[IMPORTANT] Bzgl. aktueller Virenverbreitung

Page 5 of 24

07/18/2011 18:38 xEr0r#61

Glaube schon. Kaspersky findet Viren.

07/18/2011 18:45 hero9910#62

Hat einer ne ahnung ob kaspersky das "virus" findent (gleich beim download) oder solte ich mein ganzes system mal �berpr�fen
Aless ich *** auf deine mutter du *****

07/18/2011 18:45 �Xי#63

Hacks = Viren 100% ... aber siro's sind nicht betroffen...
So ich meld dann mal... zur Polizei zu gehen hab ich keine Lust^^

07/18/2011 18:50 .Eckl�#64

Naja Bin infiziert Lade erstmal keine Hacks mehr hoch da ich nich wei� was passiert und ich es nicht Noch weiter verbreiten will -,-

3 Virenprogramme durchsuchen PC Nach Virus dann noch Festplatten reboot -,-

Aless du Nooob

07/18/2011 18:53 hero9910#65

So Kaspersky �berpr�ft mein PC jetzt auf herz und Nieren -.- kann kein WR mehr f�r 3 Stunden spielen wtf

07/18/2011 18:54 SunriseHack#66

Ich hasse Aless™ warum tun leute sowas ?

07/18/2011 18:59 InstantBlood#67

Deswegen sollte man immer eine CD zum formatieren da haben ich habe sogar 2
(Win 7 – 32 Bit legal und Win 7 – 64 Bit Crack :D)

07/18/2011 19:01 brainpwnz#68

k�nnte mir jmd ne pm schicken und sagen was ich zur polizei sagen soll xD

07/18/2011 19:03 hero9910#69

gute frage....Sie sind Asozial,Behindert,Schadenfroh usw
ich m�chte mal hintergr�nde wissen wie: ist er zu arm und muss konto daten kaluen?
ist er einfach nur nen kid ?
oder sollte er einfach mal in die Klapse
ich hoffe er hat jemanden infiziert der sich so gut auskennt und ihm alles nachweisen kann
muss er erstmal sch�n ab zahlen
hir mal nen kleines Skype gespr�h

[18:57:20 | Bearbeitet 18:57:27] Sinan aka p4nt4ll4: Kaspersky 11 : Vollst�ndige untersuchung : 1% wtf
[18:57:44] Sinan aka p4nt4ll4: 2-3 h kein wr mehr -.-
[19:02:03] Sinan aka p4nt4ll4: OMG!! 3.trojaner ftw
[19:02:17] .FamasStyle™: warrock hacks halt :P
[19:02:36] Sinan aka p4nt4ll4: habe nur WR3 auf pc und der ist in ausnahme
[19:02:45] Sinan aka p4nt4ll4: alles Win32 tojan
[19:03:05] Sinan aka p4nt4ll4: und bin erst bei 2%

07/18/2011 19:05 InstantBlood#70

0.o

Geh zu den Bullen sag du m�chtest Anzeige erstatten.
Die werden fragen wegen was
Du wirst sagen wegen eingriff in die Privatsph�re(Kannst du nur machen wen du Betroffen bist) und illegaler Inhalt.
Dann werden nur Fragen kommen denke ich mal und dann fragen sie auch nach der IP, dann kann auch von Aless der PC beschlagnahmt werden.

07/18/2011 19:06 snwoduck#71

Tipp, benutzt Kaspersky Anti Virus 2011 l�sst ihn durchlaufen und der besagte Virus ist weg.

07/18/2011 19:07 Bonrax#72

Quote:

Originally Posted by brainpwnz

k�nnte mir jmd ne pm schicken und sagen was ich zur polizei sagen soll xD

Du kannst noch nicht zu Polizei!

Da wir von "Luke" noch keine Narichtbekommen haben!

Ich w�rde erstmal warten!

07/18/2011 19:12 Grape�#73

Erstmal danke f�r das Pinnen an die Moderatoren!

Ich bitte alle Opfer, dass ihr zur �rtlichen Polizei geht und Anzeige gegen Aless erstattet.
Bringt am besten Beweise wie z.B. einen Log von Malewarebytes Virenscanner mit.
Folgende Straftaten hat Aless begangen :

Aussp�hen von Daten
Eindringen in die Privatssph�re

Die Polizei wird sich dann bei den Beitreibern dieses Forums melden und Auskunft �ber die IP von Aless verlangen.
Epvp ist nur der Polizei Auskunftspflichtig.

07/18/2011 19:13 tim800#74

Spoiler

VON OTL.exe sollte man ja hier posten ....

07/18/2011 19:26 Grape�#75

Quote:

Originally Posted by tim800

Spoiler

OTL logfile created on: 7/18/2011 7:05:02 PM - Run 2
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Tim\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

2.99 Gb Total Physical Memory | 1.55 Gb Available Physical Memory | 51.62% Memory free
5.99 Gb Paging File | 3.76 Gb Available in Paging File | 62.80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 141.49 Gb Total Space | 46.85 Gb Free Space | 33.11% Space Free | Partition Type: NTFS
Drive D: | 141.50 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: NTFS

Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Tim\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files\Opera\opera.exe (Opera Software)
PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
PRC - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
PRC - C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Startup\Taskbar Transparency.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Rainmeter\Rainmeter.exe ()
PRC - C:\Users\Tim\temp\TeamViewer\Version6\TeamViewer_S ervice.exe (TeamViewer GmbH)
PRC - C:\Users\Tim\temp\TeamViewer\Version6\TeamViewer.e xe (TeamViewer GmbH)
PRC - C:\Users\Tim\temp\TeamViewer\Version6\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Users\Tim\AppData\Roaming\OCS\SM\SearchAnonymiz erHelper.exe ()
PRC - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe (SAMSUNG Electronics)
PRC - C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (SEC)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Program Files\RocketDock\RocketDock.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\Tim\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420f e3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\RocketDock\RocketDock.dll ()

