Trojaner-Board - Win 32 malware-gen

Log von ComboFix:

Combofix Logfile:
Code:
ComboFix 13-02-18.01 - *** 18.02.2013  16:30:17.1.8 - x64

Microsoft Windows 7 Ultimate   6.1.7600.0.1252.49.1031.18.8191.5744 [GMT 1:00]

ausgeführt von:: c:\users\***\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\ntuser.dat

c:\users\***\AppData\Roaming\Love

c:\users\***\AppData\Roaming\Love\mari0\options.txt

c:\users\***\AppData\Roaming\Microsoft\Windows\Recent\Chivalry Medieval Warfare.url

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-01-18 bis 2013-02-18  ))))))))))))))))))))))))))))))

.

.

2013-02-18 16:10 . 2013-02-18 16:10        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-02-17 13:55 . 2013-02-17 13:55        --------        d-----w-        c:\users\***\AppData\Roaming\Malwarebytes

2013-02-17 13:55 . 2013-02-17 13:55        --------        d-----w-        c:\programdata\Malwarebytes

2013-02-17 13:55 . 2013-02-17 13:55        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2013-02-17 13:55 . 2012-12-14 15:49        24176        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-02-17 13:55 . 2013-02-17 13:55        --------        d-----w-        c:\users\***\AppData\Local\Programs

2013-02-16 22:21 . 2013-02-16 22:21        --------        d-----w-        c:\users\***\AppData\Local\Diagnostics

2013-02-16 21:23 . 2013-02-16 21:23        --------        d-----w-        c:\program files (x86)\Common Files\EAInstaller

2013-02-15 18:21 . 2013-02-15 18:21        --------        d--h--r-        c:\users\***\AppData\Roaming\SecuROM

2013-02-15 13:22 . 2013-01-08 05:32        9161176        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{B0557539-95C5-4AF7-A3C7-ACD0A91FC0B7}\mpengine.dll

2013-02-13 21:10 . 2013-01-09 01:10        996352        ----a-w-        c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 21:10 . 2013-01-08 22:01        768000        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 14:58 . 2013-01-05 05:57        5500776        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-02-13 14:57 . 2013-01-04 05:37        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2013-02-10 17:26 . 2013-02-10 17:26        --------        d-----w-        c:\programdata\EA Core

2013-02-10 13:16 . 2013-02-10 13:29        --------        d-----w-        c:\users\***\AppData\Local\Vidalia

2013-02-10 11:20 . 2013-02-10 11:20        --------        d-----w-        c:\users\***\AppData\Local\ArmA 2 OA DEMO

2013-02-10 11:20 . 2010-06-02 03:55        239960        ----a-w-        c:\windows\SysWow64\xactengine3_7.dll

2013-02-10 11:20 . 2010-06-02 03:55        176984        ----a-w-        c:\windows\system32\xactengine3_7.dll

2013-02-10 11:20 . 2010-05-26 10:41        1907552        ----a-w-        c:\windows\system32\d3dcsx_43.dll

2013-02-10 11:20 . 2010-05-26 10:41        1868128        ----a-w-        c:\windows\SysWow64\d3dcsx_43.dll

2013-02-10 11:20 . 2010-05-26 10:41        511328        ----a-w-        c:\windows\system32\d3dx10_43.dll

2013-02-10 11:20 . 2010-05-26 10:41        470880        ----a-w-        c:\windows\SysWow64\d3dx10_43.dll

2013-02-10 11:18 . 2007-05-16 15:45        4496232        ----a-w-        c:\windows\system32\d3dx9_34.dll

2013-02-09 22:42 . 2013-02-09 22:42        --------        d-----w-        c:\users\***\AppData\Roaming\PowerISO

2013-02-09 22:41 . 2013-02-09 22:41        --------        d-----w-        c:\users\***\AppData\Local\AVG Secure Search

2013-02-09 22:40 . 2013-02-09 22:40        --------        d-----w-        c:\programdata\AVG Secure Search

2013-02-09 22:40 . 2013-02-09 22:40        39768        ----a-w-        c:\windows\system32\drivers\avgtpx64.sys

