| |
| |||||||
Log-Analyse und Auswertung: Lautstärkeregler selbstständig auf 0 - PC hat EigenlebenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
11.11.2011, 09:31
| #1 |
| |  Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben Hallo Ihr, ich verzweifel. Ich hoffe, Ihr könnt mir helfen. Habe gegoogelt, aber nichts hilfreiches gefunden. Mein PC hat seit ca. 2 Monaten ein Eigenleben. (Vista 32 Home, Avast Antivirenprogramm, Zonealarm, Spybot, Antimalbytes, 2-Realtek Soundkarte, IE 9, FF 8) Ordnersymbole verschwinden, manchmal sind sie wieder da. Bekomme seltsame Emails, habe angeblich mehrere Kreuzfahrten gleichzeitig gebucht, einige Seiten besucht (Im Verlauf ist die Seite überhaupt nicht vorhanden) und besonders, was die Sicherheit oder Datenschutz angeht, sind einige Einstellungen hellblau unterlegt, was ich nicht auswählen kann. Auch bei Firefox und IE. Avira. Seit mehreren Wochen geht der Lautstärkeregler (2-Realtek) nach kurzer Zeit selbstständig auf 0. Hochziehen geht nicht, er fällt sofort ab, wie von einem Gummiband gezogen. (Gerätemanager zeigt keine Probleme). Wenn dieses Problem auftritt, ist er mit einem Rahmen aus kleinen Punkten umgeben, wie dann auch andere Ordner/Programme auf dem Desktop, (die dann ebenfalls Probleme machen - teilweise kann man sie nicht mehr starten). Selbst nach einem Neustart. Es sind nur wenige wichtige Programme im Autostart. Wenn ich den PC starte, ist das Problem entweder gleich da, oder spät. nach ein paar Minuten. Hatte Firefox und IE deinstalliert, aber daran lag es nicht. Realtek-Treiber deinstalliert und neu – nichts geändert. Realplayer drauf, der machte Schwierigkeiten, habe ihn deinstalliert. Als Avira, Spybot und Adaware nichts gefunden hatten, habe ich das System neu installiert. Es war nur Vista, ServicePack2 und die üblichen Updates und Programme von Microsoft auf dem Rechner – das Problem war wieder da!! Dann IE 9, FF 6, Avira, Spybot und Zonealarm dazu. Habe nicht mehrere Firewalls und Antivirenprogramme am laufen. Der PC ist sehr langsam, friert ein, ab und zu Bluescreen, Programme schließen sich plötzlich oder sind überhaupt nicht mehr da. Dann kann man sie plötzlich wieder öffnen. Oder auch nicht. Selbst bei OTL und GMER kam häufiger „keine Rückmeldung“ und der Hintergrund war hell. Wenn ich auf verschiedene Dateien zugreifen möchte, steht jetzt „Zugriff verweigert“, was vorher nicht war. Realtek-Treiber entfernt, neu gestartet, neuer Treiber rauf = gleiches Problem. Nochmals Virenscanner, Spybot (Browser ist Immunisiert, Tea-Timer) und Antimalwarebytes durchlaufen lassen (als Admin). Die Probleme sind nach wie vor da. Dann von MS Fix-it laufen lassen, fand Fehler und hatte sie angeblich behoben. Jetzt – nachträglich sind wieder Programme installiert. (auch Tune-up und ccleaner. Letzteres nur 1x durchlaufen lassen). Im Moment geht der Lautstärkeregler wieder.??? (habe nichts verändert). Hoffe, habe soweit alles beschrieben. Danke schon mal im Voraus  – und bitte habt Geduld, ich bin keine PC-Expertin  Die Ergebnisse:OTL Logfile: Code:
ATTFilter OTL logfile created on: 10.11.2011 10:04:06 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = c:\Users\Sylvester\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,05 Gb Available Physical Memory | 68,36% Memory free 6,20 Gb Paging File | 5,10 Gb Available in Paging File | 82,31% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 91,41 Gb Total Space | 54,30 Gb Free Space | 59,40% Space Free | Partition Type: NTFS Drive D: | 20,00 Gb Total Space | 10,45 Gb Free Space | 52,26% Space Free | Partition Type: FAT32 Drive E: | 47,21 Gb Total Space | 11,98 Gb Free Space | 25,37% Space Free | Partition Type: NTFS Drive F: | 46,80 Gb Total Space | 28,58 Gb Free Space | 61,08% Space Free | Partition Type: NTFS Drive G: | 86,52 Gb Total Space | 16,71 Gb Free Space | 19,32% Space Free | Partition Type: NTFS Drive H: | 20,23 Gb Total Space | 7,12 Gb Free Space | 35,17% Space Free | Partition Type: NTFS Drive I: | 47,18 Gb Total Space | 42,85 Gb Free Space | 90,83% Space Free | Partition Type: NTFS Drive J: | 46,43 Gb Total Space | 6,13 Gb Free Space | 13,19% Space Free | Partition Type: NTFS Drive K: | 36,96 Gb Total Space | 27,98 Gb Free Space | 75,70% Space Free | Partition Type: NTFS Computer Name: SYLVESTER-PC | User Name: Sylvester | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - c:\Users\Sylvester\Downloads\OTL.exe (OldTimer Tools) PRC - I:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software) PRC - I:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) PRC - i:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) PRC - C:\Programme\CheckPoint\ZAForceField\ISWSVC.exe (Check Point Software Technologies) PRC - I:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE (Microsoft Corporation) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Windows\System32\conime.exe (Microsoft Corporation) PRC - I:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.) PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) PRC - C:\Programme\Sceneo\AbsolutTV\Services\PVR\pvrservice.exe (Buhl Data Service GmbH) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) PRC - C:\Programme\Medion\MEDIONbox\Program\GCS.exe (Empolis GmbH) PRC - c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH) ========== Modules (No Company Name) ========== ========== Win32 Services (SafeList) ========== SRV - (McComponentHostService) -- File not found SRV - (TuneUp.Defrag) -- I:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (GoogleDesktopManager) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe (Google) SRV - (NitroReaderDriverReadSpool2) -- I:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software) SRV - (avast! Antivirus) -- i:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV - (MatSvc) -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe (Microsoft Corporation) SRV - (vsmon) -- C:\Windows\System32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD) SRV - (IswSvc) -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe (Check Point Software Technologies) SRV - (WinHttpAutoProxySvc) -- winhttp.dll (Microsoft Corporation) SRV - (SBSDWSCService) -- I:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.) SRV - (srvcPVR) -- C:\Programme\Sceneo\AbsolutTV\Services\PVR\pvrservice.exe (Buhl Data Service GmbH) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (GnabService) -- c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH) SRV - (FirebirdServerMAGIXInstance) -- C:\Programme\ALDI Foto Service Nord\Common\Database\bin\fbserver.exe (MAGIX®) ========== Driver Services (SafeList) ========== DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software) DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software) DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software) DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software) DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software) DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software) DRV - (ISWKL) -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys (Check Point Software Technologies) DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek ) DRV - (Vsdatant) -- C:\Windows\System32\drivers\vsdatant.sys (Check Point Software Technologies LTD) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) -- C:\Programme\HomeCinema\PlayMovie\000.fcl (Cyberlink Corp.) DRV - ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) -- C:\Programme\HomeCinema\PowerDVD\000.fcl (Cyberlink Corp.) DRV - (ahcix86s) -- C:\Windows\system32\DRIVERS\ahcix86s.sys (AMD Technologies Inc.) DRV - (netr28u) -- C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.) DRV - (amdide) -- C:\Windows\system32\DRIVERS\amdide.sys (Advanced Micro Devices) DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.) DRV - (EverestDriver) -- i:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDA IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDA IE - HKLM\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.com/ [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hiergehtslos.de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKCU\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - user.js..browser.search.selectedEngine: "Suche" FF - user.js..browser.search.order.1: "Suche" FF - user.js..browser.search.defaultenginename: "Suche" FF - user.js..keyword.URL: "hxxp://www.finduny.com?client=mozilla-firefox&cd=UTF-8&search=1&q=" FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: I:\Program Files\Nitro PDF\Reader 2\npnitromozilla.dll ( ) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.81\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.81\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: i:\Program Files\Alwil Software\Avast5\WebRep\FF [2011.10.27 16:44:30 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: i:\Program Files\Mozilla Firefox\components [2011.11.09 18:30:35 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: I:\Program Files\Mozilla Firefox\components [2011.11.09 18:30:35 | 000,000,000 | ---D | M] [2011.11.03 07:02:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sylvester\AppData\Roaming\mozilla\Extensions [2011.10.27 16:44:30 | 000,000,000 | ---D | M] (avast! WebRep) -- I:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\WEBREP\FF ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.4.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\npctrl.1.0.30109.0.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.106\pdf.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: avast! WebRep = C:\Users\Sylvester\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1289_0\ CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\Sylvester\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\ O1 HOSTS File: ([2011.10.28 08:49:38 | 000,437,862 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 15062 more lines... O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - I:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - i:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) O2 - BHO: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - i:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (xplugin) - {DFEFCDEE-CF1A-4FC8-88AD-18272BE37E29} - C:\Users\Sylvester\AppData\Roaming\xplugin\toolbar.dll () O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKLM\..