========== Win32 Services (SafeList) ==========

SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Akamai) -- c:\program files\common files\akamai\netsession_win_e477fed.dll ()
SRV - (Hamachi2Svc) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (TeamViewer6) -- C:\Users\Tim\temp\TeamViewer\Version6\TeamViewer_S ervice.exe (TeamViewer GmbH)
SRV - (SearchAnonymizer) -- C:\Users\Tim\AppData\Roaming\OCS\SM\SearchAnonymiz erHelper.exe ()
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (BcmSqlStartupSvc) -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (EagleXNt) -- File not found
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (Neo_Walock) -- C:\Windows\System32\drivers\Neo_0025.sys (SoftEther Corporation)
DRV - (SCREAMINGBDRIVER) -- C:\Windows\System32\drivers\ScreamingBAudio.sys (Screaming Bee LLC)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (s0017mdm) -- C:\Windows\System32\drivers\s0017mdm.sys (MCCI Corporation)
DRV - (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM) -- C:\Windows\System32\drivers\s0017unic.sys (MCCI Corporation)
DRV - (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s0017mgmt.sys (MCCI Corporation)
DRV - (s0017obex) -- C:\Windows\System32\drivers\s0017obex.sys (MCCI Corporation)
DRV - (s0017bus) Sony Ericsson Device 0017 driver (WDM) -- C:\Windows\System32\drivers\s0017bus.sys (MCCI Corporation)
DRV - (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS) -- C:\Windows\System32\drivers\s0017nd5.sys (MCCI Corporation)
DRV - (s0017mdfl) -- C:\Windows\System32\drivers\s0017mdfl.sys (MCCI Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4df804000000 000000000acef8b15bf&tlver=1.4.19.19&affID=17159
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files\MessengerPlusLive_Germany_TB\tbMess.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - File not found

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Only registered and activated users can see links. Click Here To Register...]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Only registered and activated users can see links. Click Here To Register...]
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files\MessengerPlusLive_Germany_TB\tbMess.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {9d81af43-de53-48d0-a199-42c2a226b24c} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyServer" = http=127.0.0.1:49818

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.defaultthis.engineName: "softonic-de3 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=16508"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/home?AF=16508"
FF - prefs.js..extensions.enabledItems: {76aeea42-e04a-4b62-83ab-df4b2be2541e}:2.7.1.3
FF - prefs.js..extensions.enabledItems: [Only registered and activated users can see links. Click Here To Register...]:0.2.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: [Only registered and activated users can see links. Click Here To Register...]:3.9.1.14019
FF - prefs.js..extensions.enabledItems: [Only registered and activated users can see links. Click Here To Register...]:3.2.3.3
FF - prefs.js..extensions.enabledItems: [Only registered and activated users can see links. Click Here To Register...]:1.2.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.4.6
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=adbartrp&AF=16508&q="
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin \MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin \MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Tim\AppData\Local\Facebook\Video\Skype\np FacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extens ions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin \Firefox\Ext [2011/06/28 23:20:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/15 02:53:05 | 000,000,000 | ---D | M]

[2011/03/20 15:39:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Extensions
[2011/03/20 15:39:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Extensions\IM [Only registered and activated users can see links. Click Here To Register...]
[2011/07/03 20:21:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions
[2011/01/12 16:58:28 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2011/04/13 22:46:59 | 000,000,000 | ---D | M] (Chameleon Tom) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA79}
[2010/11/07 18:32:14 | 000,000,000 | ---D | M] (MessengerPlusLive Germany TB Toolbar) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{76aeea42-e04a-4b62-83ab-df4b2be2541e}
[2010/11/08 19:33:23 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011/04/02 00:51:22 | 000,000,000 | ---D | M] (Softonic Deutsch FF Community Toolbar) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{9d81af43-de53-48d0-a199-42c2a226b24c}
[2011/07/03 20:21:24 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010/12/18 00:52:28 | 000,000,000 | ---D | M] (softonic-de3 Community Toolbar) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
[2010/12/11 13:48:41 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/12/04 23:41:53 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\[Only registered and activated users can see links. Click Here To Register...]
[2011/04/13 22:37:34 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\[Only registered and activated users can see links. Click Here To Register...] m
[2011/02/03 15:28:38 | 000,000,000 | ---D | M] (Facemoods) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\ffxtlbr@Facemoods. com
[2010/11/18 17:07:37 | 000,000,000 | ---D | M] (My-Translator) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profi les\8ku53cv5.default\extensions\[Only registered and activated users can see links. Click Here To Register...]
[2011/01/20 18:47:28 | 000,002,333 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\askcom.xml
[2010/12/08 16:47:52 | 000,000,927 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\conduit.xml
[2010/12/06 22:45:00 | 000,001,114 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\icqplugin.xml
[2010/12/07 08:38:51 | 000,001,266 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\kikin-search.xml
[2010/12/06 22:45:00 | 000,002,071 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\{008F6395-F9FB-49D2-93A8-0437E76D9EC4}.xml
[2010/12/06 22:45:00 | 000,001,088 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\{4A2126F3-C329-4E00-BAC5-8D39F1BDB6D0}.xml
[2010/12/06 22:45:00 | 000,001,864 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\{671E9D79-2F46-48E8-8C67-C2DDF475C717}.xml
[2010/12/06 22:45:00 | 000,002,182 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profi les\8ku53cv5.default\searchplugins\{C41856A2-83A3-4B08-850B-8DA325AD03B3}.xml
[2011/07/15 02:53:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2011/06/05 23:12:51 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/07/15 02:53:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/07/15 02:52:47 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/04/13 22:37:35 | 000,002,423 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml

