05:51:21 | 000,448,272 | ---- | C] (DTS) -- C:\Windows\System32\DTSBassEnhancementDLL.dll
[2010.05.08 05:51:21 | 000,290,064 | ---- | C] (DTS) -- C:\Windows\System32\DTSNeoPCDLL.dll
[2010.05.08 05:51:21 | 000,235,280 | ---- | C] (DTS) -- C:\Windows\System32\DTSGainCompensatorDLL.dll
[2010.05.08 05:51:21 | 000,223,504 | ---- | C] (DTS) -- C:\Windows\System32\DTSLimiterDLL.dll
[2010.05.08 05:51:21 | 000,145,760 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2010.05.08 05:51:21 | 000,103,696 | ---- | C] (DTS) -- C:\Windows\System32\DTSLFXAPO.dll
[2010.05.08 05:51:21 | 000,103,696 | ---- | C] (DTS) -- C:\Windows\System32\DTSGFXAPO.dll
[2010.05.08 05:51:21 | 000,102,160 | ---- | C] (DTS) -- C:\Windows\System32\DTSGFXAPONS.dll
[2010.05.08 05:51:21 | 000,096,160 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2010.05.08 05:51:21 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010.05.08 05:51:17 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010.05.08 05:51:12 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2010.05.08 05:51:01 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2010.05.08 05:50:48 | 001,251,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2010.05.08 05:50:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010.05.08 05:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2010.05.08 05:47:47 | 000,000,000 | ---D | C] -- C:\Users\Florian\SystemRequirementsLab
[2010.05.08 05:47:01 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2010.05.08 05:43:01 | 000,000,000 | ---D | C] -- C:\Program Files\World of Warcraft
[2010.05.08 04:51:03 | 000,000,000 | R-SD | C] -- C:\Users\Florian\Documents\My Stationery
[2010.05.08 04:46:03 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\Meine empfangenen Dateien
[2010.05.08 04:30:39 | 000,000,000 | ---D | C] -- C:\Users\Florian\Desktop\opmusic
[2010.05.08 04:21:37 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Apple Computer
[2010.05.08 04:21:37 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Apple Computer
[2010.05.08 04:21:21 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2010.05.08 04:21:21 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2010.05.08 04:19:41 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.05.08 04:19:28 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Apple
[2010.05.08 04:19:26 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010.05.08 04:18:56 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010.05.08 04:18:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.05.08 04:16:37 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010.05.08 04:15:33 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.05.08 04:14:06 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\DVDVideoSoft
[2010.05.08 04:13:55 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2010.05.08 04:13:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2010.05.08 04:13:54 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
[2010.05.08 04:13:54 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
[2010.05.08 04:13:26 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Detect
[2010.05.08 04:13:17 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Winamp
[2010.05.08 04:13:17 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp
[2010.05.08 04:12:18 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010.05.08 04:11:45 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2010.05.08 04:10:33 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2010.05.08 04:09:49 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2010.05.08 04:09:36 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\uTorrent
[2010.05.08 04:09:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010.05.08 04:09:17 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2010.05.08 04:09:17 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2010.05.08 04:09:17 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2010.05.08 04:09:17 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2010.05.08 04:09:00 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger Plus! Live
[2010.05.08 04:09:00 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010.05.08 04:07:47 | 000,000,000 | ---D | C] -- C:\Users\Florian\JDownloader
[2010.05.08 04:07:16 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0
[2010.05.08 04:05:30 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\DivX
[2010.05.08 04:05:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2010.05.08 04:04:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2010.05.08 04:04:55 | 000,000,000 | ---D | C] -- C:\Users\Florian\Documents\FFOutput
[2010.05.08 04:04:47 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2010.05.08 04:04:21 | 000,000,000 | ---D | C] -- C:\Program Files\FreeTime
[2010.05.08 04:03:57 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2010.05.08 04:03:33 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
[2010.05.08 03:59:27 | 000,000,000 | ---D | C] -- C:\Users\Florian\Tracing
[2010.05.08 03:58:07 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2010.05.08 03:57:30 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2010.05.08 03:56:30 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2010.05.08 03:56:13 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2010.05.08 03:55:57 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive
[2010.05.08 03:55:43 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2010.05.08 03:55:42 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2010.05.08 03:55:42 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2010.05.08 03:55:42 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys
[2010.05.08 03:55:42 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys
[2010.05.08 03:55:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2010.05.08 03:55:41 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010.05.08 03:55:35 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2010.05.08 03:55:16 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010.05.08 03:53:12 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010.05.08 03:51:21 | 000,181,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2010.05.08 03:50:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2010.05.08 03:48:37 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Macromedia
[2010.05.08 03:48:37 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Adobe
[2010.05.08 03:48:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2010.05.08 03:47:56 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ6Toolbar
[2010.05.08 03:47:55 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010.05.08 03:44:22 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.1
[2010.05.08 03:40:52 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Mozilla
[2010.05.08 03:40:52 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Mozilla
[2010.05.08 03:39:51 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010.05.08 03:35:26 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\ICQ
[2010.05.08 03:35:25 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\AOL
[2010.05.08 03:29:39 | 000,000,000 | R--D | C] -- C:\Users\Florian\Searches
[2010.05.08 03:29:28 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Identities
[2010.05.08 03:29:26 | 000,000,000 | R--D | C] -- C:\Users\Florian\Contacts
[2010.05.08 03:29:18 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\VirtualStore
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Vorlagen
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\AppData\Local\Verlauf
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\AppData\Local\Temporary Internet Files
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Startmenü
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\SendTo
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Recent
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Netzwerkumgebung
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Lokale Einstellungen
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Documents\Eigene Videos
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Documents\Eigene Musik
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Eigene Dateien
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Documents\Eigene Bilder
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Druckumgebung
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Cookies
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\AppData\Local\Anwendungsdaten
[2010.05.08 03:29:17 | 000,000,000 | -HSD | C] -- C:\Users\Florian\Anwendungsdaten
[2010.05.08 03:29:16 | 000,000,000 | --SD | C] -- C:\Users\Florian\AppData\Roaming\Microsoft
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Videos
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Saved Games
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Pictures
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Music
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Links
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Favorites
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Downloads
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Documents
[2010.05.08 03:29:16 | 000,000,000 | R--D | C] -- C:\Users\Florian\Desktop
[2010.05.08 03:29:16 | 000,000,000 | -H-D | C] -- C:\Users\Florian\AppData
[2010.05.08 03:29:16 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Temp
[2010.05.08 03:29:16 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Local\Microsoft
[2010.05.08 03:29:16 | 000,000,000 | ---D | C] -- C:\Users\Florian\AppData\Roaming\Media Center Programs
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2010.05.08 03:28:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2010.05.08 03:21:08 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010.05.08 03:18:10 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010.05.08 03:07:10 | 000,000,000 | -HSD | C] -- C:\Boot
[2010.05.08 02:06:05 | 000,028,672 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\System32\drivers\l260x86.sys
[2010.04.27 00:04:42 | 000,353,592 | ---- | C] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl
 