\Toolbar: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Program Files\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm-Sicherheit Toolbar) - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} - C:\Program Files\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.) O4 - HKLM..\Run: [avast5] i:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [ZoneAlarm Client] I:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD) O4 - HKCU..\Run: [SpybotSD TeaTimer] i:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.) O8 - Extra context menu item: Nach Microsoft &Excel exportieren - I:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.) O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 File not found O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 File not found O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - I:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O13 - gopher Prefix: missing O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6EBCC3D3-8898-4ECD-88C1-AAD8E686EFDB}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) -C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: G:\bild\Halloween\halloween-eve.jpg O24 - Desktop BackupWallPaper: G:\bild\Halloween\halloween-eve.jpg O29 - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\Microsoft ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\Microsoft ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\System32\Adobe ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {EFCE7BE0-510E-4932-9475-F44CD90DE16A} - Microsoft .NET Framework 1.1 Security Update (KB2572067) ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.11.09 18:14:30 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\QuickPar [2011.11.08 10:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF [2011.11.04 09:59:00 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Ulead Systems [2011.11.01 13:14:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities [2011.11.01 05:51:14 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Nitro PDF [2011.10.31 10:58:24 | 006,111,232 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe [2011.10.31 10:58:24 | 001,929,216 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioEQ.dll [2011.10.31 10:58:24 | 001,773,568 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesLib.dll [2011.10.31 10:58:24 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2011.10.31 10:58:24 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll [2011.10.31 10:58:24 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll [2011.10.31 10:58:24 | 000,155,648 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO20.dll [2011.10.31 10:58:24 | 000,140,288 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\FMAPO.dll [2011.10.31 10:58:24 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2011.10.31 10:58:24 | 000,126,976 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO.dll [2011.10.31 10:58:24 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2011.10.31 10:27:16 | 000,000,000 | ---D | C] -- C:\Program Files\Guru3D.com [2011.10.31 10:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys [2011.10.31 10:00:53 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\xplugin [2011.10.31 09:23:25 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Malwarebytes [2011.10.31 09:23:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011.10.31 09:23:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011.10.31 09:23:09 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.10.31 08:56:59 | 000,026,408 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll [2011.10.31 08:56:59 | 000,017,704 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll [2011.10.31 08:56:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF [2011.10.31 08:54:42 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Downloaded Installations [2011.10.31 08:49:33 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Paint.NET [2011.10.31 08:40:20 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\DivX [2011.10.31 08:39:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine [2011.10.31 08:39:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus [2011.10.31 08:38:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared [2011.10.31 08:31:10 | 000,000,000 | ---D | C] -- C:\Program Files\DivX [2011.10.31 08:29:25 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX [2011.10.31 07:47:31 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\dvdcss [2011.10.31 07:41:38 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ratDVD [2011.10.31 07:41:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ratDVD [2011.10.30 10:50:10 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2011.10.29 20:20:16 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\vlc [2011.10.29 20:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2011.10.29 20:19:28 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN [2011.10.29 07:55:32 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\FixItCenter [2011.10.29 07:48:27 | 000,000,000 | ---D | C] -- C:\Windows\MATS [2011.10.29 07:48:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Fix it Center [2011.10.29 07:20:03 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ElevatedDiagnostics [2011.10.28 17:56:25 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2011.10.28 17:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rootkit Unhooker [2011.10.28 11:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2011.10.28 09:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices [2011.10.28 09:26:15 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell [2011.10.28 08:43:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy [2011.10.28 08:43:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2011.10.28 08:36:30 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2011.10.28 07:58:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Real [2011.10.28 07:47:02 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Real [2011.10.28 07:37:29 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\PackageAware [2011.10.28 06:54:47 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QuickPar [2011.10.28 06:54:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar [2011.10.28 00:33:22 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Ashampoo [2011.10.28 00:32:27 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ashampoo [2011.10.28 00:32:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2011.10.28 00:32:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo [2011.10.27 23:22:59 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Softplicity [2011.10.27 23:15:54 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\CyberLink [2011.10.27 23:15:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema [2011.10.27 23:15:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\CyberLink [2011.10.27 22:10:25 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\.gimp-2.6 [2011.10.27 22:10:24 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\gegl-0.0 [2011.10.27 22:06:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP [2011.10.27 21:28:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2011.10.27 21:27:46 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2011.10.27 21:27:46 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2011.10.27 20:59:20 | 000,000,000 | RH-D | C] -- C:\MSOCache [2011.10.27 20:58:46 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Apple Computer [2011.10.27 20:16:03 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\UseNeXT [2011.10.27 20:16:03 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\UseNeXT [2011.10.27 20:15:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT [2011.10.27 20:10:21 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop\MP3 und Video [2011.10.27 20:10:11 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop\Brennprogramme [2011.10.27 19:50:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2011.10.27 19:49:49 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2011.10.27 19:49:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2011.10.27 19:48:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2011.10.27 19:23:41 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Macromedia [2011.10.27 19:02:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop\Graphikprogramme [2011.10.27 18:35:08 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Gutscheinmieze [2011.10.27 18:33:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal Backup [2011.10.27 18:29:42 | 000,794,112 | R--- | C] (Fred's Software) -- C:\Users\Sylvester\Desktop\PRINTKEY2000.EXE [2011.10.27 18:26:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2011.10.27 18:25:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 [2011.10.27 17:51:07 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\TuneUp Software [2011.10.27 17:50:00 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2011.10.27 17:49:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2011.10.27 17:26:09 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Nero [2011.10.27 17:07:29 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Google [2011.10.27 17:04:40 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Mozilla [2011.10.27 17:04:40 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Mozilla [2011.10.27 16:54:14 | 000,101,720 | ---- | C] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys [2011.10.27 16:52:45 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Desktop\Programme [2011.10.27 16:52:20 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE [2011.10.27 16:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft [2011.10.27 16:44:32 | 000,442,200 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys [2011.10.27 16:39:57 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\ForceField Shared Files [2011.10.27 16:39:57 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\CheckPoint [2011.10.27 16:39:28 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit [2011.10.27 16:39:26 | 000,000,000 | ---D | C] -- C:\Program Files\ZoneAlarm-Sicherheit [2011.10.27 16:39:26 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Conduit [2011.10.27 16:37:27 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint [2011.10.27 16:37:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZoneAlarm [2011.10.27 16:37:23 | 000,046,592 | ---- | C] (Zone Labs Inc.) -- C:\Windows\System32\vsutil_loc0407.dll [2011.10.27 16:36:51 | 000,000,000 | ---D | C] -- C:\Windows\System32\ZoneLabs [2011.10.27 16:36:04 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint [2011.10.27 16:36:03 | 000,000,000 | ---D | C] -- C:\Windows\Internet Logs [2011.10.27 16:34:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2011.10.27 16:30:26 | 000,020,568 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys [2011.10.27 16:30:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus [2011.10.27 16:30:25 | 000,320,856 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys [2011.10.27 16:30:24 | 000,052,568 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys [2011.10.27 16:30:24 | 000,034,392 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys [2011.10.27 16:30:23 | 000,054,616 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2011.10.27 16:30:01 | 000,199,304 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe [2011.10.27 16:30:01 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr [2011.10.27 16:29:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software [2011.10.27 14:10:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\vi-VN [2011.10.27 14:10:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\eu-ES [2011.10.27 14:10:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\ca-ES [2011.10.27 14:08:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview [2011.10.27 14:06:23 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Apple [2011.10.27 14:00:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders [2011.10.27 13:59:55 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Adobe [2011.10.27 13:59:55 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Adobe [2011.10.27 13:49:05 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\Documents\Eigene Google Gadgets [2011.10.27 13:48:39 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\PlayMovie [2011.10.27 13:48:38 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\ApplicationHistory [2011.10.27 13:48:37 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Google [2011.10.27 13:48:33 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011.10.27 13:48:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2011.10.27 13:48:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Searches [2011.10.27 13:48:25 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2011.10.27 13:48:14 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Identities [2011.10.27 13:48:11 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Contacts [2011.10.27 13:48:01 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\VirtualStore [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Vorlagen [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\AppData\Local\Verlauf [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\AppData\Local\Temporary Internet Files [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Startmenü [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\SendTo [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Recent [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Netzwerkumgebung [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Lokale Einstellungen [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Documents\Eigene Videos [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Documents\Eigene Musik [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Eigene Dateien [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Documents\Eigene Bilder [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Druckumgebung [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Cookies [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\AppData\Local\Anwendungsdaten [2011.10.27 13:47:57 | 000,000,000 | -HSD | C] -- C:\Users\Sylvester\Anwendungsdaten [2011.10.27 13:47:52 | 000,000,000 | --SD | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Videos [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Saved Games [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Pictures [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Music [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Links [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Favorites [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Downloads [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Documents [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\Desktop [2011.10.27 13:47:52 | 000,000,000 | R--D | C] -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2011.10.27 13:47:52 | 000,000,000 | -H-D | C] -- C:\Users\Sylvester\AppData [2011.10.27 13:47:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Temp [2011.10.27 13:47:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Local\Microsoft [2011.10.27 13:47:52 | 000,000,000 | ---D | C] -- C:\Users\Sylvester\AppData\Roaming\Media Center Programs [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Programme [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2011.10.27 13:44:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2011.10.27 13:39:14 | 000,000,000 | ---D | C] -- C:\Program Files\GoogleEULA [2011.10.27 13:39:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Google [2011.10.27 13:39:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Desktop [2011.10.27 13:39:00 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2011.10.27 13:37:25 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2011.10.27 