O1 HOSTS File: ([2011/07/11 15:32:54 | 000,001,126 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 im.adtech.de
O1 - Hosts: 127.0.0.1 adserver.adtech.de
O1 - Hosts: 127.0.0.1 adtech.de
O1 - Hosts: 127.0.0.1 atwola.com
O1 - Hosts: 127.0.0.1 adserver.71i.de
O1 - Hosts: 127.0.0.1 adicqserver.71i.de
O1 - Hosts: 127.0.0.1 71i.de
O1 - Hosts: 74.208.10.249 gs.apple.com
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin \IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (WitBHO Class) - {75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F} - File not found
O2 - BHO: (MessengerPlusLive Germany TB Toolbar) - {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files\MessengerPlusLive_Germany_TB\tbMess.dll (Conduit Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - File not found
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (MessengerPlusLive Germany TB Toolbar) - {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Program Files\MessengerPlusLive_Germany_TB\tbMess.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (MessengerPlusLive Germany TB Toolbar) - {76AEEA42-E04A-4B62-83AB-DF4B2BE2541E} - C:\Program Files\MessengerPlusLive_Germany_TB\tbMess.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - File not found
O4 - HKLM..\Run: [1A:Stardock TrayMonitor] File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.e xe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Ocs_SM] C:\Users\Tim\AppData\Roaming\OCS\SM\SearchAnonymiz er.exe (OCS)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Windows Graphisolierung f�r Audiohdger�te] C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Tem plates\audiodh.exe (Microsoft Corporation)
O4 - HKCU..\Run: [conhost] File not found
O4 - HKCU..\Run: [CubeDesktop] File not found
O4 - HKCU..\Run: [Facebook Update] C:\Users\Tim\AppData\Local\Facebook\Update\Faceboo kUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [ICQ] C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [Windows Graphisolierung f�r Audiohdger�te] C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Tem plates\audiodh.exe (Microsoft Corporation)
O4 - HKLM..\RunServices: [1A:Stardock TrayMonitor] File not found
O4 - Startup: C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()
O4 - Startup: C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Startup\Taskbar Transparency.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableLUA = 0
O8 - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers \freeyoutubedownload.htm ()
O9 - Extra Button: ChameleonTom - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\ChameleonTom\ct.htm ()
O9 - Extra 'Tools' menuitem : ChameleonTom - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\ChameleonTom\ct.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\IMVU\Run IMVU.lnk ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [Only registered and activated users can see links. Click Here To Register...] (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [Only registered and activated users can see links. Click Here To Register...] (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Only registered and activated users can see links. Click Here To Register...] (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [Only registered and activated users can see links. Click Here To Register...] (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DL L (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DL L (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.ex e (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010/06/21 14:47:47 | 000,000,053 | -H-- | M] () - D:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/07/18 14:17:46 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{7A20D440-B658-4510-8546-BADC3FF7D2A7}
[2011/07/18 03:02:04 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/07/18 02:16:43 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{12877A78-EE38-4CB2-B426-22A7C3E42CFD}
[2011/07/17 14:15:30 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{36080B00-447C-432A-B84E-0211A39B4816}
[2011/07/16 15:38:36 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{684694D9-413E-4BE5-B5A3-09C3B6A704B5}
[2011/07/16 03:37:23 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{26C3F574-E460-4C8B-97DA-5A470735474B}
[2011/07/15 15:35:44 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{BD560253-994C-4281-8BE9-D104593169E6}
[2011/07/15 02:53:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011/07/15 02:53:05 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\javaws.exe
[2011/07/15 02:53:05 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\javaw.exe
[2011/07/15 02:53:05 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\java.exe
[2011/07/15 02:35:26 | 035,624,744 | ---- | C] (Apple Inc.) -- C:\Users\Tim\SafariSetup.exe
[2011/07/15 02:29:10 | 000,908,064 | ---- | C] (Sun Microsystems, Inc.) -- C:\Users\Tim\jre-6u26-windows-i586-iftw.exe
[2011/07/15 00:04:38 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{25B9DFEB-B69D-42C7-9198-812BA7DA1FEA}
[2011/07/14 13:14:55 | 000,009,216 | ---- | C] (Microsoft) -- C:\Users\Tim\Desktop\SpamBot.exe
[2011/07/14 13:03:30 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Users\Tim\Desktop\cleanup_tool.exe
