Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Mein Mausrad dreht sich andauernd, außerdem browser hat lange ladezeiten (https://www.trojaner-board.de/126358-mausrad-dreht-andauernd-ausserdem-browser-hat-lange-ladezeiten.html)

schneemensch 01.11.2012 02:44
Mein Mausrad dreht sich andauernd, außerdem browser hat lange ladezeiten
 
Hallo

Seit 2 Wochen funkioniert mein Lappi nicht mehr wie Früher. Vor Kurzem habe ich es mit Norton probiert, aber es hat sich nichts geändert und es fand auch keine Bedrohungen. Andauernd dreht sich rechts an der Maus das runde Sympol, obwohl ich keine Anwendung öffne oder irgendetwas mache. Es dreht sich immer weiter und hört Nie auf. Danke im Voraus.

kira 01.11.2012 06:54
Hallo und Herzlich Willkommen! :)

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du durch [X] oder Sternchen (*) ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen:)
► Hilfeleistung - geplante Vorgehensweise:
  • Problemsuche
  • Problembeseitigung/Systembereinigung
  • Verwendete Programme deinstallieren/entfernen
  • Thema abschließen: Tipps zur Computersicherheit

Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.
Lade Dir Malwarebytes Anti-Malware Lade Dir Malwarebytes Anti-Malware → von hier herunter
  • Installieren und per Doppelklick starten.
  • Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
  • "Komplett Scan durchführen" wählen (überall Haken setzen)
  • wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
  • Alle Funde - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
  • Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"
eine bebilderte Anleitung findest Du hier: Anleitung

2.
Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Mache Häckchen bei LOP- und Purity-Prüfung
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt - OTL.txt und Extras.txt
  • Poste die Logfiles in Code-Tags hier in den Thread.

3.
Um festzustellen, ob veraltete oder schädliche Software unter Programme installiert sind, ich würde gerne noch all deine installierten Programme sehen:
  • Download den CCleaner herunter
  • Software-Lizenzvereinbarung lesen, falls irgendeine Toolbar angeboten wird, bitte abwählen!-> starten -> Falls nötig, auf "Deutsch" einstellen.
  • starten-> klick auf `Extras` (um auf deinem System installierte Software zu anzeigen)-> dann auf `Als Textdatei speichern...`
  • ein Textdatei wird automatisch erstellt, poste auch dieses Logfile (also die Liste alle installierten Programme...eine Textdatei)

► Wenn Du nun alle Schritte erledigt hast, melde dich mit die gewünschten Ergebnisse zurück!
Nur bei Probleme inzwischen melden!

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles, die Du posten möchtest)[code]
hier kommt dein Logfile rein - z.B OTL-Logfile o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
gruß
kira

schneemensch 05.11.2012 19:56
Anti Malware hat keine Bedrohungen feststellen können

Code:
OTL logfile created on: 04.11.2012 10:41:07 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Danilo\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,97 Gb Total Physical Memory | 3,46 Gb Available Physical Memory | 58,03% Memory free
11,93 Gb Paging File | 8,91 Gb Available in Paging File | 74,65% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232,79 Gb Total Space | 176,08 Gb Free Space | 75,64% Space Free | Partition Type: NTFS
 