2013-02-09 22:40 . 2013-02-17 13:01        --------        d-----w-        c:\program files (x86)\Common Files\AVG Secure Search

2013-02-09 22:40 . 2013-02-11 13:17        --------        d-----w-        c:\program files (x86)\AVG Secure Search

2013-02-09 22:40 . 2013-02-09 22:40        --------        d--h--w-        c:\programdata\Common Files

2013-02-09 22:39 . 2013-02-09 22:41        --------        d-----w-        c:\program files (x86)\PowerISO

2013-02-09 22:39 . 2012-12-09 09:51        126944        ----a-w-        c:\windows\system32\drivers\scdemu.sys

2013-02-09 20:35 . 2013-02-10 13:40        --------        d-----w-        c:\users\***\AppData\Roaming\Origin

2013-02-09 20:35 . 2013-02-17 12:56        --------        d-----w-        c:\program files (x86)\Origin Games

2013-02-09 20:35 . 2013-02-09 20:35        --------        d-----w-        c:\users\***\AppData\Local\Origin

2013-02-09 20:33 . 2013-02-10 13:40        --------        d-----w-        c:\programdata\Origin

2013-02-09 20:33 . 2013-02-09 20:33        --------        d-----w-        c:\programdata\Electronic Arts

2013-02-09 20:33 . 2013-02-09 20:35        --------        d-----w-        c:\program files (x86)\Origin

2013-02-09 19:13 . 2013-02-18 15:22        --------        d-----r-        c:\users\***\Dropbox

2013-02-09 19:09 . 2013-02-18 15:22        --------        d-----w-        c:\users\***\AppData\Roaming\Dropbox

2013-02-08 15:23 . 2013-02-08 15:23        --------        d-----w-        c:\program files (x86)\Common Files\Skype

2013-02-03 16:17 . 2013-02-03 16:16        95648        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-02-03 12:36 . 2013-02-03 12:36        --------        d-----w-        c:\program files (x86)\BlueJ

2013-02-03 12:33 . 2013-02-03 12:33        --------        d-----w-        c:\windows\system32\appmgmt

2013-01-26 14:30 . 2013-01-26 14:30        --------        d-----w-        c:\program files (x86)\SystemRequirementsLab

2013-01-26 14:30 . 2013-01-26 14:30        --------        d-----w-        c:\users\***\SystemRequirementsLab

2013-01-23 14:36 . 2013-01-23 14:36        --------        d-----w-        c:\programdata\ATI

2013-01-23 14:36 . 2013-01-23 14:36        --------        d-----w-        c:\program files (x86)\AMD AVT

2013-01-23 14:36 . 2013-01-23 14:36        --------        d-----w-        c:\program files (x86)\AMD APP

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-02-09 19:43 . 2012-09-17 18:19        74096        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-02-09 19:43 . 2012-09-17 18:19        697712        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-02-03 16:16 . 2012-09-17 18:16        861088        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2013-02-03 16:16 . 2012-09-17 18:16        782240        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2013-01-17 00:28 . 2009-10-14 05:13        273840        ------w-        c:\windows\system32\MpSigStub.exe

2013-01-04 04:43 . 2013-02-13 14:58        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2012-12-19 20:50 . 2012-12-19 20:50        5630200        ----a-w-        c:\windows\SysWow64\atiumdag.dll

2012-12-19 20:48 . 2012-12-19 20:48        11278336        ----a-w-        c:\windows\system32\drivers\atikmdag.sys

2012-12-19 20:29 . 2012-12-19 20:29        23461376        ----a-w-        c:\windows\system32\atio6axx.dll

2012-12-19 20:22 . 2012-12-19 20:22        70144        ----a-w-        c:\windows\system32\coinst_9.012.dll

2012-12-19 20:19 . 2012-12-19 20:19        163840        ----a-w-        c:\windows\system32\atiapfxx.exe

2012-12-19 20:18 . 2012-12-19 20:18        51200        ----a-w-        c:\windows\system32\aticalrt64.dll

2012-12-19 20:18 . 2012-12-19 20:18        46080        ----a-w-        c:\windows\SysWow64\aticalrt.dll

2012-12-19 20:17 . 2012-12-19 20:17        44544        ----a-w-        c:\windows\system32\aticalcl64.dll