[2011/07/14 12:16:26 | 050,449,456 | ---- | C] (Microsoft Corporation) -- C:\Users\Tim\dotNetFx40_Full_x86_x64.exe
[2011/07/14 12:03:29 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{4C432183-B8A4-4F1F-9857-537BCF5D118D}
[2011/07/14 12:02:07 | 000,035,328 | -H-- | C] (Microsoft Corporation) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\audiodh.exe
[2011/07/13 13:21:00 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-security-base-l1-1-0.dll
[2011/07/13 13:21:00 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-file-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2011/07/13 13:21:00 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-util-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-string-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-io-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2011/07/13 13:21:00 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-console-l1-1-0.dll
[2011/07/13 13:20:58 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\conhost.exe
[2011/07/13 13:20:58 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winsrv.dll
[2011/07/13 13:20:57 | 002,332,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys
[2011/07/12 17:26:26 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{5BBB3522-C8F5-4C98-9B66-0659D7301228}
[2011/07/11 14:49:05 | 000,000,000 | ---D | C] -- C:\Program Files\PServer
[2011/07/11 14:24:05 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{2D78E62C-8E0B-4439-9118-8AB545DFBABE}
[2011/07/11 13:24:53 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\WhiteSmoke
[2011/07/11 13:22:37 | 000,000,000 | ---D | C] -- C:\Program Files\WhiteSmoke
[2011/07/11 02:35:21 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\LogMeIn Hamachi
[2011/07/11 02:34:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2011/07/11 02:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2011/07/11 02:23:24 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{9A6BB51B-DF53-41B8-BB93-70203F2EC7AA}
[2011/07/11 01:54:52 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\LMFAO Extreme WeaponPack!
[2011/07/10 19:39:09 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\REFOG Free Keylogger
[2011/07/10 14:22:47 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{EEC7507C-AE3A-45B3-8C16-6891A13B6090}
[2011/07/09 14:21:33 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{96C4C919-7A9A-43BF-9E70-0F0E44814EEC}
[2011/07/09 02:20:43 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{E2BF541A-0F76-4458-B018-A592AC77F2EB}
[2011/07/08 14:20:15 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{EDD38C38-D44A-44F6-B915-5D5AD6BB1A39}
[2011/07/07 21:33:42 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{C54ACE90-D717-49FE-B14C-B7117C0955D9}
[2011/07/07 19:56:03 | 020,751,400 | ---- | C] (DVDVideoSoft Limited. ) -- C:\Users\Tim\Free3DPhotoMaker.exe
[2011/07/07 19:41:15 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Thinking Minds Budiling Bytes
[2011/07/07 09:32:36 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{DF4A04CC-254D-49C0-8400-7756C6CA65C1}
[2011/07/07 00:34:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011/07/06 23:51:59 | 000,000,000 | ---D | C] -- C:\Users\Tim\.shsh
[2011/07/06 23:35:15 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\Facebook
[2011/07/06 23:28:42 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\redsn0w_win_0.9.6rc16
[2011/07/06 17:38:41 | 000,000,000 | ---D | C] -- C:\Users\Tim\taskbar_transparency_v2_by_prisoner7-d3fw5ry
[2011/07/06 17:08:07 | 000,000,000 | ---D | C] -- C:\Users\Tim\Documents\Rainmeter
[2011/07/06 17:08:07 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Rainmeter
[2011/07/06 17:08:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter
[2011/07/06 17:08:01 | 000,000,000 | ---D | C] -- C:\Program Files\Rainmeter
[2011/07/06 17:02:46 | 000,000,000 | ---D | C] -- C:\Users\Tim\start
[2011/07/06 14:43:10 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\Tanja
[2011/07/06 14:41:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
[2011/07/06 14:41:25 | 000,000,000 | ---D | C] -- C:\Program Files\RocketDock
[2011/07/06 13:42:32 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{949DB4E4-6860-40B2-B335-860958910027}
[2011/07/06 01:41:23 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{B0BE00DC-EB32-447E-A9EF-F53C6AABA097}
[2011/07/04 13:42:19 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\Freemake
[2011/07/04 13:41:45 | 000,000,000 | ---D | C] -- C:\Users\Tim\Documents\Freemake
[2011/07/04 13:41:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
[2011/07/04 13:41:35 | 000,000,000 | ---D | C] -- C:\Program Files\Freemake
[2011/07/04 13:40:20 | 015,675,888 | ---- | C] (Ellora Assets Corporation ) -- C:\Users\Tim\FreemakeVideoConverter_2.3.0.1.exe
[2011/07/04 13:30:18 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{0F1B3AB4-6632-4DE3-AF3F-1F0BB819035E}
[2011/07/04 13:29:55 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{CBF77876-946B-47EA-85A0-90BC74AB6370}
[2011/07/04 13:24:53 | 000,000,000 | ---D | C] -- C:\Program Files\DownloadToolz
[2011/07/04 13:24:12 | 002,480,122 | ---- | C] (DownloadToolz, Inc. ) -- C:\Users\Tim\myspace_d_setup.exe
[2011/07/04 13:13:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Screen To Video
[2011/07/04 13:13:11 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\FreeScreenToVideo