Computer Name: DANILO-PC | User Name: Danilo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Danilo\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\ccSvcHst.exe (Symantec Corporation)
PRC - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe ()
PRC - C:\Program Files (x86)\Easy Hot Key\EHK.exe (StraightSoft)
PRC - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung)
PRC - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe (Samsung Electronics)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\FreePDF_XP\fpassist.exe (shbox.de)
PRC - C:\Windows\SysWOW64\schtasks.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll ()
MOD - C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll ()
MOD - C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\26e0457a9776a0e9f23e3986686d90a5\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b68bee05c7e518172982cc92059c3315\System.Xaml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d239f585ee55f833dbe21e897e1265ac\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b7de318e9fd1ef519ca6c1f3b5dba8e0\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a6e37a05b8d0cedbc5c3ea266ae3fc31\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\09bd2126bba2ab4f29ed52afde1470d7\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9abe44a0f82070ead5f1256683a4d25a\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\a84262e1224189f93e10cd3c403a9527\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\a6be120e49f895ef6b00e9918402395b\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c1af4ec9a36f671617a8ecaec00373f4\mscorlib.ni.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll ()
MOD - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe ()
MOD - c:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\pdf.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\libglesv2.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\libegl.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\avutil-51.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\avformat-54.dll ()
MOD - C:\Users\Danilo\AppData\Local\Google\Chrome\Application\22.0.1229.94\avcodec-54.dll ()
MOD - c:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
MOD - C:\PROGRAM FILES (X86)\NORTON 360\ENGINE\20.2.0.19\wincfi39.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (N360) -- C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\ccSvcHst.exe (Symantec Corporation)
SRV - (Browser Manager) -- C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe ()
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symefa64.sys (Symantec Corporation)
DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symds64.sys (Symantec Corporation)
DRV:64bit: - (ccSet_N360) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\ccsetx64.sys (Symantec Corporation)
DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (SymNetS) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symnets.sys (Symantec Corporation)
DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\ironx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (SFEP) -- C:\Windows\SysNative\drivers\SFEP.sys (Sony Corporation)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\Definitions\VirusDefs\20121103.005\ex64.sys (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\Definitions\VirusDefs\20121103.005\eng64.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\Definitions\IPSDefs\20121102.001\IDSviA64.sys (Symantec Corporation)
DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\Definitions\BASHDefs\20121005.002\BHDrvx64.sys (Symantec Corporation)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3912_1&babsrc=HP_ss&mntrId=10dc7355000000000000002643ab61ec
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3912_1&babsrc=HP_ss&mntrId=10dc7355000000000000002643ab61ec
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 98 0C CB 56 41 94 CD 01  [binary data]
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110823&tt=120912_pcp_3912_1&babsrc=SP_ss&mntrId=10dc7355000000000000002643ab61ec
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..CT2736476.browser.search.defaultthis.engineName: true
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3912_1&babsrc=HP_ss&mntrId=10dc7355000000000000002643ab61ec"
FF - prefs.js..extensions.enabledAddons: compatibility@addons.mozilla.org:1.1
FF - prefs.js..extensions.enabledAddons: iweb2x@sciweavers.org:1.0
FF - prefs.js..extensions.enabledAddons: webHighlighter@diigo.com:1.1.0.8
FF - prefs.js..extensions.enabledAddons: {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.2
FF - prefs.js..extensions.enabledAddons: {5755466A-DB04-11DA-A2DD-0E545D5EE2F7}:0.8
FF - prefs.js..extensions.enabledAddons: {800b5000-a755-47e1-992b-48a1c1357f07}:1.5.3
FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.5.0
FF - prefs.js..extensions.enabledAddons: {b64982b1-d112-42b5-b1e4-d3867c4533f8}:2.2.643.41
FF - prefs.js..extensions.enabledAddons: {7e111a5c-3d11-4f56-9463-5310c3c69025}:10.10.27.6
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Search the web (Babylon)"
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Danilo\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Danilo\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\IPSFFPlgn\ [2012.10.25 02:36:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\coFFPlgn\ [2012.11.04 00:07:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.27 05:30:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.10.30 02:52:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012.10.10 20:49:04 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.27 05:30:59 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2012.04.28 12:41:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Danilo\AppData\Roaming\mozilla\Extensions
[2012.04.28 12:41:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Danilo\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.10.28 05:27:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Danilo\AppData\Roaming\mozilla\Firefox\Profiles\07dkdt0u.default\extensions
[2012.04.28 13:35:56 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Danilo\AppData\Roaming\mozilla\Firefox\Profiles\07dkdt0u.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2012.07.28 18:37:08 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Danilo\AppData\Roaming\mozilla\Firefox\Profiles\07dkdt0u.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.04.28 13:35:56 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Danilo\AppData\Roaming\mozilla\Firefox\Profiles\07dkdt0u.default\extensions\firefox@tvunetworks.com
[2012.09.26 23:37:02 | 000,002,223 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\BabylonMngr.xml
[2012.09.28 15:06:58 | 000,000,945 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\conduit.xml
[2012.10.28 04:26:26 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-1.xml
[2012.09.26 23:37:08 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-10.xml
[2012.10.25 23:17:19 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-11.xml
[2012.10.26 16:36:55 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-12.xml
[2012.10.27 19:23:41 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-13.xml
[2012.10.27 19:33:34 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-14.xml
[2012.02.19 12:03:18 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-2.xml
[2012.02.21 17:00:44 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-3.xml
[2012.05.06 11:16:15 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-4.xml
[2012.06.11 16:56:43 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-5.xml
[2012.06.20 09:27:48 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-6.xml
[2012.08.01 12:51:52 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-7.xml
[2012.09.01 20:53:24 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-8.xml
[2012.09.07 20:34:35 | 000,000,950 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin-9.xml
[2012.07.24 13:48:30 | 000,000,168 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin.gif
[2012.07.24 13:48:30 | 000,000,618 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin.src
[2012.02.09 18:38:38 | 000,001,056 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\icqplugin.xml
[2012.10.25 23:36:29 | 000,002,471 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\mozilla\firefox\profiles\07dkdt0u.default\searchplugins\safesearch.xml
[2012.10.27 05:30:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.11.04 00:07:30 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\COFFPLGN
[2012.10.25 02:36:35 | 000,000,000 | ---D | M] (Norton Vulnerability Protection) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\IPSFFPLGN