13:32:18 | 000,000,000 | -HSD | C] -- C:\System Volume Information ========== Files - Modified Within 30 Days ========== [2011.11.10 10:03:16 | 000,002,475 | ---- | M] () -- C:\Users\Sylvester\Desktop\Microsoft Office Word 2003.lnk [2011.11.10 09:55:04 | 000,664,044 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.11.10 09:55:04 | 000,625,384 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.11.10 09:55:04 | 000,142,416 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.11.10 09:55:04 | 000,116,946 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.11.10 09:48:17 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.11.10 09:47:10 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.11.10 09:47:10 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.11.10 09:47:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.11.10 09:46:33 | 3219,316,736 | -HS- | M] () -- C:\hiberfil.sys [2011.11.10 09:34:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.11.08 10:31:36 | 000,001,703 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Reader.lnk [2011.11.03 07:02:19 | 000,000,669 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2011.11.02 12:49:54 | 000,000,000 | ---- | M] () -- C:\Users\Sylvester\defogger_reenable [2011.11.02 07:18:03 | 000,000,306 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2011.11.01 13:31:27 | 000,000,870 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk [2011.10.31 10:27:23 | 019,981,960 | ---- | M] () -- C:\Program Files\Realtek_R190-[Guru3D.com].exe [2011.10.31 10:25:52 | 021,499,867 | ---- | M] () -- C:\Program Files\Realtek_R191-[Guru3D.com].exe [2011.10.31 09:43:19 | 031,126,033 | ---- | M] () -- C:\Program Files\6305_Vista_Win7_PG537.zip [2011.10.30 05:45:36 | 000,002,701 | ---- | M] () -- C:\Users\Sylvester\Desktop\Microsoft Office Excel 2003.lnk [2011.10.29 09:42:43 | 000,001,024 | ---- | M] () -- C:\Users\Sylvester\.rnd [2011.10.29 09:24:45 | 000,018,316 | ---- | M] () -- C:\Users\Sylvester\Documents\cc_20111029_102439.reg [2011.10.29 07:20:01 | 000,033,280 | ---- | M] () -- C:\Users\Sylvester\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.10.28 19:51:09 | 000,353,376 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.10.28 11:49:54 | 000,000,000 | ---- | M] () -- C:\Windows\AutoPlayDesign.INI [2011.10.28 09:25:58 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf [2011.10.28 08:49:38 | 000,437,862 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts [2011.10.28 08:39:24 | 000,019,360 | ---- | M] () -- C:\Users\Sylvester\Documents\cc_20111028_093915.reg [2011.10.27 23:08:39 | 000,000,216 | ---- | M] () -- C:\Users\Sylvester\Desktop\E-Mail.lnk [2011.10.27 22:01:58 | 000,000,732 | ---- | M] () -- C:\Users\Sylvester\Desktop\IrfanView Thumbnails.lnk [2011.10.27 21:28:58 | 000,000,400 | ---- | M] () -- C:\Windows\ODBC.INI [2011.10.27 20:48:55 | 000,000,693 | ---- | M] () -- C:\Users\Sylvester\Desktop\UseNeXT.lnk [2011.10.27 16:53:49 | 000,101,720 | ---- | M] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys [2011.10.27 16:44:32 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2011.10.27 16:40:12 | 000,421,442 | -H-- | M] () -- C:\Windows\System32\drivers\vsconfig.xml [2011.10.27 16:37:24 | 000,005,977 | ---- | M] () -- C:\Windows\System32\vsconfig.xml [2011.10.27 14:31:04 | 000,000,680 | ---- | M] () -- C:\Users\Sylvester\AppData\Local\d3d9caps.dat [2011.10.27 14:30:54 | 000,000,953 | ---- | M] () -- C:\Users\Sylvester\Desktop\Internet Explorer.lnk [2011.10.27 14:25:10 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat [2011.10.27 14:25:10 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat [2011.10.27 14:25:02 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2011.10.27 13:48:38 | 000,000,097 | ---- | M] () -- C:\Users\Sylvester\AppData\Local\fusioncache.dat [2011.10.27 13:42:08 | 000,060,826 | ---- | M] () -- C:\Windows\System32\license.rtf [2011.10.25 16:13:44 | 000,017,704 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll [2011.10.25 16:13:42 | 000,026,408 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll ========== Files Created - No Company Name ========== [2011.11.08 10:31:36 | 000,001,872 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro PDF Reader 2.lnk [2011.11.08 10:31:36 | 000,001,703 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Reader.lnk [2011.11.03 07:02:19 | 000,000,669 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2011.11.03 07:02:19 | 000,000,669 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2011.11.02 12:49:54 | 000,000,000 | ---- | C] () -- C:\Users\Sylvester\defogger_reenable [2011.11.02 07:18:03 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2011.11.01 13:14:43 | 000,000,870 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk [2011.11.01 13:14:43 | 000,000,870 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities.lnk [2011.10.31 11:00:16 | 3219,316,736 | -HS- | C] () -- C:\hiberfil.sys [2011.10.31 10:59:01 | 000,000,553 | ---- | C] () -- C:\Windows\USetup.iss [2011.10.31 10:23:16 | 019,981,960 | ---- | C] () -- C:\Program Files\Realtek_R190-[Guru3D.com].exe [2011.10.31 10:22:27 | 021,499,867 | ---- | C] () -- C:\Program Files\Realtek_R191-[Guru3D.com].exe [2011.10.31 