[2011/07/04 13:13:11 | 000,000,000 | ---D | C] -- C:\Program Files\Free Screen To Video
[2011/07/04 12:16:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2011/07/04 12:13:35 | 015,936,200 | ---- | C] (DVDVideoSoft Limited. ) -- C:\Users\Tim\FreeYouTubeDownload304.exe
[2011/07/04 10:48:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/07/03 20:21:54 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2011/07/03 20:21:23 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers
[2011/07/03 20:20:58 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2011/07/03 20:20:57 | 000,000,000 | ---D | C] -- C:\Users\Tim\Documents\DVDVideoSoft
[2011/07/03 01:27:28 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{06CE1C1E-B5B0-4A3C-A90E-B013394F16F3}
[2011/07/02 13:26:37 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{939B2034-E308-437D-9825-8278054E9AD8}
[2011/07/02 01:26:01 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{9D501310-8BE7-4A78-BFF0-E3CAD5E45CD2}
[2011/07/01 13:25:03 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{7237014C-285E-47C4-8E02-9B2C1EB85DAE}
[2011/07/01 01:24:20 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{5F94EE85-00BC-4891-AE61-AAA3A71189F0}
[2011/07/01 00:30:10 | 000,368,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vbar332.dll
[2011/07/01 00:30:10 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\COMDLG32.OCX
[2011/07/01 00:30:10 | 000,034,304 | ---- | C] (Microsoft) -- C:\windows\System32\ntsvc.ocx
[2011/07/01 00:30:10 | 000,000,000 | ---D | C] -- C:\Program Files\FolderAccess
[2011/07/01 00:30:10 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Folder Access
[2011/06/30 13:23:31 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{80FF82A1-4088-48CA-84AC-CFD5A27D1446}
[2011/06/30 01:22:41 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{4DBAEA33-B680-42DE-BAB9-C2179E4DE08D}
[2011/06/29 13:34:03 | 001,401,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssrch.dll
[2011/06/29 13:34:02 | 001,553,920 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tquery.dll
[2011/06/29 13:34:02 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssvp.dll
[2011/06/29 13:34:02 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssph.dll
[2011/06/29 13:34:02 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mssphtb.dll
[2011/06/29 13:34:02 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msscntrs.dll
[2011/06/29 00:08:40 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{C792CD53-8844-4310-8850-7A64306B0BBD}
[2011/06/28 23:20:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2011/06/28 23:20:51 | 000,198,848 | ---- | C] (RealNetworks, Inc.) -- C:\windows\System32\rmoc3260.dll
[2011/06/28 23:20:44 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\windows\System32\pndx5016.dll
[2011/06/28 23:20:44 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\windows\System32\pndx5032.dll
[2011/06/28 23:20:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real
[2011/06/28 23:20:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011/06/28 23:20:27 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2011/06/28 23:20:25 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Real
[2011/06/28 23:20:17 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\windows\System32\nbDX.dll
[2011/06/28 23:20:17 | 000,186,880 | RHS- | C] (RadLight) -- C:\windows\System32\RLOgg.ax
[2011/06/28 23:20:17 | 000,163,328 | RHS- | C] (Gabest) -- C:\windows\System32\flvDX.dll
[2011/06/28 23:20:17 | 000,161,792 | RHS- | C] (Gabest) -- C:\windows\System32\RealMediaDX.ax
[2011/06/28 23:20:17 | 000,092,672 | RHS- | C] (RadLight) -- C:\windows\System32\RLVorbisDec.ax
[2011/06/28 23:20:17 | 000,090,112 | RHS- | C] (-) -- C:\windows\System32\TTADSSplitter.ax
[2011/06/28 23:20:17 | 000,090,112 | RHS- | C] (-) -- C:\windows\System32\TTADSDecoder.ax
[2011/06/28 23:20:17 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\windows\System32\RLTheoraDec.ax
[2011/06/28 23:20:17 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\windows\System32\msfDX.dll
[2011/06/28 23:20:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER � - by eRightSoft
[2011/06/28 23:20:16 | 000,179,200 | RHS- | C] (Gabest) -- C:\windows\System32\DiracSplitter.ax
[2011/06/28 23:20:16 | 000,169,472 | RHS- | C] (Gabest) -- C:\windows\System32\MatroskaDX.ax
[2011/06/28 23:20:16 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\windows\System32\AVCDX.ax
[2011/06/28 23:18:09 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2011/06/28 13:04:32 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\ElevatedDiagnostics
[2011/06/28 12:07:46 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{5D58F5A4-EE7D-4A63-BD1D-0AB861A82128}
[2011/06/27 12:06:11 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{501F5CD4-626D-4EC7-81FF-19F80AA17363}
[2011/06/27 00:05:20 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{CACB935B-5FB4-4943-9240-B6ED46FBE00B}
[2011/06/26 15:37:44 | 000,000,000 | R--D | C] -- C:\Users\Tim\Desktop\
[2011/06/26 12:04:13 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{2337B884-185B-4C8D-8FE5-500BF708EE73}
[2011/06/25 23:40:58 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{8BDCC8B8-1899-4A9F-825F-F9C775DBA3FD}