[2012.10.27 05:30:59 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.08.01 12:51:40 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.26 23:36:39 | 000,002,360 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012.09.01 20:52:23 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.08.01 12:51:40 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.08.01 12:51:40 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.08.01 12:51:40 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.08.01 12:51:40 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - homepage: hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3912_1&babsrc=HP_ss&mntrId=10dc7355000000000000002643ab61ec
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage: hxxp://www.google.com/
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhaoojkpcgaobmnnphdpdokcgdiibblh\0.1.8_0\
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhabjpofjblpelkgmllkpcnlhgjpebko\1.0_0\
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.2.0.18_0\
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\
CHR - Extension: No name found = C:\Users\Danilo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.2.0.19\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O4 - HKLM..\Run: [FreePDF Assistant] C:\Program Files (x86)\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKCU..\Run: [EHK] C:\Program Files (x86)\Easy Hot Key\EHK.exe (StraightSoft)
O4 - HKCU..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe (Samsung Electronics)
O4 - HKCU..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\Danilo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000 File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.69.103.78 80.69.100.102
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FAF0C87A-3BCB-4DC1-A421-847749970DC6}: DhcpNameServer = 80.69.103.78 80.69.100.102
O18:64bit: - Protocol\Handler\cdo - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20 - AppInit_DLLs: (c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{6f0c3e92-911a-11e1-8eab-002643ab61ec}\Shell - "" = AutoRun
O33 - MountPoints2\{6f0c3e92-911a-11e1-8eab-002643ab61ec}\Shell\AutoRun\command - "" = "E:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.11.04 10:32:06 | 000,000,000 | ---D | C] -- C:\Users\Danilo\AppData\Roaming\Malwarebytes
[2012.11.04 10:31:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.11.04 10:31:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.11.04 10:30:59 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.11.04 10:30:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.10.30 02:52:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2012.10.30 02:44:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
[2012.10.28 18:42:09 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012.10.28 18:42:09 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2012.10.28 18:42:09 | 000,095,208 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2012.10.27 05:30:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.10.26 04:30:17 | 001,133,216 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symefa64.sys
[2012.10.26 04:30:17 | 000,432,800 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symnets.sys
[2012.10.26 04:30:17 | 000,023,448 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symelam.sys
[2012.10.26 04:30:16 | 000,776,864 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.sys
[2012.10.26 04:30:16 | 000,493,216 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symds64.sys
[2012.10.26 04:30:16 | 000,224,416 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\ironx64.sys
[2012.10.26 04:30:16 | 000,168,096 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\ccsetx64.sys
[2012.10.26 04:30:16 | 000,037,496 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtspx64.sys
[2012.10.26 04:29:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\N360x64\1402000.013
[2012.10.25 03:20:09 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\N360_BACKUP
[2012.10.25 02:42:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Symantec Shared
[2012.10.25 02:37:56 | 000,000,000 | ---D | C] -- C:\Users\Danilo\Documents\Symantec
[2012.10.25 02:35:37 | 000,177,312 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012.10.25 02:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2012.10.25 02:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2012.10.25 02:34:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\N360x64
[2012.10.25 02:34:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton 360
[2012.10.25 02:34:14 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
[2012.10.25 02:33:54 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2012.10.25 02:33:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2012.10.25 02:31:51 | 000,000,000 | ---D | C] -- C:\Users\Danilo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
[2012.10.25 02:31:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2012.10.17 16:37:20 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.10.17 00:31:49 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.10.17 00:31:49 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.10.11 02:01:43 | 000,000,000 | ---D | C] -- C:\Temp
[2012.10.11 01:59:51 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\NativeFus_Log
[2012.10.11 01:59:51 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CrashDump
[2012.10.11 01:59:44 | 000,000,000 | ---D | C] -- C:\Users\Danilo\AppData\Local\Samsung
[2012.10.11 01:59:42 | 000,000,000 | ---D | C] -- C:\Users\Danilo\AppData\Roaming\Samsung
[2012.10.11 01:59:38 | 000,000,000 | ---D | C] -- C:\Users\Danilo\Documents\samsung
[2012.10.11 01:57:59 | 000,203,104 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudmdm.sys
[2012.10.11 01:57:59 | 000,102,368 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudbus.sys
[2012.10.11 01:56:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2012.10.11 01:56:52 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2012.10.11 01:56:38 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\Windows\SysWow64\dgderapi.dll
[2012.10.11 01:56:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MarkAny
[2012.10.11 01:56:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2012.10.11 01:56:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2012.10.11 01:56:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung
[2012.10.11 01:51:08 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.10.10 14:54:40 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012.10.10 14:54:39 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012.10.10 14:54:39 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012.10.10 14:54:33 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2012.10.10 14:54:33 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2012.10.10 14:54:33 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2012.10.10 14:54:33 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2012.10.10 14:54:32 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2012.10.10 14:54:32 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2012.10.10 14:54:30 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2012.10.10 14:54:30 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2012.10.10 14:54:29 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2012.10.10 14:54:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2012.10.10 14:54:29 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2012.10.10 14:54:29 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2012.10.10 14:54:29 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2012.10.10 14:54:29 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2012.10.10 14:54:29 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2012.10.10 14:54:29 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2012.10.10 14:54:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2012.10.10 14:54:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2012.10.10 14:54:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2012.10.10 14:54:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2012.10.10 14:54:16 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2012.10.10 14:54:01 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012.10.10 14:54:00 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012.10.06 01:17:45 | 000,000,000 | ---D | C] -- C:\Users\Danilo\Desktop\AKTUELLE VERKÄUFE
[2012.10.06 01:16:37 | 000,000,000 | ---D | C] -- C:\Users\Danilo\Desktop\Privates
[2012.10.06 01:15:30 | 000,000,000 | ---D | C] -- C:\Users\Danilo\Desktop\Vorgefertigte Texte
 