09:34:59 | 031,126,033 | ---- | C] () -- C:\Program Files\6305_Vista_Win7_PG537.zip [2011.10.31 08:51:13 | 000,000,817 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk [2011.10.29 09:43:35 | 000,774,144 | ---- | C] () -- C:\Windows\System32\NEROINSTAEC43759.DB [2011.10.29 09:42:41 | 000,001,024 | ---- | C] () -- C:\Users\Sylvester\.rnd [2011.10.29 09:24:42 | 000,018,316 | ---- | C] () -- C:\Users\Sylvester\Documents\cc_20111029_102439.reg [2011.10.29 07:48:29 | 000,000,858 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Fix it Center.lnk [2011.10.28 11:49:54 | 000,000,000 | ---- | C] () -- C:\Windows\AutoPlayDesign.INI [2011.10.28 09:25:58 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf [2011.10.28 08:48:57 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs [2011.10.28 08:48:57 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl [2011.10.28 08:48:56 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml [2011.10.28 08:39:18 | 000,019,360 | ---- | C] () -- C:\Users\Sylvester\Documents\cc_20111028_093915.reg [2011.10.27 22:01:58 | 000,000,732 | ---- | C] () -- C:\Users\Sylvester\Desktop\IrfanView Thumbnails.lnk [2011.10.27 21:28:58 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI [2011.10.27 21:28:22 | 000,002,701 | ---- | C] () -- C:\Users\Sylvester\Desktop\Microsoft Office Excel 2003.lnk [2011.10.27 21:28:22 | 000,002,475 | ---- | C] () -- C:\Users\Sylvester\Desktop\Microsoft Office Word 2003.lnk [2011.10.27 20:15:59 | 000,000,693 | ---- | C] () -- C:\Users\Sylvester\Desktop\UseNeXT.lnk [2011.10.27 19:49:51 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2011.10.27 18:27:22 | 000,000,641 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Twin.lnk [2011.10.27 18:18:46 | 002,501,921 | ---- | C] () -- C:\Windows\System32\wlan.tmf [2011.10.27 16:55:32 | 000,000,216 | ---- | C] () -- C:\Users\Sylvester\Desktop\E-Mail.lnk [2011.10.27 16:37:24 | 000,005,977 | ---- | C] () -- C:\Windows\System32\vsconfig.xml [2011.10.27 16:36:51 | 000,421,442 | -H-- | C] () -- C:\Windows\System32\drivers\vsconfig.xml [2011.10.27 16:30:35 | 000,001,104 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.10.27 16:30:34 | 000,001,100 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.10.27 14:32:36 | 000,033,280 | ---- | C] () -- C:\Users\Sylvester\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.10.27 14:31:04 | 000,000,680 | ---- | C] () -- C:\Users\Sylvester\AppData\Local\d3d9caps.dat [2011.10.27 14:25:02 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2011.10.27 14:02:42 | 000,392,170 | ---- | C] () -- C:\Windows\System32\onex.tmf [2011.10.27 14:02:41 | 000,009,212 | ---- | C] () -- C:\Windows\System32\RacUR.xml [2011.10.27 14:02:41 | 000,000,153 | ---- | C] () -- C:\Windows\System32\RacUREx.xml [2011.10.27 14:02:38 | 000,344,698 | ---- | C] () -- C:\Windows\System32\eaphost.tmf [2011.10.27 14:02:37 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2011.10.27 14:02:36 | 000,442,788 | ---- | C] () -- C:\Windows\System32\dot3.tmf [2011.10.27 14:02:26 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex [2011.10.27 14:02:25 | 000,208,966 | ---- | C] () -- C:\Windows\System32\WFP.TMF [2011.10.27 14:02:22 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2011.10.27 14:02:22 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2011.10.27 14:02:21 | 000,092,918 | ---- | C] () -- C:\Windows\System32\slmgr.vbs [2011.10.27 14:02:21 | 000,009,239 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man [2011.10.27 14:02:20 | 000,130,008 | ---- | C] () -- C:\Windows\System32\systemsf.ebd [2011.10.27 13:48:38 | 000,000,097 | ---- | C] () -- C:\Users\Sylvester\AppData\Local\fusioncache.dat [2011.10.27 13:48:28 | 000,000,953 | ---- | C] () -- C:\Users\Sylvester\Desktop\Internet Explorer.lnk [2011.10.27 13:48:24 | 000,000,948 | ---- | C] () -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2011.10.27 13:48:10 | 000,000,919 | ---- | C] () -- C:\Users\Sylvester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk [2009.12.03 08:27:30 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2008.04.30 11:12:26 | 000,299,008 | ---- | C] () -- C:\Windows\System32\midas.dll [2008.04.30 11:12:26 | 000,120,320 | ---- | C] () -- C:\Windows\System32\UnzDll.dll [2008.04.30 10:28:46 | 000,000,052 | ---- | C] () -- C:\Windows\System32\drivers\VERSION.DAT [2008.04.01 14:13:07 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll [2008.04.01 14:13:06 | 000,006,768 | ---- | C] () -- C:\Windows\mgxoschk.ini [2008.03.31 11:55:09 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2008.01.21 08:15:58 | 000,664,044 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.01.21 08:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.01.21 08:15:58 | 000,142,416 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.01.21 08:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 13:47:37 | 000,353,376 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 11:33:01 | 000,625,384 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 11:33:01 | 000,116,946 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat ========== LOP Check ========== [2011.10.28 00:33:22 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Ashampoo [2011.10.27 16:39:57 