| kaese5128 | 26.03.2012 19:05 |
OTL Logfile: Code:
OTL logfile created on: 3/25/2012 12:13:19 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 115.03 Gb Total Space | 12.26 Gb Free Space | 10.66% Space Free | Partition Type: NTFS
Drive D: | 37.26 Gb Total Space | 8.11 Gb Free Space | 21.76% Space Free | Partition Type: NTFS
Drive E: | 232.88 Gb Total Space | 18.37 Gb Free Space | 7.89% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled] -- -- (HidServ)
SRV - [2011/10/09 10:02:32 | 000,055,144 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2011/07/08 19:11:35 | 000,269,480 | ---- | M] (Avira GmbH) [Disabled] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/05/25 03:25:59 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto] -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/05/05 06:54:42 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/05/07 13:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2010/05/04 06:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2009/08/18 05:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009/08/03 15:14:19 | 000,159,140 | RHS- | M] () [Auto] -- C:\WINXP\system32\wdexjmvx.dll -- (gehgri)
SRV - [2009/07/27 08:48:34 | 000,062,464 | ---- | M] () [Auto] -- C:\Programme\Silicon Image\SiI31xx HBA Wakeup Utility\SiHbaWakeupService.exe -- (SiHbaWakeupService)
SRV - [2007/07/12 10:30:42 | 000,257,024 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto] -- C:\WINXP\ATKKBService.exe -- (ATKKeyboardService)
SRV - [2005/04/03 18:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003/07/28 07:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | Auto] -- -- (SSPORT)
DRV - File not found [Kernel | On_Demand] -- -- (SetupNTGLM7X)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (NTACCESS)
DRV - File not found [Kernel | Auto] -- -- (Nsynas32)
DRV - File not found [Kernel | On_Demand] -- -- (MSICPL)
DRV - File not found [Kernel | On_Demand] -- -- (Monfilt)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] -- -- (GMSIPCI)
DRV - File not found [Kernel | Auto] -- -- (DgiVecp)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - File not found [Kernel | On_Demand] -- -- (Ambfilt)
DRV - [2012/03/20 07:40:21 | 000,004,096 | ---- | M] () [Kernel | On_Demand] -- C:\WINXP\system32\0302.tmp -- (qtotoioxs)
DRV - [2011/07/08 19:11:36 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINXP\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/12/18 07:03:56 | 000,021,696 | ---- | M] (Almico Software) [Kernel | Boot] -- C:\WINXP\system32\speedfan.sys -- (speedfan)
DRV - [2010/08/27 12:02:12 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\WINXP\system32\drivers\sptd.sys -- (sptd)
DRV - [2010/06/17 10:27:02 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINXP\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/05/14 18:04:02 | 006,842,592 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\lvuvc.sys -- (LVUVC) Logitech HD Webcam C510(UVC)
DRV - [2010/05/14 18:02:26 | 000,276,448 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2010/05/14 17:58:58 | 000,020,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\lvbusflt.sys -- (CompFilter)
DRV - [2010/05/07 13:43:30 | 000,025,824 | ---- | M] () [Kernel | On_Demand] -- C:\WINXP\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2010/02/24 06:22:10 | 000,185,472 | ---- | M] (Protect Software GmbH) [Kernel | Auto] -- C:\WINXP\system32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2009/12/15 04:52:40 | 000,109,408 | ---- | M] (LOUD Technologies, Inc.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\MackieAudio.sys -- (MackieAudio)
DRV - [2009/06/30 11:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\WINXP\system32\drivers\nvgts.sys -- (nvgts)
DRV - [2009/02/05 05:39:00 | 000,017,064 | R--- | M] (Silicon Image, Inc.) [Kernel | Boot] -- C:\WINXP\system32\drivers\SiWinAcc.sys -- (SiFilter)
DRV - [2009/02/05 05:39:00 | 000,012,200 | R--- | M] (Silicon Image, Inc.) [Kernel | Boot] -- C:\WINXP\system32\drivers\SiRemFil.sys -- (SiRemFil)