========== Files - Modified Within 30 Days ==========
 
[2012.11.04 10:31:03 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.11.04 10:19:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.11.04 10:03:10 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-161721777-1756742911-2666013365-1000UA.job
[2012.11.04 09:11:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.04 02:03:01 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-161721777-1756742911-2666013365-1000Core.job
[2012.11.04 00:13:39 | 000,015,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.04 00:13:39 | 000,015,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.04 00:12:54 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.11.04 00:12:54 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.11.04 00:12:54 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.04 00:12:54 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.11.04 00:12:54 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.11.04 00:05:33 | 510,935,039 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.02 07:25:06 | 000,000,600 | ---- | M] () -- C:\Users\Danilo\AppData\Roaming\winscp.rnd
[2012.11.01 02:46:18 | 000,007,609 | ---- | M] () -- C:\Users\Danilo\AppData\Local\Resmon.ResmonCfg
[2012.10.30 02:52:34 | 000,002,086 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012.10.30 02:44:45 | 000,001,027 | ---- | M] () -- C:\Users\Public\Desktop\MozBackup.lnk
[2012.10.28 05:25:23 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.10.28 05:25:23 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.10.26 16:32:51 | 001,813,719 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\Cat.DB
[2012.10.26 16:32:15 | 000,010,074 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\VT20121008.022
[2012.10.25 02:35:37 | 000,177,312 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012.10.25 02:35:37 | 000,007,466 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012.10.25 02:35:37 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012.10.25 02:31:52 | 000,001,295 | ---- | M] () -- C:\Users\Danilo\Desktop\Norton-Installationsdateien.lnk
[2012.10.19 13:10:00 | 000,000,172 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\isolate.ini
[2012.10.11 03:25:22 | 000,007,605 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtspx64.cat
[2012.10.11 03:25:22 | 000,007,601 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.cat
[2012.10.11 03:25:22 | 000,001,418 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtspx64.inf
[2012.10.11 01:41:16 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.10.09 02:52:50 | 000,007,597 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symds64.cat
[2012.10.09 02:52:47 | 000,007,603 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symefa64.cat
[2012.10.09 02:00:02 | 000,776,864 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.sys
[2012.10.09 02:00:02 | 000,001,437 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.inf
[2012.10.08 23:15:55 | 000,001,211 | ---- | M] () -- C:\Users\Danilo\Desktop\Downloads - Verknüpfung.lnk
 