========== Files - Modified Within 30 Days ==========
 
[2010.05.25 16:27:18 | 001,835,008 | -HS- | M] () -- C:\Users\Florian\NTUSER.DAT
[2010.05.25 16:23:40 | 000,054,016 | ---- | M] () -- C:\Windows\System32\drivers\etti.sys
[2010.05.25 15:08:41 | 000,126,577 | ---- | M] () -- C:\Users\Florian\Desktop\sad_smiley_by_shangyne.jpg
[2010.05.25 15:05:52 | 000,003,399 | ---- | M] () -- C:\Windows\messer.ini
[2010.05.25 14:41:57 | 242,073,600 | ---- | M] () -- C:\Users\Florian\Desktop\20100525-143653.MPG
[2010.05.25 14:41:57 | 000,000,526 | ---- | M] () -- C:\Windows\win.ini
[2010.05.25 14:31:29 | 000,000,056 | -H-- | M] () -- C:\Windows\System32\ezsidmv.dat
[2010.05.25 14:28:39 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2010.05.25 05:42:16 | 000,054,016 | ---- | M] () -- C:\Windows\System32\drivers\amau.sys
[2010.05.25 05:34:21 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.25 05:25:46 | 000,001,831 | ---- | M] () -- C:\Users\Florian\Desktop\CCleaner.lnk
[2010.05.25 05:23:44 | 000,011,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.05.25 05:23:44 | 000,011,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.05.25 05:18:22 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.05.25 05:18:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.05.25 05:18:02 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.25 05:16:23 | 002,791,923 | -H-- | M] () -- C:\Users\Florian\AppData\Local\IconCache.db
[2010.05.24 15:04:16 | 003,693,728 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.05.24 14:53:41 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Florian\Desktop\HiJackThis204.exe
[2010.05.24 13:48:42 | 000,169,984 | ---- | M] () -- C:\Windows\Jqegea.exe
[2010.05.24 10:00:07 | 000,089,232 | ---- | M] () -- C:\Users\Florian\AppData\Local\GDIPFONTCACHEV1.DAT
[2010.05.24 09:48:06 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010.05.24 09:32:44 | 000,691,696 | ---- | M] () -- C:\Windows\System32\drivers\sptd.sys
[2010.05.24 09:32:44 | 000,001,896 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2010.05.24 01:33:52 | 000,000,949 | ---- | M] () -- C:\Users\Florian\Desktop\SopCast.lnk
[2010.05.23 22:29:36 | 000,000,899 | ---- | M] () -- C:\Users\Florian\Desktop\DScaler.lnk
[2010.05.23 20:42:43 | 000,012,895 | ---- | M] () -- C:\Users\Florian\.recently-used.xbel
[2010.05.23 20:27:30 | 005,011,796 | ---- | M] () -- C:\Users\Florian\Desktop\FireShot capture #004 - 'YouTube - Kanal von KonshinLP' - www_youtube_com_user_KonshinLP.png
[2010.05.23 16:54:08 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_lgSSBW_01_00_00.Wdf
[2010.05.23 16:54:02 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_lgSSQVGA_01_00_00.Wdf
[2010.05.23 16:08:37 | 000,012,288 | ---- | M] () -- C:\Users\Florian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.23 14:25:55 | 000,000,632 | ---- | M] () -- C:\Users\Public\Desktop\Total Commander.lnk
[2010.05.22 09:47:27 | 001,472,002 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.05.22 09:47:27 | 000,643,628 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.05.22 09:47:27 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.05.22 09:47:27 | 000,126,188 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.05.22 09:47:27 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.05.21 21:21:00 | 000,000,909 | ---- | M] () -- C:\Users\Public\Desktop\mIRC.lnk
[2010.05.20 14:27:30 | 000,001,793 | ---- | M] () -- C:\Users\Florian\Desktop\EZ Grabber.lnk
[2010.05.13 20:57:29 | 000,000,213 | ---- | M] () -- C:\Users\Florian\Desktop\Portal.url
[2010.05.13 18:52:46 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2010.05.12 23:42:47 | 000,000,038 | ---- | M] () -- C:\Windows\AviSplitter.INI
[2010.05.12 22:36:55 | 000,064,295 | ---- | M] () -- C:\Users\Florian\Desktop\Kons.jpg
[2010.05.09 22:25:22 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.05.09 18:55:35 | 000,001,042 | ---- | M] () -- C:\Users\Public\Desktop\Game Booster.lnk
[2010.05.09 16:09:48 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\No23 Recorder.lnk
[2010.05.09 15:21:25 | 000,756,483 | ---- | M] () -- C:\Users\Florian\Desktop\Konshin2.jpg