DRV - [2009/02/05 05:38:00 | 000,212,520 | R--- | M] (Silicon Image, Inc) [Kernel | Boot] -- C:\WINXP\system32\drivers\Si3531.sys -- (Si3531)
DRV - [2008/12/30 18:43:48 | 000,023,480 | ---- | M] (Wippien Software) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\wip0204.sys -- (wip0204)
DRV - [2008/04/14 05:00:00 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINXP\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/14 05:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINXP\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/04/14 05:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINXP\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2008/04/14 05:00:00 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\nmnt.sys -- (nm)
DRV - [2007/10/02 04:42:26 | 000,017,536 | ---- | M] () [Kernel | On_Demand] -- C:\WINXP\system32\drivers\OXUDIDRV_X32.sys -- (OXUDIDRV)
DRV - [2007/10/02 04:42:26 | 000,012,447 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System] -- C:\WINXP\system32\drivers\OxFWLF.sys -- (OxFWLF)
DRV - [2007/07/12 04:03:42 | 000,012,416 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\asusgsb.sys -- (asusgsb)
DRV - [2007/07/12 04:03:40 | 000,010,752 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\Video3D32.sys -- (Video3D)
DRV - [2007/07/12 04:03:38 | 000,012,288 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System] -- C:\WINXP\system32\drivers\EIO.sys -- (EIO)
DRV - [2007/07/12 04:03:38 | 000,011,136 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System] -- C:\WINXP\system32\drivers\atkkbnt.sys -- (asuskbnt)
DRV - [2006/12/21 04:26:00 | 004,405,248 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/10/13 09:49:40 | 000,019,968 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006/10/13 09:49:36 | 000,058,112 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006/07/07 15:30:48 | 000,092,288 | ---- | M] (CEntrance, Inc.) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\satmaud.sys -- (MOxSAudioSrv)
DRV - [2006/04/24 05:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\WINXP\system32\drivers\nvata.sys -- (nvata)
DRV - [2005/05/09 14:08:40 | 000,033,792 | ---- | M] (Team H2O) [Kernel | On_Demand] -- C:\WINXP\system32\drivers\cledx.sys -- (CLEDX)
DRV - [1996/04/03 15:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot] -- C:\WINXP\system32\giveio.sys -- (giveio)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=mp
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 76 08 F8 11 F1 45 CB 01 [binary data]
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\PhilippSch_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINXP\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Programme\DivX\DivX Plus Web Player\firefox\html5video [2011/03/21 04:07:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Programme\DivX\DivX Plus Web Player\firefox\wpa [2011/03/21 04:07:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\WINXP\system32\11003 [2012/03/25 03:55:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/03/25 03:45:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/10/03 08:11:07 | 000,000,000 | ---D | M]
[2012/03/25 03:45:26 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011/08/21 11:41:13 | 000,000,000 | ---D | M] (Click to call with Skype) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/03/25 03:45:22 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012/03/04 10:05:16 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2012/02/17 08:07:47 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/02/17 08:07:47 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/02/17 08:07:47 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/02/17 08:07:47 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/02/17 08:07:47 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/02/17 08:07:47 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2011/05/29 10:08:54 | 000,434,666 | R--- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 14958 more lines...