========== Files Created - No Company Name ==========
 
[2012.11.04 10:31:03 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.11.01 02:46:18 | 000,007,609 | ---- | C] () -- C:\Users\Danilo\AppData\Local\Resmon.ResmonCfg
[2012.10.30 02:52:33 | 000,002,086 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012.10.30 02:52:31 | 000,002,098 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2012.10.30 02:44:45 | 000,001,027 | ---- | C] () -- C:\Users\Public\Desktop\MozBackup.lnk
[2012.10.26 16:32:15 | 001,813,719 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\Cat.DB
[2012.10.26 16:32:15 | 000,010,074 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\VT20121008.022
[2012.10.26 04:30:17 | 000,009,670 | R--- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symelam64.cat
[2012.10.26 04:30:17 | 000,007,603 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symefa64.cat
[2012.10.26 04:30:17 | 000,007,601 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symnet64.cat
[2012.10.26 04:30:17 | 000,003,433 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symefa.inf
[2012.10.26 04:30:17 | 000,001,440 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symnet.inf
[2012.10.26 04:30:17 | 000,000,996 | R--- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symelam.inf
[2012.10.26 04:30:16 | 000,007,611 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\ccsetx64.cat
[2012.10.26 04:30:16 | 000,007,605 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtspx64.cat
[2012.10.26 04:30:16 | 000,007,601 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.cat
[2012.10.26 04:30:16 | 000,007,597 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symds64.cat
[2012.10.26 04:30:16 | 000,007,593 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\iron.cat
[2012.10.26 04:30:16 | 000,002,851 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symds.inf
[2012.10.26 04:30:16 | 000,001,437 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtsp64.inf
[2012.10.26 04:30:16 | 000,001,418 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\srtspx64.inf
[2012.10.26 04:30:16 | 000,000,853 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\ccsetx64.inf
[2012.10.26 04:30:16 | 000,000,767 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\iron.inf
[2012.10.26 04:29:41 | 000,009,103 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\symvtcer.dat
[2012.10.26 04:29:41 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\N360x64\1402000.013\isolate.ini
[2012.10.25 02:35:37 | 000,007,466 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012.10.25 02:35:37 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012.10.25 02:31:51 | 000,001,295 | ---- | C] () -- C:\Users\Danilo\Desktop\Norton-Installationsdateien.lnk
[2012.10.11 01:41:16 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.10.08 23:15:55 | 000,001,211 | ---- | C] () -- C:\Users\Danilo\Desktop\Downloads - Verknüpfung.lnk
[2012.09.26 19:57:16 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012.09.26 19:57:14 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012.09.26 19:57:14 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012.09.26 19:57:14 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012.09.26 19:57:14 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012.04.28 15:11:26 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2012.04.28 12:44:02 | 000,000,600 | ---- | C] () -- C:\Users\Danilo\AppData\Roaming\winscp.rnd
[2012.04.28 10:49:56 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.05.30 12:53:22 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\.minecraft
[2012.07.27 02:20:40 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\Ashampoo
[2012.11.02 10:28:27 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\BayOrganizer
[2012.07.27 02:17:21 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\Canneverbe Limited
[2012.11.04 00:06:05 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\Easy Hot Key
[2012.05.06 23:31:54 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\FreePDF
[2012.05.06 23:23:25 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\PDFCreator
[2012.05.06 23:20:34 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\pdfforge
[2012.10.11 01:59:42 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\Samsung
[2012.09.27 00:21:22 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\ShortCut
[2012.04.28 12:41:50 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\Thunderbird
[2012.08.26 11:48:33 | 000,000,000 | ---D | M] -- C:\Users\Danilo\AppData\Roaming\TS3Client
 
========== Purity Check ==========
 
 

< End of report >
Code:
OTL Extras logfile created on: 04.11.2012 10:41:07 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Danilo\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,97 Gb Total Physical Memory | 3,46 Gb Available Physical Memory | 58,03% Memory free
11,93 Gb Paging File | 8,91 Gb Available in Paging File | 74,65% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232,79 Gb Total Space | 176,08 Gb Free Space | 75,64% Space Free | Partition Type: NTFS
 