2012-12-19 20:17 . 2012-12-19 20:17        44032        ----a-w-        c:\windows\SysWow64\aticalcl.dll

2012-12-19 20:17 . 2012-12-19 20:17        16082944        ----a-w-        c:\windows\system32\aticaldd64.dll

2012-12-19 20:13 . 2012-12-19 20:13        13703168        ----a-w-        c:\windows\SysWow64\aticaldd.dll

2012-12-19 20:12 . 2012-12-19 20:12        18982400        ----a-w-        c:\windows\SysWow64\atioglxx.dll

2012-12-19 20:09 . 2012-09-17 19:30        960512        ----a-w-        c:\windows\SysWow64\aticfx32.dll

2012-12-19 20:08 . 2012-09-17 19:30        1151488        ----a-w-        c:\windows\system32\aticfx64.dll

2012-12-19 20:06 . 2012-09-17 19:32        6681088        ----a-w-        c:\windows\SysWow64\atidxx32.dll

2012-12-19 19:59 . 2012-09-28 01:31        5087744        ----a-w-        c:\windows\system32\atiumd6a.dll

2012-12-19 19:57 . 2012-09-28 01:39        442368        ----a-w-        c:\windows\system32\atidemgy.dll

2012-12-19 19:56 . 2012-12-19 19:56        550912        ----a-w-        c:\windows\system32\atieclxx.exe

2012-12-19 19:56 . 2012-12-19 19:56        240640        ----a-w-        c:\windows\system32\atiesrxx.exe

2012-12-19 19:54 . 2012-12-19 19:54        120320        ----a-w-        c:\windows\system32\atitmm64.dll

2012-12-19 19:54 . 2012-12-19 19:54        21504        ----a-w-        c:\windows\system32\atimuixx.dll

2012-12-19 19:54 . 2012-12-19 19:54        59392        ----a-w-        c:\windows\system32\atiedu64.dll

2012-12-19 19:54 . 2012-12-19 19:54        43520        ----a-w-        c:\windows\SysWow64\ati2edxx.dll

2012-12-19 19:49 . 2012-09-17 19:31        7370752        ----a-w-        c:\windows\system32\atidxx64.dll

2012-12-19 19:44 . 2012-12-19 19:44        4162048        ----a-w-        c:\windows\SysWow64\atiumdva.dll

2012-12-19 19:44 . 2012-09-28 01:25        6786560        ----a-w-        c:\windows\system32\atiumd64.dll

2012-12-19 19:33 . 2012-12-19 19:33        56320        ----a-w-        c:\windows\system32\atimpc64.dll

2012-12-19 19:33 . 2012-12-19 19:33        56320        ----a-w-        c:\windows\system32\amdpcom64.dll

2012-12-19 19:33 . 2012-09-28 01:13        619008        ----a-w-        c:\windows\system32\atiadlxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        56832        ----a-w-        c:\windows\SysWow64\atimpc32.dll

2012-12-19 19:33 . 2012-12-19 19:33        56832        ----a-w-        c:\windows\SysWow64\amdpcom32.dll

2012-12-19 19:33 . 2012-12-19 19:33        421888        ----a-w-        c:\windows\SysWow64\atiadlxy.dll

2012-12-19 19:33 . 2012-12-19 19:33        17920        ----a-w-        c:\windows\system32\atig6pxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        14848        ----a-w-        c:\windows\SysWow64\atiglpxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        14848        ----a-w-        c:\windows\system32\atiglpxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        41984        ----a-w-        c:\windows\system32\atig6txx.dll

2012-12-19 19:33 . 2012-12-19 19:33        33280        ----a-w-        c:\windows\SysWow64\atigktxx.dll

2012-12-19 19:32 . 2012-12-19 19:32        552960        ----a-w-        c:\windows\system32\drivers\atikmpag.sys

2012-12-19 19:31 . 2011-07-08 02:46        130048        ----a-w-        c:\windows\system32\atiuxp64.dll

2012-12-19 19:31 . 2012-09-17 19:30        109568        ----a-w-        c:\windows\SysWow64\atiuxpag.dll