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {6764C5ED-CEE4-42ae-8F31-23F02A3A661F} - C:\WINXP\system32\AcroIEHelpe.dll ()
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINXP\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUSGamerOSD] File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [FILSHtray] C:\Programme\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
O4 - HKLM..\Run: [H2O] C:\Programme\Syncrosoft\POS\H2O\cledx.exe (Team H2O)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINXP\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINXP\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINXP\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [SiHBAWakeupUtility] File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Update] C:\WINXP\system32\0.747957916233397.exe ()
O4 - HKU\PhilippSch_ON_C..\Run: [DAEMON Tools Lite] C:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\PhilippSch_ON_C..\Run: [Facebook Update] C:\Dokumente und Einstellungen\PhilippSch\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\PhilippSch_ON_C..\Run: [ICQ] C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O4 - Startup: C:\Dokumente und Einstellungen\PhilippSch\Startmenü\Programme\Autostart\OpenOffice.org 3.3.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: 47548 = C:\DOKUME~1\ALLUSE~1\LOCALS~1\Temp\msdubmnax.cmd ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\PhilippSch_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\UpdatusUser_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINXP\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINXP\system32\appconf32.exe) - C:\WINXP\system32\appconf32.exe ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/08/27 09:33:01 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2002/02/19 04:10:58 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/03/25 03:55:12 | 000,000,000 | ---D | C] -- C:\WINXP\System32\11003
[2012/03/25 03:54:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\gizza
[2012/03/25 03:54:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Local Settings
[2012/03/25 03:54:54 | 000,000,000 | ---D | C] -- C:\WINXP\System32\xmldm
[2012/03/25 03:54:54 | 000,000,000 | ---D | C] -- C:\WINXP\System32\kock
[2012/03/11 16:00:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\Fler_Und_Silla_-_Suedberlin_Maskulin_2-DE-2012-YSP
[2012/03/08 14:39:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\Kay_One-Prince_of_Belvedair-Premium_Edition-DE-2012-VOiCE
[2012/03/07 09:21:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ICQ7.7
[2012/03/07 09:21:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\ICQ
[2012/03/07 09:21:11 | 000,000,000 | ---D | C] -- C:\Programme\ICQ7.7
[2012/03/06 12:35:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\Motrip - Embryo - Itunes Deluxe (2012) (320Kbits) - B_J
[2012/03/04 10:22:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\OpenOffice.org
[2012/03/04 10:06:47 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\OpenOffice.org 3.3
[2012/03/04 10:05:56 | 000,000,000 | ---D | C] -- C:\Programme\OpenOffice.org 3
[2012/03/04 10:05:45 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java
[2012/03/04 10:05:32 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaws.exe
[2012/03/04 10:05:32 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaw.exe
[2012/03/04 10:05:32 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\java.exe
[2012/03/04 10:05:32 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javacpl.cpl