Computer Name: DANILO-PC | User Name: Danilo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08BAC7CF-4651-468C-8316-D81F6CD65BCC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{13DBC219-7A39-42BC-95FF-B6F3B85BA6D7}" = lport=2869 | protocol=6 | dir=in | app=system |
"{23CE4AAF-74C6-4C59-B4B4-344ABFF91570}" = rport=138 | protocol=17 | dir=out | app=system |
"{27EE31A6-3E17-4584-B016-1AF8E1FBB694}" = lport=10243 | protocol=6 | dir=in | app=system |
"{3AE68E20-735D-4DAE-9803-D74E427EB4FF}" = lport=138 | protocol=17 | dir=in | app=system |
"{5839C50C-CB94-4E98-920F-11B12C832863}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5A317FD8-DDA1-4621-96D7-5306F88763DA}" = rport=10243 | protocol=6 | dir=out | app=system |
"{5ED2458E-3FE2-4CE9-86FE-B9B42B826EEA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{6E567F78-9CCA-447C-996C-11BC51B9AAEA}" = lport=137 | protocol=17 | dir=in | app=system |
"{7964892D-0448-4BE5-9958-3D2881A5A8F4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{80533E89-E032-4491-9E08-39D8FC4964CB}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{811C81E8-E99D-47B1-8FA5-BAE812110AE6}" = lport=139 | protocol=6 | dir=in | app=system |
"{8A457F42-42A5-4700-80FD-2D3734512069}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{92EF5E2C-34C0-475A-9354-161620B0CC00}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9857522B-4562-42A3-93FC-60A15964243E}" = rport=139 | protocol=6 | dir=out | app=system |
"{9DDBFB82-9D21-4C06-B40F-9BE4ADBFE917}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9ED2F564-7D82-4F37-AFA1-26C9ACBA63C0}" = lport=445 | protocol=6 | dir=in | app=system |
"{A13A72BC-CFEE-48C8-AE5B-F1031B3AA46C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C8CC9571-FD69-47E5-A8AF-AFEA14F05C07}" = rport=445 | protocol=6 | dir=out | app=system |
"{E39FC8D2-0D47-410F-8A9D-7A323184E97A}" = rport=137 | protocol=17 | dir=out | app=system |
"{E85C1729-35FA-4746-804B-5C5B21DB102E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07800CFC-822E-4121-B52A-49DB6EF9A6EA}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{09CDA4E5-4B40-48F1-B844-F1E703B4FEAB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{131E441D-08FC-4961-8C2E-B61AA9928B55}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1A1C6BA1-3762-4D9C-B1F7-E535DD7E84D1}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{1D408AC6-0185-4232-995A-7ACA60CEB136}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{30471395-7B52-4B1C-8E27-4B31249BFB1C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{377FBA83-466F-4B90-B0E0-D776123B3547}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{40B94889-A883-4A5B-8E20-5EFCF84D1E92}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{585D76EC-96EC-4375-8CC8-7296CEDD05F4}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{61AD895D-5C03-45D9-9C74-E5455F57AC36}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{62FC04BE-AA4B-4AFC-8A7C-A3C3E95C6BF4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{72872FD1-F358-4159-AB49-FF5A02988CCA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{7DB73032-1B64-4858-941C-8797D567A34D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{85FE6ECF-6C7B-44D3-8A4D-9324FCD530A6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8C40E692-4200-4534-B188-77368B0A5DED}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9275D385-833D-4BE3-86D5-6EA279A02C5B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9A7C0E72-3C30-41A1-A7E1-D32D8F297CD0}" = protocol=6 | dir=in | app=c:\program files (x86)\webcam 7\wservice.exe |
"{B11AC8E0-8E15-4BBF-9F52-706EBCB3F88C}" = protocol=6 | dir=out | app=system |
"{BA041586-F406-41F7-9250-30B3453215B2}" = protocol=6 | dir=in | app=c:\program files (x86)\webcam 7\wlite.exe |
"{BEF57B6E-1601-4998-B033-04465A67A445}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{D3F46556-F803-45DE-83F0-B6430DDFEA0C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{D45B1259-2EC9-4543-BAC1-71AE6BB7BFE0}" = protocol=17 | dir=in | app=c:\program files (x86)\webcam 7\wlite.exe |
"{D8BCB15B-0326-4546-9D97-CE24E6E13918}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{E74FE9E0-6741-42E7-8EB2-C167B87B5F99}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EF033892-F8D3-4C0D-AC20-A1E2B2F22C13}" = protocol=17 | dir=in | app=c:\program files (x86)\webcam 7\wservice.exe |
"{FDE88B67-86B3-4FA4-8540-9528F19DF5D8}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"TCP Query User{DEBD7B48-51C8-4A86-B7D4-7D158C58AE0B}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{71F46572-285F-40B8-AE80-09F19AAE47E6}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Redirection Port Monitor" = RedMon - Redirection Port Monitor
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}" = Browser Manager
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 9
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8927E07C-97F7-4A54-88FB-D976F50DD46E}" = Turbo Lister 2
"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer
"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0
"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Ashampoo Burning Studio 2012_is1" = Ashampoo Burning Studio 2012 v.10.0.15
"BayOrganizer_is1" = BayOrganizer - Deinstallation
"Easy Hot Key" = Easy Hot Key
"FreePDF_XP" = FreePDF (Remove only)
"GPL Ghostscript 9.04" = GPL Ghostscript
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.1.1000
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 15.0 (x86 de)" = Mozilla Firefox 15.0 (x86 de)
"Mozilla Firefox 16.0.2 (x86 de)" = Mozilla Firefox 16.0.2 (x86 de)
"Mozilla Thunderbird 16.0.2 (x86 de)" = Mozilla Thunderbird 16.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"N360" = Norton 360
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
"winscp3_is1" = WinSCP 4.3.7
"xp-AntiSpy" = xp-AntiSpy 3.98-2
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 04.11.2012 05:50:20 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xe3e0  Startzeit der fehlerhaften Anwendung: 0x01cdba71ca5b1890  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 0b210ca7-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:50:34 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xe004  Startzeit der fehlerhaften Anwendung: 0x01cdba71d2e04fe0  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 13b2c746-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:50:49 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xe110  Startzeit der fehlerhaften Anwendung: 0x01cdba71db5b9bfb  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 1c290a3e-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:51:15 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xdd3c  Startzeit der fehlerhaften Anwendung: 0x01cdba71eb1c20a7  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 2be60c6d-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:51:30 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xd7d8  Startzeit der fehlerhaften Anwendung: 0x01cdba71f43c139b  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 34fe1003-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:51:44 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xde18  Startzeit der fehlerhaften Anwendung: 0x01cdba71fcacb12e  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 3d675a7a-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:51:59 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xe264  Startzeit der fehlerhaften Anwendung: 0x01cdba720519089a  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 45d893f9-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:52:13 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xdf80  Startzeit der fehlerhaften Anwendung: 0x01cdba720db15302  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 4e752431-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:52:38 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xdb4c  Startzeit der fehlerhaften Anwendung: 0x01cdba721cd45cdf  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 5d919e46-2665-11e2-8940-002643ab61ec
 