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\CheckPoint [2011.11.08 10:28:04 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Downloaded Installations [2011.10.27 18:35:08 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Gutscheinmieze [2011.11.01 05:51:14 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Nitro PDF [2011.10.27 23:22:59 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Softplicity [2011.11.01 13:14:33 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\TuneUp Software [2011.11.04 09:59:00 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\Ulead Systems [2011.11.10 09:45:01 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\UseNeXT [2011.10.31 10:01:22 | 000,000,000 | ---D | M] -- C:\Users\Sylvester\AppData\Roaming\xplugin [2011.11.10 09:45:19 | 000,032,596 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2011.10.27 13:48:33 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN [2011.10.28 12:46:06 | 000,000,000 | -HSD | M] -- C:\Boot [2006.11.02 14:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2011.10.27 13:44:30 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2011.10.27 20:59:20 | 000,000,000 | RH-D | M] -- C:\MSOCache [2008.04.11 13:08:14 | 000,000,000 | ---D | M] -- C:\MyWorks [2011.11.03 07:02:07 | 000,000,000 | R--D | M] -- C:\Program Files [2011.11.02 07:18:03 | 000,000,000 | -H-D | M] -- C:\ProgramData [2011.10.27 13:44:30 | 000,000,000 | -HSD | M] -- C:\Programme [2011.11.10 10:06:12 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2011.10.28 11:43:15 | 000,000,000 | R--D | M] -- C:\Users [2011.11.10 09:47:42 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > [2011.10.31 10:27:23 | 019,981,960 | ---- | M] () -- C:\Program Files\Realtek_R190-[Guru3D.com].exe [2011.10.31 10:25:52 | 021,499,867 | ---- | M] () -- C:\Program Files\Realtek_R191-[Guru3D.com].exe < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.manifest /3 > < MD5 for: EXPLORER.EXE > [2009.04.10 22:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe [2009.04.10 22:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe [2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe < MD5 for: REGEDIT.EXE > [2008.01.21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\regedit.exe [2008.01.21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\regedit.exe < MD5 for: USERINIT.EXE > [2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WININIT.EXE > [2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe [2008.01.21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe < MD5 for: WINLOGON.EXE > [2009.04.10 22:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009.04.10 22:28:14 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-11-10 04:57:35 ========== Alternate Data Streams ========== @Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:763FFD2C < End of report > Geändert von jerryline (11.11.2011 um 09:34 Uhr) Grund: FF Version war falsch |
|
11.11.2011, 12:02
| #2 |
| /// Malware-holic   |  Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben auf so nen quark wie tuneup kannst du verzichten!
__________________hast du ne original windows cd oder ne recovery partition?
__________________ |
|
13.11.2011, 09:12
| #3 |
| | Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben Hallo,
__________________eine Recovery-Partition habe ich nicht. Die Original-Vista-CD ist nur eine OEM-Recovery. Mit der habe ich das System neu installiert |
|
13.11.2011, 12:12
| #4 |
| /// Malware-holic | Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben Beheben und Reparieren von Startproblemen in Windows Vista mit dem Hilfsprogramm "Bootrec.exe" in der Windows-Wiederherstellungsumgebung klappt das mit der windows cd? fixmbr und fixboot ausführen.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
29.02.2012, 15:33
| #5 |
| | Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben Hallo, war einige Monate verhindert. Ich hatte das System (Vista 32) neu aufgesetzt. Es gab keinerlei Probleme, erst als ich das Service-Pack2 für Vista downgeloadet hab. Die Lautstärke sinkt wieder automatisch auf Null. Das Ganze hat einen gepunkteten Rahmen. Auch andere Sachen (z.b. in Outlock etwas markieren) geht nicht mehr. Danke schonmal jerryline |
|
29.02.2012, 16:51
| #6 |
| /// Malware-holic | Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben hohlst du das servicepack 2 direkt von microsoft? hattest du über die cd fixmbr und fixboot ausgeführt?
__________________ --> Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben |
|
| Themen zu Lautstärkeregler selbstständig auf 0 - PC hat Eigenleben |
| 0x00000001, 32-bit, alternate, antimalwarebytes, antivirus, autorun, bho, bluescreen, browser, c:\windows\system32\rundll32.exe, checkpoint, conduit, desktop, ebay, eigenleben, error, excel, excel.exe, fehler, firefox, fix-it, gcs.exe, gepunkteter rahmen, home, intranet, langsam, lautstärkeregler geht auf null, logfile, microsoft fix it, microsoft office word, mp3, neustart., nvlddmkm.sys, picasa, plug-in, programm, programme schließen sich, programme spinnen, registry, rootkit, rundll, safer networking, scan, schließen sich, security, security update, sehr langsam, software, starten, updates, vista, vista 32, wlan., zugriff verweigert |
Linear-Darstellung