[2012/03/04 10:02:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\OpenOffice.org 3.3 (de) Installation Files
[7 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
[1 C:\WINXP\*.tmp files -> C:\WINXP\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/03/25 04:34:16 | 000,001,038 | ---- | M] () -- C:\WINXP\tasks\FacebookUpdateTaskUserS-1-5-21-299502267-630328440-682003330-1003UA.job
[2012/03/25 04:17:53 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat
[2012/03/25 03:55:21 | 000,280,056 | ---- | M] () -- C:\WINXP\System32\AcroIEHelpe.dll
[2012/03/25 03:55:05 | 000,140,288 | ---- | M] () -- C:\WINXP\System32\0.747957916233397.exe
[2012/03/25 03:55:03 | 000,000,016 | ---- | M] () -- C:\WINXP\System32\blckdom.res
[2012/03/25 03:43:34 | 000,495,958 | ---- | M] () -- C:\WINXP\System32\perfh009.dat
[2012/03/25 03:43:33 | 000,519,760 | ---- | M] () -- C:\WINXP\System32\perfh007.dat
[2012/03/25 03:43:33 | 000,101,502 | ---- | M] () -- C:\WINXP\System32\perfc007.dat
[2012/03/25 03:43:33 | 000,084,442 | ---- | M] () -- C:\WINXP\System32\perfc009.dat
[2012/03/25 03:41:30 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2012/03/20 08:19:00 | 000,001,016 | ---- | M] () -- C:\WINXP\tasks\FacebookUpdateTaskUserS-1-5-21-299502267-630328440-682003330-1003Core.job
[2012/03/17 07:17:37 | 000,115,312 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\alfa.jpg
[2012/03/15 15:19:14 | 004,222,500 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##ALLAKTA.mp3
[2012/03/15 15:11:01 | 000,000,471 | ---- | M] () -- C:\WINXP\System32\Datei4
[2012/03/15 15:11:01 | 000,000,471 | ---- | M] () -- C:\WINXP\System32\Datei2
[2012/03/15 15:11:01 | 000,000,470 | ---- | M] () -- C:\WINXP\System32\Datei3
[2012/03/15 15:11:01 | 000,000,470 | ---- | M] () -- C:\WINXP\System32\Datei1
[2012/03/15 15:11:01 | 000,000,469 | ---- | M] () -- C:\WINXP\System32\Datei7
[2012/03/15 15:11:01 | 000,000,469 | ---- | M] () -- C:\WINXP\System32\Datei5
[2012/03/15 15:11:01 | 000,000,468 | ---- | M] () -- C:\WINXP\System32\Datei0
[2012/03/15 15:11:01 | 000,000,467 | ---- | M] () -- C:\WINXP\System32\Datei9
[2012/03/15 15:11:01 | 000,000,467 | ---- | M] () -- C:\WINXP\System32\Datei8
[2012/03/15 15:11:01 | 000,000,467 | ---- | M] () -- C:\WINXP\System32\Datei10
[2012/03/15 15:11:01 | 000,000,465 | ---- | M] () -- C:\WINXP\System32\Datei6
[2012/03/15 14:50:02 | 000,000,032 | ---- | M] () -- C:\WINXP\System32\w3data.vss
[2012/03/15 14:50:02 | 000,000,032 | ---- | M] () -- C:\WINXP\System32\msvcsv60.dll
[2012/03/15 14:50:02 | 000,000,032 | ---- | M] () -- C:\WINXP\msocreg32.dat
[2012/03/15 13:45:51 | 000,053,276 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\evi2.jpg
[2012/03/15 13:45:40 | 000,067,948 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\evi1.jpg
[2012/03/14 16:19:44 | 000,100,561 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\altezeiten.jpg
[2012/03/07 09:27:22 | 000,000,207 | -HS- | M] () -- C:\boot.ini
[2012/03/07 09:21:50 | 000,001,469 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\ICQ7.7.lnk
[2012/03/07 09:21:50 | 000,001,451 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7.7.lnk
[2012/03/07 09:21:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ICQ7.7
[2012/03/07 09:19:40 | 008,767,806 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##kallium.mp3
[2012/03/07 05:13:29 | 006,067,972 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\Akteneinsicht-4.pdf
[2012/03/05 10:42:54 | 008,116,894 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\Crizzma BeaT.mp3
[2012/03/04 14:42:16 | 000,175,464 | ---- | M] () -- C:\WINXP\System32\FNTCACHE.DAT