2012-12-19 19:31 . 2012-09-28 01:11        104448        ----a-w-        c:\windows\system32\atiu9p64.dll

2012-12-19 19:30 . 2011-07-08 02:45        83968        ----a-w-        c:\windows\SysWow64\atiu9pag.dll

2012-12-19 19:30 . 2012-12-19 19:30        53248        ----a-w-        c:\windows\system32\drivers\ati2erec.dll

2012-12-19 14:45 . 2012-12-19 14:45        222720        ----a-w-        c:\windows\system32\clinfo.exe

2012-12-19 14:44 . 2012-12-19 14:44        76288        ----a-w-        c:\windows\system32\OpenVideo64.dll

2012-12-19 14:44 . 2012-12-19 14:44        65536        ----a-w-        c:\windows\SysWow64\OpenVideo.dll

2012-12-19 14:44 . 2012-12-19 14:44        64000        ----a-w-        c:\windows\system32\OVDecode64.dll

2012-12-19 14:44 . 2012-12-19 14:44        56320        ----a-w-        c:\windows\SysWow64\OVDecode.dll

2012-12-19 14:44 . 2012-12-19 14:44        34518016        ----a-w-        c:\windows\system32\amdocl64.dll

2012-12-19 14:38 . 2012-12-19 14:38        28732928        ----a-w-        c:\windows\SysWow64\amdocl.dll

2012-12-19 14:34 . 2012-12-19 14:34        54784        ----a-w-        c:\windows\system32\OpenCL.dll

2012-12-19 14:34 . 2012-12-19 14:34        50176        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2012-12-16 16:52 . 2012-12-21 15:53        46080        ----a-w-        c:\windows\system32\atmlib.dll

2012-12-16 14:40 . 2012-12-21 15:53        367616        ----a-w-        c:\windows\system32\atmfd.dll

2012-12-16 14:25 . 2012-12-21 15:53        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll

2012-12-16 14:25 . 2012-12-21 15:53        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2012-12-07 05:41 . 2013-01-09 15:09        441856        ----a-w-        c:\windows\system32\Wpc.dll

2012-12-07 05:35 . 2013-01-09 15:09        2745856        ----a-w-        c:\windows\system32\gameux.dll

2012-12-07 05:04 . 2013-01-09 15:09        308736        ----a-w-        c:\windows\SysWow64\Wpc.dll

2012-12-07 04:57 . 2013-01-09 15:09        2576384        ----a-w-        c:\windows\SysWow64\gameux.dll

2012-12-07 03:45 . 2013-01-09 15:09        43520        ----a-w-        c:\windows\system32\csrr.rs

2012-12-07 03:45 . 2013-01-09 15:09        45568        ----a-w-        c:\windows\system32\oflc-nz.rs

2012-12-07 03:45 . 2013-01-09 15:09        30720        ----a-w-        c:\windows\system32\usk.rs

2012-12-07 03:45 . 2013-01-09 15:09        23552        ----a-w-        c:\windows\system32\oflc.rs

2012-12-07 03:45 . 2013-01-09 15:09        44544        ----a-w-        c:\windows\system32\pegibbfc.rs

2012-12-07 03:45 . 2013-01-09 15:09        40960        ----a-w-        c:\windows\system32\cob-au.rs

2012-12-07 03:45 . 2013-01-09 15:09        21504        ----a-w-        c:\windows\system32\grb.rs

2012-12-07 03:45 . 2013-01-09 15:09        20480        ----a-w-        c:\windows\system32\pegi-pt.rs

2012-12-07 03:45 . 2013-01-09 15:09        20480        ----a-w-        c:\windows\system32\pegi-fi.rs

2012-12-07 03:45 . 2013-01-09 15:09        46592        ----a-w-        c:\windows\system32\fpb.rs

2012-12-07 03:45 . 2013-01-09 15:09        20480        ----a-w-        c:\windows\system32\pegi.rs

2012-12-07 03:45 . 2013-01-09 15:09        15360        ----a-w-        c:\windows\system32\djctq.rs

2012-12-07 03:45 . 2013-01-09 15:09        55296        ----a-w-        c:\windows\system32\cero.rs