[2011/06/24 05:35:01 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{C62E6B56-7B6E-4811-8905-2650566DC96F}
[2011/06/23 15:16:34 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{4A4DE465-8589-42DE-B866-071536E9C4BF}
[2011/06/22 17:01:15 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{3D1469AB-0B76-424E-9C9F-C16DAF5E4BF0}
[2011/06/21 23:22:39 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{9DB4EBB3-14DC-405D-9F97-8FE46D13092F}
[2011/06/21 11:22:11 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{0CEC0EE0-DFB9-49A7-9957-DDB069573695}
[2011/06/18 22:15:15 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Local\{40E81434-4557-46EC-828F-F9B28CC6B9FD}
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/07/18 18:26:39 | 000,281,794 | ---- | M] () -- C:\Users\Tim\Desktop\salz.JPG
[2011/07/18 18:24:28 | 000,001,092 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/07/18 17:50:05 | 000,001,130 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-771618654-3341757510-301361698-1000UA.job
[2011/07/18 15:54:40 | 000,014,512 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/07/18 15:54:40 | 000,014,512 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/07/18 15:46:19 | 000,065,536 | ---- | M] () -- C:\windows\System32\Ikeext.etl
[2011/07/18 15:46:14 | 000,001,088 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/07/18 15:46:03 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2011/07/18 15:45:58 | 2411,679,744 | -HS- | M] () -- C:\hiberfil.sys
[2011/07/18 14:14:12 | 000,108,840 | ---- | M] () -- C:\Users\Tim\Desktop\item2.JPG
[2011/07/18 14:13:53 | 000,080,649 | ---- | M] () -- C:\Users\Tim\Desktop\item.JPG
[2011/07/18 03:02:39 | 000,709,874 | ---- | M] () -- C:\windows\System32\perfh007.dat
[2011/07/18 03:02:39 | 000,661,760 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2011/07/18 03:02:39 | 000,153,438 | ---- | M] () -- C:\windows\System32\perfc007.dat
[2011/07/18 03:02:39 | 000,123,816 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2011/07/18 02:34:51 | 000,001,563 | ---- | M] () -- C:\Users\Tim\Desktop\images.jpg
[2011/07/18 02:19:35 | 000,048,812 | ---- | M] () -- C:\Users\Tim\Desktop\QR TIM.jpg
[2011/07/18 01:55:24 | 000,001,294 | ---- | M] () -- C:\Users\Tim\Desktop\das-schwarze-quadrat.gif
[2011/07/17 23:03:06 | 000,164,037 | ---- | M] () -- C:\Users\Tim\Desktop\itemshop 3.JPG
[2011/07/17 23:01:15 | 000,097,355 | ---- | M] () -- C:\Users\Tim\Desktop\itemshop 2.JPG
[2011/07/17 23:00:57 | 000,158,340 | ---- | M] () -- C:\Users\Tim\Desktop\itemshop.JPG
[2011/07/15 21:15:13 | 179,479,050 | ---- | M] () -- C:\windows\MEMORY.DMP
[2011/07/15 21:04:43 | 000,032,128 | ---- | M] () -- C:\Users\Tim\Desktop\FAMAS AMMO.rar
[2011/07/15 19:01:13 | 000,001,697 | ---- | M] () -- C:\WarRock.ini
[2011/07/15 02:52:46 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\windows\System32\javaws.exe
[2011/07/15 02:52:46 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\windows\System32\javaw.exe
[2011/07/15 02:52:46 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\windows\System32\java.exe
[2011/07/15 02:52:45 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\windows\System32\deployJava1.dll
[2011/07/15 02:37:23 | 000,002,479 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk
[2011/07/15 02:37:06 | 035,624,744 | ---- | M] (Apple Inc.) -- C:\Users\Tim\SafariSetup.exe
[2011/07/15 02:29:12 | 000,908,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Tim\jre-6u26-windows-i586-iftw.exe
[2011/07/14 12:18:42 | 050,449,456 | ---- | M] (Microsoft Corporation) -- C:\Users\Tim\dotNetFx40_Full_x86_x64.exe
[2011/07/14 05:50:01 | 000,001,108 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-771618654-3341757510-301361698-1000Core.job
[2011/07/14 03:20:39 | 000,138,192 | ---- | M] (Avira GmbH) -- C:\windows\System32\drivers\avipbb.sys
[2011/07/14 03:20:39 | 000,066,616 | ---- | M] (Avira GmbH) -- C:\windows\System32\drivers\avgntflt.sys
[2011/07/14 03:08:42 | 003,767,088 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2011/07/12 02:03:19 | 000,064,113 | ---- | M] () -- C:\Users\Tim\Desktop\acccc.JPG
[2011/07/12 01:07:36 | 000,013,855 | ---- | M] () -- C:\Users\Tim\Desktop\1310423642326_GEFLLTMIR.png
[2011/07/11 15:32:54 | 000,001,126 | ---- | M] () -- C:\windows\System32\drivers\etc\hosts
[2011/07/11 15:01:01 | 000,001,201 | ---- | M] () -- C:\Users\Tim\Desktop\WarRock PServer.lnk
[2011/07/11 14:58:24 | 000,001,097 | ---- | M] () -- C:\Users\Public\Desktop\War Rock.lnk
[2011/07/11 14:38:00 | 684,368,533 | ---- | M] () -- C:\Users\Tim\Desktop\Warrock client 2.rar
[2011/07/11 14:22:35 | 684,368,448 | ---- | M] () -- C:\Users\Tim\Desktop\War_Rock_20100927.exe
[2011/07/11 04:28:33 | 000,017,745 | ---- | M] () -- C:\Users\Tim\Desktop\vierstd.JPG
[2011/07/11 03:43:09 | 129,186,449 | ---- | M] () -- C:\Users\Tim\Desktop\sound system.rar
[2011/07/09 02:05:12 | 000,065,278 | ---- | M] () -- C:\Users\Tim\Desktop\Unbenannt.JPG
[2011/07/07 19:56:04 | 020,751,400 | ---- | M] (DVDVideoSoft Limited. ) -- C:\Users\Tim\Free3DPhotoMaker.exe
[2011/07/07 19:50:13 | 000,287,040 | ---- | M] () -- C:\Users\Tim\SoftonicDownloader_fuer_free-3d-photo-maker.exe
[2011/07/07 19:38:42 | 000,287,008 | ---- | M] () -- C:\Users\Tim\SoftonicDownloader_for_cubedesktop.ex e