[2012/03/04 10:23:07 | 000,000,002 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Eigene Dateien\TempWmicBatchFile.bat
[2012/03/04 10:22:59 | 000,000,836 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Startmenü\Programme\Autostart\OpenOffice.org 3.3.lnk
[2012/03/04 10:07:06 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\OpenOffice.org 3.3
[2012/03/04 10:06:47 | 000,000,861 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\OpenOffice.org 3.3.lnk
[2012/03/04 10:05:15 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\deployJava1.dll
[2012/03/04 10:05:15 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaws.exe
[2012/03/04 10:05:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaw.exe
[2012/03/04 10:05:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\java.exe
[2012/03/04 10:05:15 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javacpl.cpl
[2012/02/27 09:25:23 | 002,562,157 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##exatavido.mp3
[2012/02/26 11:12:33 | 004,247,578 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##guitarhero.mp3
[2012/02/25 11:19:09 | 004,546,419 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##alltogether.mp3
[2012/02/25 09:28:16 | 004,188,019 | ---- | M] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\###atik.mp3
[7 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
[1 C:\WINXP\*.tmp files -> C:\WINXP\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/03/25 03:55:21 | 000,280,056 | ---- | C] () -- C:\WINXP\System32\AcroIEHelpe.dll
[2012/03/25 03:55:06 | 000,140,288 | ---- | C] () -- C:\WINXP\System32\0.747957916233397.exe
[2012/03/25 03:55:03 | 000,000,016 | ---- | C] () -- C:\WINXP\System32\blckdom.res
[2012/03/17 07:17:36 | 000,115,312 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\alfa.jpg
[2012/03/15 15:14:02 | 004,222,500 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##ALLAKTA.mp3
[2012/03/15 13:45:50 | 000,053,276 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\evi2.jpg
[2012/03/15 13:45:39 | 000,067,948 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\evi1.jpg
[2012/03/14 16:19:43 | 000,100,561 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\altezeiten.jpg
[2012/03/07 09:21:50 | 000,001,469 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\ICQ7.7.lnk
[2012/03/07 09:21:50 | 000,001,451 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7.7.lnk
[2012/03/06 11:35:08 | 008,767,806 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##kallium.mp3
[2012/03/05 10:42:14 | 008,116,894 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\Crizzma BeaT.mp3
[2012/03/04 10:23:07 | 000,000,002 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Eigene Dateien\TempWmicBatchFile.bat
[2012/03/04 10:22:59 | 000,000,836 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Startmenü\Programme\Autostart\OpenOffice.org 3.3.lnk
[2012/03/04 10:06:47 | 000,000,861 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\OpenOffice.org 3.3.lnk
[2012/02/27 09:25:04 | 002,562,157 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##exatavido.mp3
[2012/02/26 11:12:03 | 004,247,578 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##guitarhero.mp3
[2012/02/25 11:18:31 | 004,546,419 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\##alltogether.mp3
[2012/02/25 09:27:32 | 004,188,019 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Desktop\###atik.mp3
[2011/12/03 06:22:34 | 000,025,776 | -H-- | C] () -- C:\WINXP\System32\mlfcache.dat