2012-12-07 03:45 . 2013-01-09 15:09        51712        ----a-w-        c:\windows\system32\esrb.rs

2012-12-07 03:21 . 2013-01-09 15:09        45568        ----a-w-        c:\windows\SysWow64\oflc-nz.rs

2012-12-07 03:21 . 2013-01-09 15:09        43520        ----a-w-        c:\windows\SysWow64\csrr.rs

2012-12-07 03:21 . 2013-01-09 15:09        44544        ----a-w-        c:\windows\SysWow64\pegibbfc.rs

2012-12-07 03:21 . 2013-01-09 15:09        30720        ----a-w-        c:\windows\SysWow64\usk.rs

2012-12-07 03:21 . 2013-01-09 15:09        23552        ----a-w-        c:\windows\SysWow64\oflc.rs

2012-12-07 03:21 . 2013-01-09 15:09        20480        ----a-w-        c:\windows\SysWow64\pegi-pt.rs

2012-12-07 03:21 . 2013-01-09 15:09        20480        ----a-w-        c:\windows\SysWow64\pegi.rs

2012-12-07 03:21 . 2013-01-09 15:09        20480        ----a-w-        c:\windows\SysWow64\pegi-fi.rs

2012-12-07 03:21 . 2013-01-09 15:09        46592        ----a-w-        c:\windows\SysWow64\fpb.rs

2012-12-07 03:21 . 2013-01-09 15:09        21504        ----a-w-        c:\windows\SysWow64\grb.rs

2012-12-07 03:21 . 2013-01-09 15:09        51712        ----a-w-        c:\windows\SysWow64\esrb.rs

2012-12-07 03:21 . 2013-01-09 15:09        55296        ----a-w-        c:\windows\SysWow64\cero.rs

2012-12-07 03:21 . 2013-01-09 15:09        40960        ----a-w-        c:\windows\SysWow64\cob-au.rs

2012-12-07 03:21 . 2013-01-09 15:09        15360        ----a-w-        c:\windows\SysWow64\djctq.rs

2012-11-22 10:32 . 2013-01-09 15:09        801280        ----a-w-        c:\windows\system32\usp10.dll

2012-11-22 09:33 . 2013-01-09 15:09        627712        ----a-w-        c:\windows\SysWow64\usp10.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{0F3DC9E0-C459-4a40-BCF8-747BD9322E10}"= "c:\program files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll" [2011-01-21 165776]

.

[HKEY_CLASSES_ROOT\clsid\{0f3dc9e0-c459-4a40-bcf8-747bd9322e10}]

[HKEY_CLASSES_ROOT\AddressBarSearch.SearchHook.1]

[HKEY_CLASSES_ROOT\TypeLib\{4E8E0178-00EF-413d-9324-E7B3E31572E3}]

[HKEY_CLASSES_ROOT\AddressBarSearch.SearchHook]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

2013-02-11 13:16        1920688        ----a-w-        c:\program files (x86)\AVG Secure Search\14.1.0.10\AVG Secure Search_toolbar.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\14.1.0.10\AVG Secure Search_toolbar.dll" [2013-02-11 1920688]

.

[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]

[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]

[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        129272        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        129272        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        129272        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-02-15 1597864]

"Facebook Update"="c:\users\***\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-12-25 138096]

"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2011-07-07 393216]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-01-08 18705664]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"THX TruStudio NB Settings"="c:\program files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" [2011-05-19 909824]

"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]

"STCAgent"="c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-01-21 776064]

"ZyngaGamesAgent"="c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [2010-11-15 841544]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-12-10 2254768]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2013-02-11 1124016]

"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2012-12-09 336992]

.

c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-1-20 28539272]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]

R2 SmartViewService;SmartView service;c:\program files (x86)\DeviceVM\SmartView\SmartViewService.exe [x]

R3 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20100810.004\BHDrvx64.sys [2010-08-09 945200]

R3 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20100706.002\IDSVia64.sys [2010-06-27 463408]

R3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1201000.025\SYMDS64.SYS [2010-06-13 450096]

R3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1201000.025\SYMEFA64.SYS [2010-07-29 821808]

R3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1201000.025\Ironx64.SYS [2010-06-27 168496]