[2010.05.08 23:16:45 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[2010.05.08 16:50:40 | 000,000,740 | ---- | M] () -- C:\Users\Florian\Desktop\Fraps.lnk
[2010.05.08 16:24:51 | 000,448,619 | ---- | M] () -- C:\Users\Florian\Desktop\Konshin.jpg
[2010.05.08 16:23:57 | 017,627,344 | ---- | M] () -- C:\Users\Florian\Desktop\Konshin.xcf
[2010.05.08 12:53:45 | 000,002,429 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010.05.08 11:41:39 | 000,001,455 | ---- | M] () -- C:\Users\Florian\Desktop\Launcher.lnk
[2010.05.08 04:55:13 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat
[2010.05.08 04:17:03 | 000,001,197 | ---- | M] () -- C:\Users\Florian\Desktop\DVDVideoSoft Free Studio.lnk
[2010.05.08 04:16:24 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2010.05.08 04:16:23 | 000,000,356 | RHS- | M] () -- C:\Boot.ini.saved
[2010.05.08 04:09:53 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2010.05.08 04:09:02 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2010.05.08 04:09:02 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2010.05.08 04:09:02 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2010.05.08 04:09:01 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2010.05.08 04:08:21 | 000,000,860 | ---- | M] () -- C:\Users\Florian\Desktop\JDownloader.lnk
[2010.05.08 04:08:07 | 000,001,063 | ---- | M] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2010.05.08 04:04:40 | 000,001,156 | ---- | M] () -- C:\Users\Florian\Desktop\Format Factory.lnk
[2010.05.08 04:03:34 | 000,000,913 | ---- | M] () -- C:\Users\Florian\Desktop\Audacity.lnk
[2010.05.08 03:58:47 | 000,001,287 | ---- | M] () -- C:\Users\Florian\Desktop\Windows Live Movie Maker.lnk
[2010.05.08 03:57:30 | 000,000,020 | ---- | M] () -- C:\Windows\$û„
[2010.05.08 03:57:20 | 000,002,200 | ---- | M] () -- C:\Users\Florian\Desktop\Windows Live Mail.lnk
[2010.05.08 03:56:46 | 000,002,068 | ---- | M] () -- C:\Users\Florian\Desktop\Windows Live Messenger .lnk
[2010.05.08 03:55:54 | 000,002,012 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk
[2010.05.08 03:48:10 | 000,001,770 | ---- | M] () -- C:\Users\Public\Desktop\ICQ7.1.lnk
[2010.05.08 03:39:54 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010.05.08 03:31:43 | 000,524,288 | -HS- | M] () -- C:\Users\Florian\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2010.05.08 03:31:43 | 000,524,288 | -HS- | M] () -- C:\Users\Florian\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2010.05.08 03:31:43 | 000,065,536 | -HS- | M] () -- C:\Users\Florian\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2010.05.08 03:29:17 | 000,000,020 | -HS- | M] () -- C:\Users\Florian\ntuser.ini
[2010.05.08 03:22:44 | 000,043,797 | ---- | M] () -- C:\Windows\System32\license.rtf
[2010.05.08 03:20:47 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2010.05.04 22:02:38 | 000,000,212 | -H-- | M] () -- C:\Boot.BAK
[2010.04.30 17:25:10 | 001,083,936 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2010.04.30 17:25:04 | 001,775,136 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2010.04.30 17:25:04 | 000,058,400 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2010.04.30 17:24:58 | 003,583,008 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2010.04.30 17:24:58 | 000,367,136 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2010.04.30 16:59:12 | 003,086,752 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\drivers\RTKVHDA.sys
[2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.04.29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.04.28 18:45:24 | 001,251,872 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2010.04.27 20:51:40 | 001,738,072 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\System32\WavesGUILib.dll
[2010.04.27 20:51:32 | 000,253,272 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxVolumeSDAPO.dll
[2010.04.27 20:51:24 | 000,253,784 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO30.dll
[2010.04.27 20:51:04 | 001,312,088 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioRealtek.dll
[2010.04.27 13:50:10 | 000,299,424 | ---- | M] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll
[2010.04.27 00:04:42 | 000,353,592 | ---- | M] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl
 