[2011/07/07 19:07:55 | 000,001,030 | ---- | M] () -- C:\windows\System32\drivers\etc\hosts.umbrella
[2011/07/07 00:22:01 | 698,558,606 | ---- | M] () -- C:\Users\Tim\Desktop\iPhone3,1_4.3.3_8J2_Restore.i psw
[2011/07/06 17:38:07 | 000,646,418 | ---- | M] () -- C:\Users\Tim\taskbar_transparency_v2_by_prisoner7-d3fw5ry.zip
[2011/07/06 17:36:43 | 000,000,076 | ---- | M] () -- C:\Users\Tim\Documents\taskbarhider.ini
[2011/07/06 17:08:03 | 000,001,865 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Startup\Rainmeter.lnk
[2011/07/06 17:07:40 | 003,214,827 | ---- | M] () -- C:\Users\Tim\Rainmeter-2.0.exe
[2011/07/05 17:20:07 | 529,014,112 | ---- | M] () -- C:\Users\Tim\Desktop\animation data texture.rar
[2011/07/04 13:41:03 | 015,675,888 | ---- | M] (Ellora Assets Corporation ) -- C:\Users\Tim\FreemakeVideoConverter_2.3.0.1.exe
[2011/07/04 13:24:16 | 002,480,122 | ---- | M] (DownloadToolz, Inc. ) -- C:\Users\Tim\myspace_d_setup.exe
[2011/07/04 13:11:28 | 000,287,040 | ---- | M] () -- C:\Users\Tim\SoftonicDownloader_fuer_free-screen-to-video.exe
[2011/07/04 13:10:53 | 011,239,954 | ---- | M] () -- C:\Users\Tim\Documents\clip0017.avi
[2011/07/04 13:10:11 | 012,644,202 | ---- | M] () -- C:\Users\Tim\Documents\clip0016.avi
[2011/07/04 13:09:23 | 004,204,214 | ---- | M] () -- C:\Users\Tim\Documents\clip0015.avi
[2011/07/04 13:06:30 | 005,701,800 | ---- | M] () -- C:\Users\Tim\Documents\clip0014.avi
[2011/07/04 12:14:14 | 015,936,200 | ---- | M] (DVDVideoSoft Limited. ) -- C:\Users\Tim\FreeYouTubeDownload304.exe
[2011/07/01 10:52:37 | 000,000,000 | ---- | M] () -- C:\windows\System32\mslck.dat
[2011/07/01 00:34:34 | 000,000,032 | ---- | M] () -- C:\windows\System32\Mlkf.dll
[2011/06/28 23:20:51 | 000,198,848 | ---- | M] (RealNetworks, Inc.) -- C:\windows\System32\rmoc3260.dll
[2011/06/28 23:20:44 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\windows\System32\pndx5016.dll
[2011/06/28 23:20:44 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\windows\System32\pndx5032.dll
[2011/06/28 23:20:43 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\windows\System32\pncrt.dll
[2011/06/26 01:01:27 | 000,201,728 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\WhcLabs Public D3D.exe
[2011/06/25 23:37:07 | 000,212,992 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\chrtmp
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/07/18 18:25:11 | 000,281,794 | ---- | C] () -- C:\Users\Tim\Desktop\salz.JPG
[2011/07/18 14:14:12 | 000,108,840 | ---- | C] () -- C:\Users\Tim\Desktop\item2.JPG
[2011/07/18 14:13:52 | 000,080,649 | ---- | C] () -- C:\Users\Tim\Desktop\item.JPG
[2011/07/18 02:34:55 | 000,001,563 | ---- | C] () -- C:\Users\Tim\Desktop\images.jpg
[2011/07/18 02:19:33 | 000,048,812 | ---- | C] () -- C:\Users\Tim\Desktop\QR TIM.jpg
[2011/07/18 01:55:24 | 000,001,294 | ---- | C] () -- C:\Users\Tim\Desktop\das-schwarze-quadrat.gif
[2011/07/17 23:03:06 | 000,164,037 | ---- | C] () -- C:\Users\Tim\Desktop\itemshop 3.JPG
[2011/07/17 23:01:15 | 000,097,355 | ---- | C] () -- C:\Users\Tim\Desktop\itemshop 2.JPG
[2011/07/17 23:00:57 | 000,158,340 | ---- | C] () -- C:\Users\Tim\Desktop\itemshop.JPG
[2011/07/15 21:04:43 | 000,032,128 | ---- | C] () -- C:\Users\Tim\Desktop\FAMAS AMMO.rar
[2011/07/15 02:37:23 | 000,002,479 | ---- | C] () -- C:\Users\Public\Desktop\Safari.lnk
[2011/07/12 02:03:18 | 000,064,113 | ---- | C] () -- C:\Users\Tim\Desktop\acccc.JPG
[2011/07/12 00:34:38 | 000,013,855 | ---- | C] () -- C:\Users\Tim\Desktop\1310423642326_GEFLLTMIR.png
[2011/07/11 14:58:24 | 000,001,097 | ---- | C] () -- C:\Users\Public\Desktop\War Rock.lnk
[2011/07/11 14:30:38 | 000,001,201 | ---- | C] () -- C:\Users\Tim\Desktop\WarRock PServer.lnk
[2011/07/11 14:23:29 | 684,368,533 | ---- | C] () -- C:\Users\Tim\Desktop\Warrock client 2.rar
[2011/07/11 13:48:13 | 684,368,448 | ---- | C] () -- C:\Users\Tim\Desktop\War_Rock_20100927.exe
[2011/07/11 04:28:33 | 000,017,745 | ---- | C] () -- C:\Users\Tim\Desktop\vierstd.JPG
[2011/07/11 03:40:57 | 129,186,449 | ---- | C] () -- C:\Users\Tim\Desktop\sound system.rar
[2011/07/09 01:59:45 | 000,065,278 | ---- | C] () -- C:\Users\Tim\Desktop\Unbenannt.JPG
[2011/07/07 19:50:13 | 000,287,040 | ---- | C] () -- C:\Users\Tim\SoftonicDownloader_fuer_free-3d-photo-maker.exe
[2011/07/07 19:38:42 | 000,287,008 | ---- | C] () -- C:\Users\Tim\SoftonicDownloader_for_cubedesktop.ex e
[2011/07/06 23:35:18 | 000,001,130 | ---- | C] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-771618654-3341757510-301361698-1000UA.job
[2011/07/06 23:35:18 | 000,001,108 | ---- | C] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-771618654-3341757510-301361698-1000Core.job
[2011/07/06 23:29:42 | 698,558,606 | ---- | C] () -- C:\Users\Tim\Desktop\iPhone3,1_4.3.3_8J2_Restore.i psw
[2011/07/06 23:28:42 | 019,221,504 | ---- | C] () -- C:\Users\Tim\Desktop\redsn0w.exe
[2011/07/06 17:39:19 | 000,949,549 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Startup\Taskbar Transparency.exe
[2011/07/06 17:38:06 | 000,646,418 | ---- | C] () -- C:\Users\Tim\taskbar_transparency_v2_by_prisoner7-d3fw5ry.zip
[2011/07/06 17:27:30 | 000,000,076 | ---- | C] () -- C:\Users\Tim\Documents\taskbarhider.ini
[2011/07/06 17:08:03 | 000,001,865 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Startup\Rainmeter.lnk
[2011/07/06 17:07:40 | 003,214,827 | ---- | C] () -- C:\Users\Tim\Rainmeter-2.0.exe