R3 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\NISx64\1201000.025\SYMNETS.SYS [2010-07-13 381488]

R3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\DRIVERS\xhcdrv.sys [2010-11-26 126976]

S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys [2011-05-10 17192]

S1 aswKbd;aswKbd; [x]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys [2013-02-09 39768]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-12-19 240640]

S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 361984]

S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]

S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe [2010-07-23 126904]

S2 SCBackService;Splashtop Connect Service;c:\program files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]

S2 vToolbarUpdater14.1.7;vToolbarUpdater14.1.7;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.1.7\ToolbarUpdater.exe [2013-02-09 965296]

S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]

S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]

S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2009-11-17 32344]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-04-21 471144]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

hpdevmgmt        REG_MULTI_SZ           hpqcxs08 hpqddsvc

.

Inhalt des "geplante Tasks" Ordners

.

2013-02-18 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-17 19:43]

.

2013-02-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3479666674-3888422604-2336058070-1000Core.job

- c:\users\***\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-25 18:01]

.

2013-02-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3479666674-3888422604-2336058070-1000UA.job

- c:\users\***\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-25 18:01]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-10-30 22:50        133400        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-09 12666984]

"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2011-05-13 26624]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = about:splashtopconnect

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Free YouTube to MP3 Converter - c:\users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

TCP: DhcpNameServer = 192.168.178.1

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.1.7\ViProtocol.dll

FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\hof1d5rn.default\

FF - ExtSQL: 2013-01-09 17:36; {ACAA314B-EEBA-48e4-AD47-84E31C44796C}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff

FF - ExtSQL: 2013-02-09 23:40; avg@toolbar; c:\programdata\AVG Secure Search\FireFoxExt\14.1.0.10

FF - ExtSQL: 2013-02-17 03:17; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\hof1d5rn.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF - ExtSQL: !HIDDEN! 2012-10-22 11:39; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKCU-Run-ASRockOCTuner - (no file)

Wow6432Node-HKCU-Run-ASRockIES - (no file)

Wow6432Node-HKCU-Run-zASRockInstantBoot - (no file)

Wow6432Node-HKCU-Run-Vidalia - c:\program files (x86)\Vidalia Bridge Bundle\Vidalia\vidalia.exe

Wow6432Node-HKLM-Run-SmartViewAgent - c:\program files (x86)\DeviceVM\SmartView\SmartViewAgent.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]

"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.1.0.37\diMaster.dll\" /prefetch:1"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-3479666674-3888422604-2336058070-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*3**©4ÚI¥*Šc:\users\***\Desktop\Musik\Seeed\Seeed - Feel For You.mp3]

@Class="Shell"

.

[HKEY_USERS\S-1-5-21-3479666674-3888422604-2336058070-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*3**©4ÚI¥*Šc:\users\***\Desktop\Musik\Seeed\Seeed - Feel For You.mp3\OpenWithList]

@Class="Shell"

"a"="vlc.exe"

"MRUList"="a"

.

[HKEY_USERS\S-1-5-21-3479666674-3888422604-2336058070-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.Email.1"

.

[HKEY_USERS\S-1-5-21-3479666674-3888422604-2336058070-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.VCard.1"

.

[HKEY_USERS\S-1-5-21-3479666674-3888422604-2336058070-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*3**©4ÚI¥*Šc:\users\***\Desktop\Musik\Seeed\Seeed - Feel For You.mp3]

"0"=hex:43,3a,5c,55,73,65,72,73,5c,4a,61,73,63,68,61,5c,44,65,73,6b,74,6f,70,

   5c,4d,75,73,69,6b,5c,53,65,65,65,64,5c,53,65,65,65,64,20,2d,20,59,6f,75,20,\

"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]

@="?????????????????? v1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]

@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]

@="?????????????????? v2"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]

@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-02-18  17:30:14

ComboFix-quarantined-files.txt  2013-02-18 16:30

.

Vor Suchlauf: 9 Verzeichnis(se), 860.888.395.776 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 864.070.918.144 Bytes frei

.

- - End Of File - - 8E804E9BA962A0B54C7C335D59208831
--- --- ---