========== Files Created - No Company Name ==========
 
[2010.05.25 16:23:40 | 000,054,016 | ---- | C] () -- C:\Windows\System32\drivers\etti.sys
[2010.05.25 15:08:40 | 000,126,577 | ---- | C] () -- C:\Users\Florian\Desktop\sad_smiley_by_shangyne.jpg
[2010.05.25 14:36:53 | 242,073,600 | ---- | C] () -- C:\Users\Florian\Desktop\20100525-143653.MPG
[2010.05.25 14:31:29 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2010.05.25 14:28:39 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2010.05.25 05:42:16 | 000,054,016 | ---- | C] () -- C:\Windows\System32\drivers\amau.sys
[2010.05.25 05:34:21 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.25 05:25:46 | 000,001,831 | ---- | C] () -- C:\Users\Florian\Desktop\CCleaner.lnk
[2010.05.24 13:48:55 | 000,169,984 | ---- | C] () -- C:\Windows\Jqegea.exe
[2010.05.24 09:48:06 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010.05.24 09:32:44 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2010.05.24 09:32:44 | 000,001,896 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2010.05.24 01:33:52 | 000,000,949 | ---- | C] () -- C:\Users\Florian\Desktop\SopCast.lnk
[2010.05.24 01:33:12 | 005,387,807 | ---- | C] () -- C:\Users\Florian\Desktop\Setup-SopCast-3.2.9-2010-3-23.exe
[2010.05.23 22:31:40 | 000,057,344 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2010.05.23 20:42:43 | 000,012,895 | ---- | C] () -- C:\Users\Florian\.recently-used.xbel
[2010.05.23 20:27:30 | 005,011,796 | ---- | C] () -- C:\Users\Florian\Desktop\FireShot capture #004 - 'YouTube - Kanal von KonshinLP' - www_youtube_com_user_KonshinLP.png
[2010.05.23 16:54:08 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_lgSSBW_01_00_00.Wdf
[2010.05.23 16:54:02 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_lgSSQVGA_01_00_00.Wdf
[2010.05.23 14:25:55 | 000,000,632 | ---- | C] () -- C:\Users\Public\Desktop\Total Commander.lnk
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2010.05.23 14:25:54 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2010.05.21 21:21:00 | 000,000,909 | ---- | C] () -- C:\Users\Public\Desktop\mIRC.lnk
[2010.05.20 20:41:45 | 000,000,899 | ---- | C] () -- C:\Users\Florian\Desktop\DScaler.lnk
[2010.05.20 16:37:15 | 000,026,719 | ---- | C] () -- C:\Windows\System32\SERSPL.VXD
[2010.05.20 16:25:40 | 000,038,492 | ---- | C] () -- C:\Windows\System32\DLLAV32.lib
[2010.05.20 16:23:19 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2010.05.20 14:27:29 | 000,001,793 | ---- | C] () -- C:\Users\Florian\Desktop\EZ Grabber.lnk
[2010.05.13 19:14:11 | 000,000,213 | ---- | C] () -- C:\Users\Florian\Desktop\Portal.url
[2010.05.13 17:59:29 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2010.05.12 22:36:54 | 000,064,295 | ---- | C] () -- C:\Users\Florian\Desktop\Kons.jpg
[2010.05.09 22:25:22 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010.05.09 17:52:51 | 000,003,399 | ---- | C] () -- C:\Windows\messer.ini
[2010.05.09 16:09:48 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\No23 Recorder.lnk
[2010.05.09 16:02:52 | 000,012,288 | ---- | C] () -- C:\Users\Florian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.09 15:18:33 | 000,756,483 | ---- | C] () -- C:\Users\Florian\Desktop\Konshin2.jpg
[2010.05.08 23:16:45 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[2010.05.08 19:49:35 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
[2010.05.08 16:49:12 | 000,000,740 | ---- | C] () -- C:\Users\Florian\Desktop\Fraps.lnk
[2010.05.08 16:32:03 | 000,033,792 | ---- | C] () -- C:\Windows\System32\drivers\libusb0.sys
[2010.05.08 14:35:41 | 017,627,344 | ---- | C] () -- C:\Users\Florian\Desktop\Konshin.xcf
[2010.05.08 14:15:14 | 000,448,619 | ---- | C] () -- C:\Users\Florian\Desktop\Konshin.jpg