Error - 04.11.2012 05:52:52 | Computer Name = Danilo-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: browsemngr.exe, Version: 2.3.787.43,
 Zeitstempel: 0x50755add  Name des fehlerhaften Moduls: browse~1.dll, Version: 2.2.643.41,
 Zeitstempel: 0x50489637  Ausnahmecode: 0xc0000417  Fehleroffset: 0x00121b4e  ID des fehlerhaften
 Prozesses: 0xdb14  Startzeit der fehlerhaften Anwendung: 0x01cdba722544fa72  Pfad der
 fehlerhaften Anwendung: C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
Pfad
 des fehlerhaften Moduls: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll  Berichtskennung:
 65fc9673-2665-11e2-8940-002643ab61ec
 
[ System Events ]
Error - 13.09.2012 08:24:27 | Computer Name = Danilo-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 13.09.2012 08:24:27 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 13.09.2012 09:43:59 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 13.09.2012 12:10:34 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 13.09.2012 19:57:16 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 14.09.2012 00:45:58 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 14.09.2012 05:20:02 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 14.09.2012 08:34:42 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 14.09.2012 10:00:58 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 14.09.2012 14:59:27 | Computer Name = Danilo-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
 
< End of report >

kira 06.11.2012 05:37
Punkt 3. fehlt noch, bitte nachreichen!
Bitte lese Dir zuerst in Ruhe die Anweisungen durch und Du sollst dabei die Reihenfolge einhalten! Ansonsten verlangsamt unsere Arbeit, wenn wir immer wieder noch an Kleinigkeiten nachschlagen müssen und dadurch eventuell die Übersicht verloren geht...


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:09 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19