[2011/08/18 10:04:51 | 000,000,032 | ---- | C] () -- C:\WINXP\System32\msvcsv60.dll
[2011/08/18 10:04:51 | 000,000,032 | ---- | C] () -- C:\WINXP\msocreg32.dat
[2011/07/10 14:46:56 | 000,000,664 | ---- | C] () -- C:\WINXP\System32\d3d9caps.dat
[2011/06/29 10:58:45 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\initdebug.nfo
[2011/06/29 08:10:04 | 002,123,582 | ---- | C] () -- C:\WINXP\System32\nvdata.data
[2011/06/26 08:22:14 | 000,179,920 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2011/06/24 06:36:27 | 000,000,018 | ---- | C] () -- C:\WINXP\avi2divx.INI
[2011/04/09 12:55:28 | 000,179,261 | ---- | C] () -- C:\WINXP\System32\xlive.dll.cat
[2011/03/27 08:13:34 | 000,017,536 | ---- | C] () -- C:\WINXP\System32\drivers\OXUDIDRV_X32.sys
[2011/01/09 13:29:49 | 000,000,394 | ---- | C] () -- C:\WINXP\ODBC.INI
[2010/12/25 16:11:24 | 000,139,152 | ---- | C] () -- C:\WINXP\System32\drivers\PnkBstrK.sys
[2010/12/25 16:11:20 | 000,189,248 | ---- | C] () -- C:\WINXP\System32\PnkBstrB.exe
[2010/12/25 16:11:12 | 000,075,136 | ---- | C] () -- C:\WINXP\System32\PnkBstrA.exe
[2010/10/04 12:09:12 | 001,970,176 | ---- | C] () -- C:\WINXP\System32\d3dx9.dll
[2010/09/20 12:44:47 | 000,165,376 | ---- | C] () -- C:\WINXP\System32\unrar.dll
[2010/09/20 12:44:47 | 000,000,038 | ---- | C] () -- C:\WINXP\avisplitter.ini
[2010/09/20 12:44:46 | 000,108,032 | ---- | C] () -- C:\WINXP\System32\ff_vfw.dll
[2010/09/12 07:02:05 | 000,000,754 | ---- | C] () -- C:\WINXP\WORDPAD.INI
[2010/09/06 13:45:44 | 000,036,864 | ---- | C] () -- C:\Dokumente und Einstellungen\PhilippSch\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/30 08:20:53 | 000,482,408 | ---- | C] () -- C:\WINXP\ssndii.exe
[2010/08/30 08:19:43 | 000,022,723 | ---- | C] () -- C:\WINXP\System32\cl31cl3.dll
[2010/08/29 09:33:07 | 000,273,344 | ---- | C] () -- C:\WINXP\System32\nvdrsdb0.bin
[2010/08/29 09:33:05 | 000,273,344 | ---- | C] () -- C:\WINXP\System32\nvdrsdb1.bin
[2010/08/29 09:33:05 | 000,000,001 | ---- | C] () -- C:\WINXP\System32\nvdrssel.bin
[2010/08/29 08:01:48 | 000,001,204 | ---- | C] () -- C:\WINXP\eReg.dat
[2010/08/27 12:20:00 | 000,000,056 | -H-- | C] () -- C:\WINXP\System32\ezsidmv.dat
[2010/08/27 11:41:35 | 000,192,600 | ---- | C] () -- C:\WINXP\System32\LoudAudioProp.dll
[2010/08/27 11:41:35 | 000,119,384 | ---- | C] () -- C:\WINXP\System32\MackieAsio.dll
[2010/08/27 11:13:22 | 000,643,142 | ---- | C] () -- C:\WINXP\aticlocklib.dll
[2010/08/27 11:13:22 | 000,110,592 | ---- | C] () -- C:\WINXP\R5ClkLib.dll
[2010/08/27 11:13:22 | 000,020,480 | ---- | C] () -- C:\WINXP\HyperDrive.exe
[2010/08/27 11:13:21 | 000,196,653 | ---- | C] () -- C:\WINXP\System32\drivers\aVivid.bin
[2010/08/27 11:13:21 | 000,196,608 | ---- | C] () -- C:\WINXP\System32\drivers\nVivid.bin
[2010/08/27 11:13:21 | 000,196,608 | ---- | C] () -- C:\WINXP\System32\drivers\nStandard.bin
[2010/08/27 11:13:21 | 000,196,608 | ---- | C] () -- C:\WINXP\System32\drivers\nAsmedia.bin
[2010/08/27 11:13:21 | 000,196,608 | ---- | C] () -- C:\WINXP\System32\drivers\nAdvanced.bin
[2010/08/27 11:13:21 | 000,196,608 | ---- | C] () -- C:\WINXP\System32\drivers\aAdvanced.bin
[2010/08/27 11:13:21 | 000,196,582 | ---- | C] () -- C:\WINXP\System32\drivers\aStandard.bin
[2010/08/27 11:13:21 | 000,196,582 | ---- | C] () -- C:\WINXP\System32\drivers\aAsmedia.bin
[2010/08/27 11:13:21 | 000,000,018 | ---- | C] () -- C:\WINXP\System32\atkid.ini
[2010/08/27 11:13:20 | 000,790,528 | ---- | C] () -- C:\WINXP\System32\xvidcore.dll
[2010/08/27 11:13:20 | 000,134,144 | ---- | C] () -- C:\WINXP\System32\xvidvfw.dll