[2010.05.08 12:53:45 | 000,002,429 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010.05.08 12:20:37 | 000,497,760 | ---- | C] () -- C:\Windows\System32\atiumdva.cap
[2010.05.08 12:20:37 | 000,001,035 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2010.05.08 12:20:36 | 000,198,341 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2010.05.08 12:20:36 | 000,031,240 | ---- | C] () -- C:\Windows\System32\atiapfxx.blb
[2010.05.08 12:20:36 | 000,020,274 | ---- | C] () -- C:\Windows\atiogl.xml
[2010.05.08 11:41:17 | 000,001,455 | ---- | C] () -- C:\Users\Florian\Desktop\Launcher.lnk
[2010.05.08 04:55:13 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010.05.08 04:30:36 | 002,542,728 | ---- | C] () -- C:\Users\Florian\Desktop\WowMatrix.exe
[2010.05.08 04:30:35 | 000,236,544 | ---- | C] () -- C:\Users\Florian\Desktop\Chrono.exe
[2010.05.08 04:30:33 | 000,000,069 | R--- | C] () -- C:\Users\Florian\Desktop\listen.pls
[2010.05.08 04:16:23 | 000,000,212 | -H-- | C] () -- C:\Boot.BAK
[2010.05.08 04:14:08 | 000,001,197 | ---- | C] () -- C:\Users\Florian\Desktop\DVDVideoSoft Free Studio.lnk
[2010.05.08 04:09:53 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2010.05.08 04:08:21 | 000,000,860 | ---- | C] () -- C:\Users\Florian\Desktop\JDownloader.lnk
[2010.05.08 04:08:07 | 000,001,063 | ---- | C] () -- C:\Users\Public\Desktop\GIMP 2.lnk
[2010.05.08 04:04:40 | 000,001,156 | ---- | C] () -- C:\Users\Florian\Desktop\Format Factory.lnk
[2010.05.08 04:03:34 | 000,000,913 | ---- | C] () -- C:\Users\Florian\Desktop\Audacity.lnk
[2010.05.08 04:03:13 | 000,001,042 | ---- | C] () -- C:\Users\Public\Desktop\Game Booster.lnk
[2010.05.08 03:58:47 | 000,001,287 | ---- | C] () -- C:\Users\Florian\Desktop\Windows Live Movie Maker.lnk
[2010.05.08 03:57:30 | 000,000,020 | ---- | C] () -- C:\Windows\$û„
[2010.05.08 03:57:20 | 000,002,200 | ---- | C] () -- C:\Users\Florian\Desktop\Windows Live Mail.lnk
[2010.05.08 03:56:46 | 000,002,068 | ---- | C] () -- C:\Users\Florian\Desktop\Windows Live Messenger .lnk
[2010.05.08 03:55:53 | 000,002,012 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk
[2010.05.08 03:48:10 | 000,001,770 | ---- | C] () -- C:\Users\Public\Desktop\ICQ7.1.lnk
[2010.05.08 03:39:54 | 000,001,885 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010.05.08 03:29:17 | 000,524,288 | -HS- | C] () -- C:\Users\Florian\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2010.05.08 03:29:17 | 000,524,288 | -HS- | C] () -- C:\Users\Florian\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2010.05.08 03:29:17 | 000,262,144 | -HS- | C] () -- C:\Users\Florian\ntuser.dat.LOG1
[2010.05.08 03:29:17 | 000,065,536 | -HS- | C] () -- C:\Users\Florian\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2010.05.08 03:29:17 | 000,000,020 | -HS- | C] () -- C:\Users\Florian\ntuser.ini
[2010.05.08 03:29:17 | 000,000,000 | -HS- | C] () -- C:\Users\Florian\ntuser.dat.LOG2
[2010.05.08 03:29:16 | 001,835,008 | -HS- | C] () -- C:\Users\Florian\NTUSER.DAT
[2010.05.08 03:20:47 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.05.08 03:17:45 | 1610,014,720 | -HS- | C] () -- C:\hiberfil.sys
[2010.05.08 03:07:17 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2010.05.08 03:07:11 | 000,383,562 | RHS- | C] () -- C:\bootmgr
[2010.01.14 21:45:18 | 000,230,784 | ---- | C] () -- C:\Windows\System32\drivers\U6000ALL.sys
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2007.06.08 19:12:12 | 000,262,144 | ---- | C] () -- C:\Windows\System32\GTTunerCard.dll
[2004.07.29 02:19:46 | 000,175,104 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2003.06.28 14:34:20 | 000,069,707 | ---- | C] () -- C:\Windows\System32\DISP_OPT1.dll
[2002.03.17 02:00:00 | 000,007,420 | ---- | C] () -- C:\Windows\UA000079.DLL
< End of report >