[2011/07/05 17:11:09 | 529,014,112 | ---- | C] () -- C:\Users\Tim\Desktop\animation data texture.rar
[2011/07/04 13:11:26 | 000,287,040 | ---- | C] () -- C:\Users\Tim\SoftonicDownloader_fuer_free-screen-to-video.exe
[2011/07/04 13:10:35 | 011,239,954 | ---- | C] () -- C:\Users\Tim\Documents\clip0017.avi
[2011/07/04 13:09:52 | 012,644,202 | ---- | C] () -- C:\Users\Tim\Documents\clip0016.avi
[2011/07/04 13:09:07 | 004,204,214 | ---- | C] () -- C:\Users\Tim\Documents\clip0015.avi
[2011/07/04 13:05:56 | 005,701,800 | ---- | C] () -- C:\Users\Tim\Documents\clip0014.avi
[2011/07/01 00:34:15 | 000,000,000 | ---- | C] () -- C:\windows\System32\mslck.dat
[2011/07/01 00:33:27 | 000,000,032 | ---- | C] () -- C:\windows\System32\Mlkf.dll
[2011/07/01 00:30:10 | 000,569,368 | ---- | C] () -- C:\windows\System32\olelib.tlb
[2011/07/01 00:30:10 | 000,389,120 | ---- | C] () -- C:\windows\System32\actskn43.ocx
[2011/07/01 00:30:10 | 000,153,088 | ---- | C] () -- C:\windows\System32\fldlckun.exe
[2011/06/28 23:20:17 | 000,107,520 | RHS- | C] () -- C:\windows\System32\RLMPCDec.ax
[2011/06/28 23:20:17 | 000,070,656 | RHS- | C] () -- C:\windows\System32\RLAPEDec.ax
[2011/06/28 23:20:17 | 000,051,712 | RHS- | C] () -- C:\windows\System32\RLSpeexDec.ax
[2011/06/28 23:20:16 | 000,227,328 | RHS- | C] () -- C:\windows\System32\ac3DX.ax
[2011/06/28 23:20:16 | 000,175,104 | RHS- | C] () -- C:\windows\System32\CoreAAC.ax
[2011/06/28 23:20:16 | 000,120,832 | RHS- | C] () -- C:\windows\System32\MPCDx.ax
[2011/06/28 23:20:16 | 000,097,280 | RHS- | C] () -- C:\windows\System32\FLACDX.ax
[2011/06/28 23:20:16 | 000,081,920 | RHS- | C] () -- C:\windows\System32\aac_parser.ax
[2011/06/26 01:00:59 | 000,201,728 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\WhcLabs Public D3D.exe
[2011/05/30 12:34:57 | 000,003,691 | ---- | C] () -- C:\windows\jxrwnc16.ini
[2011/05/22 15:53:13 | 000,212,992 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\chrtmp
[2011/05/22 15:53:11 | 000,076,720 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\screenshot_007.jpg
[2011/05/02 18:13:20 | 000,002,433 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\F3BA.5EC
[2011/04/16 16:40:23 | 000,175,298 | ---- | C] () -- C:\Users\Tim\AppData\Local\debuggee.mdmp
[2011/04/14 15:09:04 | 000,000,056 | -H-- | C] () -- C:\windows\System32\ezsidmv.dat
[2011/03/01 15:16:27 | 000,001,466 | ---- | C] () -- C:\windows\System32\mmcss_backup.dat
[2011/02/19 02:00:14 | 000,139,432 | -H-- | C] () -- C:\windows\System32\mlfcache.dat
[2011/01/24 23:03:52 | 000,008,192 | ---- | C] () -- C:\Users\Tim\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/13 21:48:24 | 000,000,059 | ---- | C] () -- C:\Users\Tim\AppData\Roaming\GoodnightTimer.ini
[2010/11/13 21:12:29 | 000,065,536 | ---- | C] () -- C:\windows\IFinst27.exe
[2010/01/07 15:48:44 | 000,000,002 | ---- | C] () -- C:\windows\HotFixList.ini
[2010/01/07 15:34:45 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2009/09/23 00:05:23 | 000,709,874 | ---- | C] () -- C:\windows\System32\perfh007.dat
[2009/09/23 00:05:23 | 000,295,922 | ---- | C] () -- C:\windows\System32\perfi007.dat
[2009/09/23 00:05:23 | 000,153,438 | ---- | C] () -- C:\windows\System32\perfc007.dat
[2009/09/23 00:05:23 | 000,038,104 | ---- | C] () -- C:\windows\System32\perfd007.dat
[2009/09/22 07:45:54 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe
[2009/09/22 07:21:26 | 000,073,728 | ---- | C] () -- C:\windows\System32\RtNicProp32.dll
[2009/09/11 02:01:44 | 000,041,872 | ---- | C] () -- C:\windows\System32\xfcodec.dll
[2009/07/14 06:57:37 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat
[2009/07/14 06:33:53 | 003,767,088 | ---- | C] () -- C:\windows\System32\FNTCACHE.DAT
[2009/07/14 04:05:48 | 000,661,760 | ---- | C] () -- C:\windows\System32\perfh009.dat
[2009/07/14 04:05:48 | 000,291,294 | ---- | C] () -- C:\windows\System32\perfi009.dat
[2009/07/14 04:05:48 | 000,123,816 | ---- | C] () -- C:\windows\System32\perfc009.dat
[2009/07/14 04:05:48 | 000,031,548 | ---- | C] () -- C:\windows\System32\perfd009.dat
[2009/07/14 04:05:05 | 000,000,741 | ---- | C] () -- C:\windows\System32\NOISE.DAT
[2009/07/14 04:04:11 | 000,215,943 | ---- | C] () -- C:\windows\System32\dssec.dat
[2009/07/14 01:55:01 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin
[2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\windows\System32\BthpanContextHandler.dll
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\windows\System32\BWContextHandler.dll
[2009/07/14 00:09:19 | 000,982,196 | ---- | C] () -- C:\windows\System32\igkrng500.bin
[2009/07/14 00:09:19 | 000,417,344 | ---- | C] () -- C:\windows\System32\igcompkrng500.bin
[2009/07/14 00:09:19 | 000,139,824 | ---- | C] () -- C:\windows\System32\igfcg500.bin
[2009/07/14 00:09:19 | 000,097,448 | ---- | C] () -- C:\windows\System32\igfcg500m.bin
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\windows\System32\mlang.dat
[2007/04/27 10:43:58 | 000,120,200 | ---- | C] () -- C:\windows\System32\DLLDEV32i.dll
[2005/04/08 04:16:43 | 000,629,077 | -H-- | C] () -- C:\Users\Tim\AppData\Roaming\Timlog.dat

< End of report >

VON OTL.exe sollte man ja hier posten ....

Am besten postest du die Scans in den HELP Thread von BlackLegend, der kennt sich damit aus.

Page 5 of 24

« First

Last »