[2010/08/27 11:13:20 | 000,046,592 | ---- | C] () -- C:\WINXP\System32\asfrench.dll
[2010/08/27 11:13:20 | 000,046,080 | ---- | C] () -- C:\WINXP\System32\asrussian.dll
[2010/08/27 11:13:20 | 000,046,080 | ---- | C] () -- C:\WINXP\System32\asgerman.dll
[2010/08/27 11:13:20 | 000,046,080 | ---- | C] () -- C:\WINXP\System32\aseng.dll
[2010/08/27 11:13:20 | 000,045,568 | ---- | C] () -- C:\WINXP\System32\askorean.dll
[2010/08/27 11:13:20 | 000,045,568 | ---- | C] () -- C:\WINXP\System32\asjapan.dll
[2010/08/27 11:13:20 | 000,045,568 | ---- | C] () -- C:\WINXP\System32\aschs.dll
[2010/08/27 11:13:19 | 000,045,568 | ---- | C] () -- C:\WINXP\System32\ASCHT.dll
[2010/08/27 11:09:14 | 000,049,152 | R--- | C] () -- C:\WINXP\System32\ChCfg.exe
[2010/08/27 11:08:12 | 000,001,548 | R--- | C] () -- C:\WINXP\System32\drivers\nvphy.bin
[2010/08/27 10:22:18 | 000,004,073 | ---- | C] () -- C:\WINXP\ODBCINST.INI
[2010/08/27 10:21:08 | 000,175,464 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT
[2010/08/27 10:19:21 | 000,000,000 | ---- | C] () -- C:\WINXP\nsreg.dat
[2010/08/27 09:35:19 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstat.dat
[2010/08/27 09:30:24 | 000,021,740 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat
[2010/05/14 17:56:06 | 010,830,680 | ---- | C] () -- C:\WINXP\System32\LogiDPP.dll
[2010/05/14 17:56:06 | 000,102,744 | ---- | C] () -- C:\WINXP\System32\LogiDPPApp.exe
[2010/05/14 17:55:58 | 000,290,648 | ---- | C] () -- C:\WINXP\System32\DevManagerCore.dll
[2010/05/14 17:47:00 | 000,090,071 | ---- | C] () -- C:\WINXP\System32\lvcoinst.ini
[2010/05/07 13:46:36 | 000,014,168 | ---- | C] () -- C:\WINXP\System32\drivers\iKeyLFT2.dll
[2010/05/07 13:43:30 | 000,025,824 | ---- | C] () -- C:\WINXP\System32\drivers\LVPr2Mon.sys
[2010/01/11 03:24:40 | 000,001,683 | ---- | C] () -- C:\WINXP\System32\oeminfo.ini
[2009/08/03 15:14:19 | 000,159,140 | RHS- | C] () -- C:\WINXP\System32\wdexjmvx.dll
[2008/12/09 11:23:13 | 000,053,248 | RHS- | C] () -- C:\WINXP\System32\appconf32.exe
[2008/04/14 05:00:00 | 013,107,200 | ---- | C] () -- C:\WINXP\System32\oembios.bin
[2008/04/14 05:00:00 | 000,673,088 | ---- | C] () -- C:\WINXP\System32\mlang.dat
[2008/04/14 05:00:00 | 000,519,760 | ---- | C] () -- C:\WINXP\System32\perfh007.dat
[2008/04/14 05:00:00 | 000,495,958 | ---- | C] () -- C:\WINXP\System32\perfh009.dat
[2008/04/14 05:00:00 | 000,272,128 | ---- | C] () -- C:\WINXP\System32\perfi009.dat
[2008/04/14 05:00:00 | 000,269,480 | ---- | C] () -- C:\WINXP\System32\perfi007.dat
[2008/04/14 05:00:00 | 000,218,003 | ---- | C] () -- C:\WINXP\System32\dssec.dat
[2008/04/14 05:00:00 | 000,101,502 | ---- | C] () -- C:\WINXP\System32\perfc007.dat
[2008/04/14 05:00:00 | 000,084,442 | ---- | C] () -- C:\WINXP\System32\perfc009.dat
[2008/04/14 05:00:00 | 000,046,258 | ---- | C] () -- C:\WINXP\System32\mib.bin
[2008/04/14 05:00:00 | 000,034,478 | ---- | C] () -- C:\WINXP\System32\perfd007.dat
[2008/04/14 05:00:00 | 000,028,626 | ---- | C] () -- C:\WINXP\System32\perfd009.dat
[2008/04/14 05:00:00 | 000,004,569 | ---- | C] () -- C:\WINXP\System32\secupd.dat
[2008/04/14 05:00:00 | 000,004,463 | ---- | C] () -- C:\WINXP\System32\oembios.dat
[2008/04/14 05:00:00 | 000,001,804 | ---- | C] () -- C:\WINXP\System32\Dcache.bin
[2008/04/14 05:00:00 | 000,000,741 | ---- | C] () -- C:\WINXP\System32\noise.dat
[2007/09/16 13:07:00 | 000,286,720 | ---- | C] () -- C:\WINXP\System32\nvnt4cpl.dll
[2007/01/25 20:04:12 | 000,138,752 | ---- | C] () -- C:\WINXP\System32\mase32.dll