Solluno 25.05.2010 15:42
OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 25.05.2010 16:25:25 - Run 1
OTL by OldTimer - Version 3.2.5.0    Folder = C:\Users\Florian\Downloads
 Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 45,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 63,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 75,96 Gb Total Space | 23,97 Gb Free Space | 31,56% Space Free | Partition Type: NTFS
Drive D: | 54,25 Gb Total Space | 18,07 Gb Free Space | 33,31% Space Free | Partition Type: FAT32
Drive E: | 18,82 Gb Total Space | 17,39 Gb Free Space | 92,41% Space Free | Partition Type: FAT32
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 596,02 Gb Total Space | 264,16 Gb Free Space | 44,32% Space Free | Partition Type: FAT32
 
Computer Name: FLORIAN-PC
Current User Name: Florian
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01910143-8233-1C88-A42A-F5ABD56385F9}" = Catalyst Control Center Graphics Full Existing
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04CB28D7-BDF0-2502-4365-ED13D6D956F4}" = CCC Help Russian
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A755762-EED8-47AB-A446-505766F93D43}" = Atheros Communications Inc.(R) L2 Fast Ethernet Driver
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{109945A8-D8D5-48B8-B4A5-195D3F99B56D}" = Logitech GamePanel Software 3.04.143
"{121B5E98-2DA8-8DB2-09CD-9770C9F92AB7}" = CCC Help Turkish
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{16EFE2ED-CC6A-C4C0-8405-283D5BFE7A84}" = CCC Help Hungarian
"{1DE1C304-BF2F-4A11-690D-49CE4EF57FFE}" = CCC Help Japanese
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2217B0B4-35CB-48C6-B640-864DF2F30F99}" = OpenOffice.org 3.2
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{27397BCD-6F21-E671-976A-3C422E415751}" = Catalyst Control Center Localization All
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{2E04DB15-3C1A-0D5C-68C3-62F7C42092D0}" = CCC Help Thai
"{36ADAD6D-F66C-175F-CE54-481EBB9D1FD9}" = CCC Help Danish
"{3DCA0088-989B-4EF3-B3E4-4A164FD39D95}" = Catalyst Control Center - Branding
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{3F191EA4-1DC6-66FD-E7A3-DE536CF0BC1B}" = ccc-utility
"{409F157D-BB55-A4C1-AF39-846F27BFC8CB}" = ATI Catalyst Install Manager
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4253A57A-650F-4E62-E662-AF7BF84C1D4C}" = CCC Help German
"{4350FB28-7330-7A5D-A997-69076760EC94}" = CCC Help Italian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}" = InterVideo DeviceService
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{5B6455A4-E812-479B-A762-C2356244CF97}" = AV Grabber
"{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}" = iTunes
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{5FE38283-3658-58D8-4FA9-803C71997B96}" = CCC Help Spanish
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{64A3B0CC-2EBC-A1D9-620A-BADC5A09F7A9}" = CCC Help Czech
"{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder
"{714DA01B-9279-3697-5173-278635EDD8EE}" = CCC Help English
"{71BFC818-0CED-42D6-9C87-5142918957EE}" = ICQ7.1
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7543BF13-8614-EE1B-D1B6-988D0E512329}" = Catalyst Control Center Graphics Full New
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7E6BDEB2-17E7-1F93-E4FE-B2FF074335FB}" = CCC Help Portuguese
"{88A7AE4B-726F-2C25-284D-1F8F452250E4}" = CCC Help Chinese Traditional
"{8A253629-0511-4854-8B4E-46E57E66005C}" = Bonjour
"{8B44248C-EEC9-190E-7760-EE671FF93D54}" = CCC Help Norwegian
"{900CFEB5-88D6-9937-A866-D1A4E94DB5DE}" = Catalyst Control Center InstallProxy
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9ADFCB53-EB4F-2410-BCAE-9CF582B0CAE5}" = Catalyst Control Center Graphics Light
"{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}" = Apple Mobile Device Support
"{A24E4888-B0D0-89A4-7DED-DCC0CB9CCD54}" = Catalyst Control Center Core Implementation
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A4759EE0-D18A-5115-1A07-E65A4B0CE0F7}" = CCC Help French
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.2 - Deutsch
"{B5E95F5D-BE5B-3088-30B4-F4EA8D2A7EDA}" = CCC Help Finnish
"{BBFE04E3-BF31-8808-0704-EEAB004E13FB}" = ccc-core-static
"{C392E89E-7DFC-4D4C-D1BF-77688A63E406}" = CCC Help Chinese Standard
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D69832F7-1B31-4200-2192-DED3966C61B3}" = CCC Help Dutch
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{D9E23F0E-08CE-279A-3777-C5108486A613}" = CCC Help Greek
"{DA71A94B-3617-4935-8BBE-1566B2174C95}" = Drv
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DE6E4530-4AB0-482E-91DE-7FE6309C6EF1}" = Camtasia Studio 7
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E42CB4C7-D188-15AE-E7F4-96634FF6368D}" = CCC Help Polish
"{E5811418-F477-D3DE-210C-7D7A512E1EFD}" = Catalyst Control Center Graphics Previews Vista
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F7FC9307-374E-4017-8E9D-DE1154780480}" = System Requirements Lab for Intel
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FC048853-11AC-27E0-A928-48099E987D66}" = CCC Help Korean
"{FE4795D7-A814-C945-DAFF-73FC42ECFD90}" = CCC Help Swedish
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AMCap" = AMCap
"Audacity_is1" = Audacity 1.2.6
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DScaler 4 Test Version_is1" = DScaler 4 Test Version
"DScaler 4.1.15_is1" = DScaler 4.1.15
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"FormatFactory" = FormatFactory 2.30
"Fraps" = Fraps (remove only)
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Video to iPod Converter_is1" = Free Video to iPod Converter version 3.4
"Free YouTube Download_is1" = Free YouTube Download 2.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.3
"Game Booster_is1" = Game Booster
"InstallShield_{5B6455A4-E812-479B-A762-C2356244CF97}" = EZ Grabber
"LibUSB-Win32_is1" = LibUSB-Win32-0.1.10.1
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Messenger Plus! Live" = Messenger Plus! Live
"Messer_is1" = Messer v0.992
"mIRC" = mIRC
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"SopCast" = SopCast 3.2.9
"Steam App 400" = Portal
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Totalcmd" = Total Commander (Remove or Repair)
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.17
"VLC media player" = VLC media player 1.0.5
"Winamp" = Winamp
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Detector Plug-in
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.05.2010 04:16:22 | Computer Name = Florian-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Photoshop.exe, Version: 12.0.0.0,
 Zeitstempel: 0x4bbc56b6  Name des fehlerhaften Moduls: CoolType.dll, Version: 5.7.82.7602,
 Zeitstempel: 0x4b9807c4  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000d3a11  ID des fehlerhaften
 Prozesses: 0x156c  Startzeit der fehlerhaften Anwendung: 0x01cafb176f117771  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Adobe\Adobe Photoshop CS5\Photoshop.exe
Pfad
 des fehlerhaften Moduls: C:\Program Files\Adobe\Adobe Photoshop CS5\CoolType.dll
Berichtskennung:
 a2bd89ec-670c-11df-a19c-001e8c12810e
 
Error - 24.05.2010 05:50:54 | Computer Name = Florian-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: audacity.exe, Version: 0.0.0.0, Zeitstempel:
 0x455814e4  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16385, Zeitstempel:
 0x4a5bdadb  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0002fc47  ID des fehlerhaften Prozesses:
 0x1ecc  Startzeit der fehlerhaften Anwendung: 0x01cafb266b0e3cc9  Pfad der fehlerhaften
 Anwendung: C:\Program Files\Audacity\audacity.exe  Pfad des fehlerhaften Moduls:
C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: d7984ade-6719-11df-a19c-001e8c12810e
 