[2007/01/25 20:04:12 | 000,027,648 | ---- | C] () -- C:\WINXP\System32\ma32.dll
[2004/02/26 15:03:58 | 000,320,000 | ---- | C] () -- C:\WINXP\System32\Reg.dll
[2003/02/20 12:53:42 | 000,005,702 | ---- | C] () -- C:\WINXP\System32\OUTLPERF.INI
[1996/04/03 15:33:26 | 000,005,248 | ---- | C] () -- C:\WINXP\System32\giveio.sys
========== LOP Check ==========
[2011/08/25 08:34:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\4Front
[2010/08/29 07:45:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\DAEMON Tools Lite
[2011/03/21 04:08:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\DDMSettings
[2010/08/30 13:31:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\DVDVideoSoftIEHelpers
[2012/03/25 03:58:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\gizza
[2011/06/17 12:36:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\go
[2012/03/20 07:45:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\ICQ
[2010/11/21 17:36:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\KORG
[2010/09/02 14:37:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Language
[2010/12/17 11:43:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Leadertech
[2010/09/27 06:54:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Need for Speed World
[2012/03/04 10:22:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\OpenOffice.org
[2010/11/08 11:56:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\ProtectDISC
[2011/03/26 19:49:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\PunkBuster
[2010/08/29 07:23:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Steinberg
[2011/08/21 13:59:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\TeamViewer
[2011/12/03 06:38:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Thinstall
[2011/03/26 19:56:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Ubisoft
[2010/09/02 14:37:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\PhilippSch\Anwendungsdaten\Wippien
[2011/08/25 08:31:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\4Front
[2011/01/15 14:55:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CdCoverCreator
[2010/08/27 12:02:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2010/10/14 21:45:40 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DSS
[2010/11/17 14:17:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\EA Core
[2011/06/17 14:04:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Easybits GO
[2010/11/17 14:17:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Electronic Arts
[2010/11/21 17:35:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\KORG
[2010/08/27 11:53:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!
[2010/12/04 11:03:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Pinnacle
[2010/12/04 11:04:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Pinnacle VideoSpin
[2011/03/26 19:56:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ubisoft
[2011/10/03 08:11:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/03/20 08:19:00 | 000,001,016 | ---- | M] () -- C:\WINXP\Tasks\FacebookUpdateTaskUserS-1-5-21-299502267-630328440-682003330-1003Core.job
[2012/03/25 04:34:16 | 000,001,038 | ---- | M] () -- C:\WINXP\Tasks\FacebookUpdateTaskUserS-1-5-21-299502267-630328440-682003330-1003UA.job
========== Purity Check ==========
< End of report >
--- --- ---
[/CODE]
Ich bin jetzt wieder ganz normal in Windows. Ist der Trojaner jetzt restlos beseitigt oder empfiehlt sich ein Virenscan? Wenn ja, welches Programm eignet sich am besten?
Vielen Dank schon jetzt einmal !!!
P.S. Der Upload der Movedfiles war erfolgreich ! |