Error - 24.05.2010 05:59:08 | Computer Name = Florian-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: audacity.exe, Version: 0.0.0.0, Zeitstempel:
 0x455814e4  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16385, Zeitstempel:
 0x4a5bdadb  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0002fc47  ID des fehlerhaften Prozesses:
 0x165c  Startzeit der fehlerhaften Anwendung: 0x01cafb26b391ebda  Pfad der fehlerhaften
 Anwendung: C:\Program Files\Audacity\audacity.exe  Pfad des fehlerhaften Moduls:
C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: fde13e3a-671a-11df-a19c-001e8c12810e
 
Error - 24.05.2010 09:02:04 | Computer Name = Florian-PC | Source = Bonjour Service | ID = 100
Description = 360: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.05.2010 09:02:04 | Computer Name = Florian-PC | Source = Bonjour Service | ID = 100
Description = 372: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.05.2010 09:02:04 | Computer Name = Florian-PC | Source = Bonjour Service | ID = 100
Description = 188: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.05.2010 09:02:04 | Computer Name = Florian-PC | Source = Bonjour Service | ID = 100
Description = 192: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.05.2010 09:02:04 | Computer Name = Florian-PC | Source = Bonjour Service | ID = 100
Description = 444: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
 vom Remotehost geschlossen.)
 
Error - 24.05.2010 09:35:27 | Computer Name = Florian-PC | Source = Application Hang | ID = 1002
Description = Programm wmplayer.exe, Version 12.0.7600.16415 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 838    Startzeit: 01cafb419fd9bae9    Endzeit: 47    Anwendungspfad:
C:\Program Files\Windows Media Player\wmplayer.exe    Berichts-ID: 34567925-6739-11df-a1f3-001e8c12810e

 
Error - 25.05.2010 01:18:07 | Computer Name = Florian-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: vlc.exe, Version: 1.0.5.0, Zeitstempel:
 0x4b64ae05  Name des fehlerhaften Moduls: vlc.exe, Version: 1.0.5.0, Zeitstempel:
 0x4b64ae05  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00001749  ID des fehlerhaften Prozesses:
 0x928  Startzeit der fehlerhaften Anwendung: 0x01cafbc9a501d428  Pfad der fehlerhaften
 Anwendung: C:\Program Files\VideoLAN\VLC\vlc.exe  Pfad des fehlerhaften Moduls: C:\Program
 Files\VideoLAN\VLC\vlc.exe  Berichtskennung: e65c905d-67bc-11df-939f-001e8c12810e
 
[ System Events ]
Error - 24.05.2010 23:08:50 | Computer Name = Florian-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  sfdrv01  sfvfs02
 
Error - 24.05.2010 23:14:59 | Computer Name = Florian-PC | Source = Application Popup | ID = 875
Description = Treiber sfvfs02.sys konnte nicht geladen werden.
 
Error - 24.05.2010 23:14:59 | Computer Name = Florian-PC | Source = Application Popup | ID = 875
Description = Treiber sfdrv01.sys konnte nicht geladen werden.
 
Error - 24.05.2010 23:15:16 | Computer Name = Florian-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?25.?05.?2010 um 05:14:16 unerwartet heruntergefahren.
 
Error - 24.05.2010 23:16:02 | Computer Name = Florian-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  sfdrv01  sfvfs02
 
Error - 24.05.2010 23:17:56 | Computer Name = Florian-PC | Source = Application Popup | ID = 875
Description = Treiber sfvfs02.sys konnte nicht geladen werden.
 
Error - 24.05.2010 23:17:56 | Computer Name = Florian-PC | Source = Application Popup | ID = 875
Description = Treiber sfdrv01.sys konnte nicht geladen werden.
 
Error - 24.05.2010 23:19:02 | Computer Name = Florian-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  sfdrv01  sfvfs02
 
Error - 25.05.2010 07:41:13 | Computer Name = Florian-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.
 
Error - 25.05.2010 08:46:48 | Computer Name = Florian-PC | Source = bowser | ID = 8003
Description =
 
 
< End of report >
[/I]


Es tut mir unendlich leid, dass ich 3 Beiträge hintereinander machen musste, aber vom Platz her hat es nicht gepasst :(

Hoffe das sind die richtigen Logs.

cosinus 25.05.2010 19:29
Zitat:
C:\Users\Florian\Desktop\Adobe.Photoshop.CS5.Extended.v12.0.Multilanguage\keygen.exe
Sorry, aber Du kannst formatieren! :nixda:

Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr.

Für Dich geht es hier weiter => Neuaufsetzen des Systems
Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken.

Danach nie wieder sowas anrühren!


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:25 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131