| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Trojaner blockiert WindowssystemWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
29.11.2011, 23:31
| #1 |
| |  Trojaner blockiert Windowssystem Hallo community, vor circa 1,5 Stunden habe ich aus dem heiteren Himmel folgende Meldung auf meinen Laptop bekommen :Achtung aus sicherheitsgründen wurde ihr windows system blockiert durch das besuchen von seiten mit infizierten und pornografischen inhalten ist das computersystem an eine kritische grenze angekommen nach der das system zusammenbrechen und die ganzen daten verloren gehen könnten. um das system wieder herstellen zu können, müssen sie ein zusätzliches sicherheitsupdate herrunter laden. Und da ich keine pornos schaue , war mir gleich klar dass es sich um irgendeinen Fehler halten muss. Leider habe ich überhaupt keine Ahnung von Trojanern etc. Ich hab mich aber schon hier durchs Forum geklickt und einen Beitrag gesehen , bei dem es um das selbe Problem ging. Ich habe alle Schritte zur Behebung befolgt und nun muss ich nur noch den Code hier einfügen. Ich bedanke mich jetzt schonmal für die Hilfe. OTL logfile created on: 29.11.2011 22:34:11 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Tini\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,95 Gb Total Physical Memory | 3,32 Gb Available Physical Memory | 84,20% Memory free 7,90 Gb Paging File | 7,30 Gb Available in Paging File | 92,48% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 580,41 Gb Total Space | 502,70 Gb Free Space | 86,61% Space Free | Partition Type: NTFS Drive D: | 15,47 Gb Total Space | 1,91 Gb Free Space | 12,37% Space Free | Partition Type: NTFS Computer Name: TINI-HP | User Name: Tini | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Tini\Desktop\OTL.com (OldTimer Tools) PRC - C:\Program Files (x86)\Safari\Safari.exe (Apple Inc.) ========== Modules (No Company Name) ========== MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libtidy.dll () ========== Win32 Services (SafeList) ========== SRV:64bit: - (AMD External Events Utility) -- C:\Windows\sysnative\atiesrxx.exe (AMD) SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation) SRV:64bit: - (HPClientSvc) -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company) SRV:64bit: - (HP Wireless Assistant Service) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard Company) SRV - (HPDrvMntSvc.exe) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company) SRV - (Sony Ericsson PCCompanion) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software) SRV - (HP Support Assistant Service) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (Hewlett-Packard Company) SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (Symantec Corporation) SRV - (IAStorDataMgrSvc) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) SRV - (WinHttpAutoProxySvc) -- winhttp.dll (Microsoft Corporation) SRV - (STacSV) -- C:\Programme\IDT\WDM\stacsv64.exe (IDT, Inc.) SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (HPWMISVC) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.) SRV - (GameConsoleService) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (ggsemc) -- C:\Windows\sysnative\drivers\ggsemc.sys (Sony Ericsson Mobile Communications) DRV:64bit: - (ggflt) -- C:\Windows\sysnative\drivers\ggflt.sys (Sony Ericsson Mobile Communications) DRV:64bit: - (SymNetS) -- C:\Windows\sysnative\drivers\NISx64\1206000.01D\symnets.sys (Symantec Corporation) DRV:64bit: - (SymEvent) -- C:\Windows\sysnative\drivers\SYMEVENT64x86.SYS (Symantec Corporation) DRV:64bit: - (SRTSP) -- C:\Windows\sysnative\drivers\NISx64\1206000.01D\srtsp64.sys (Symantec Corporation) DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\sysnative\drivers\NISx64\1206000.01D\srtspx64.sys (Symantec Corporation) DRV:64bit: - (SymEFA) -- C:\Windows\sysnative\drivers\NISx64\1206000.01D\symefa64.sys (Symantec Corporation) DRV:64bit: - (amdsata) -- C:\Windows\sysnative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\sysnative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (SymDS) -- C:\Windows\sysnative\drivers\NISx64\1206000.01D\symds64.sys (Symantec Corporation) DRV:64bit: - (SymIRON) -- C:\Windows\sysnative\drivers\NISx64\1206000.01D\ironx64.sys (Symantec Corporation) DRV:64bit: - (iaStor) -- C:\Windows\sysnative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (amdkmdag) -- C:\Windows\sysnative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\sysnative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (SynTP) -- C:\Windows\sysnative\drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (STHDA) -- C:\Windows\sysnative\drivers\stwrt64.sys (IDT, Inc.) DRV:64bit: - (clwvd) -- C:\Windows\sysnative\drivers\clwvd.sys (CyberLink Corporation) DRV:64bit: - (RSPCIESTOR) -- C:\Windows\sysnative\drivers\RtsPStor.sys (Realtek Semiconductor Corp.) DRV:64bit: - (intelkmd) -- C:\Windows\sysnative\drivers\igdpmd64.sys (Intel Corporation) DRV:64bit: - (igfx) -- C:\Windows\sysnative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (netr28x) -- C:\Windows\sysnative\drivers\netr28x.sys (Ralink Technology, Corp.) DRV:64bit: - (MEIx64) Intel(R) -- C:\Windows\sysnative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (IntcDAud) Intel(R) -- C:\Windows\sysnative\drivers\IntcDAud.sys (Intel(R) Corporation) DRV:64bit: - (RTL8167) -- C:\Windows\sysnative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (amdsbs) -- C:\Windows\sysnative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\sysnative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\sysnative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\sysnative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (sdbus) -- C:\Windows\sysnative\drivers\sdbus.sys (Microsoft Corporation) DRV:64bit: - (SrvHsfV92) -- C:\Windows\sysnative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.) DRV:64bit: - (SrvHsfWinac) -- C:\Windows\sysnative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.) DRV:64bit: - (SrvHsfHDA) -- C:\Windows\sysnative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.) DRV:64bit: - (yukonw7) -- C:\Windows\sysnative\drivers\yk62x64.sys (Marvell) DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\sysnative\drivers\netw5v64.sys (Intel Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\sysnative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\sysnative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\sysnative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\sysnative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110830.030\IDSviA64.sys (Symantec Corporation) DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110831.002\EX64.SYS (Symantec Corporation) DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110831.002\ENG64.SYS (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110812.001\BHDrvx64.sys (Symantec Corporation) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4 IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\prxtbNCH_.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [String data over 1000 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\prxtbNCH_.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "SearchTheWeb" FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search" FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "SearchTheWeb" FF - prefs.js..browser.startup.homepage: "hxxp://search.iminent.com/?appId=F8BAC447-0DFE-4CAA-8BE9-045E1B140747" FF - prefs.js..network.proxy.type: 0 FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011.09.27 19:42:11 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_3_6 [2011.11.29 22:24:07 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox [2011.04.18 01:17:30 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011.04.18 01:17:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011.04.18 01:17:51 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.07.05 12:01:53 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.07.05 12:59:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tini\AppData\Roaming\mozilla\Extensions [2011.11.12 01:49:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tini\AppData\Roaming\mozilla\Firefox\Profiles\nfivl5en.default\extensions [2011.11.12 01:49:19 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Tini\AppData\Roaming\mozilla\Firefox\Profiles\nfivl5en.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2011.08.17 18:20:59 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Tini\AppData\Roaming\mozilla\Firefox\Profiles\nfivl5en.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011.07.04 14:54:25 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\Tini\AppData\Roaming\mozilla\Firefox\Profiles\nfivl5en.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2011.11.11 01:25:02 | 000,000,000 | ---D | M] (Yontoo Layers) -- C:\Users\Tini\AppData\Roaming\mozilla\Firefox\Profiles\nfivl5en.default\extensions\plugin@yontoo.com [2011.08.14 13:55:16 | 000,000,931 | ---- | M] () -- C:\Users\Tini\AppData\Roaming\Mozilla\Firefox\Profiles\nfivl5en.default\searchplugins\conduit.xml [2011.09.20 00:12:29 | 000,002,270 | ---- | M] () -- C:\Users\Tini\AppData\Roaming\Mozilla\Firefox\Profiles\nfivl5en.default\searchplugins\SearchTheWeb.xml [2011.09.20 00:12:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011.09.07 17:54:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} [2011.09.20 00:12:13 | 000,000,000 | ---D | M] (Iminent WebBooster) -- C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com [2011.11.29 22:24:07 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\COFFPLGN_2011_7_3_6 [2011.09.27 19:42:11 | 000,000,000 | ---D | M] (Symantec IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPLGN [2011.06.16 05:33:48 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2010.01.01 09:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.01.01 09:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2010.01.01 09:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.01.01 09:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2011.08.21 23:09:52 | 000,002,157 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\SearchTheWeb.xml [2010.01.01 09:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.01.01 09:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\sysnative\drivers\etc\hosts O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7018.1622\swg64.dll (Google Inc.) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll () O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found. O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O2 - BHO: (Turnabout Helper) - {87FF76F0-BCA9-40DC-B1E5-254062EEE8F4} - C:\Program Files (x86)\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.) O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\IMBooster4Web\Iminent.WebBooster.dll (Iminent) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll (Google Inc.) O2 - BHO: (NCH DE Toolbar) - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\prxtbNCH_.dll (Conduit Ltd.) O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo Layers Runtime\YontooIEClient.dll (Yontoo LLC) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll () O3 - HKLM\..\Toolbar: (NCH DE Toolbar) - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\prxtbNCH_.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Reify Toolbar) - {B99F805C-F0B1-48EA-8C8B-753BFCBED912} - C:\Program Files (x86)\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.) O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll () O3 - HKCU\..\Toolbar\WebBrowser: (NCH DE Toolbar) - {B106B661-3E1B-4015-AF5C-195E909F35C6} - C:\Program Files (x86)\NCH_DE\prxtbNCH_.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Reify Toolbar) - {B99F805C-F0B1-48EA-8C8B-753BFCBED912} - C:\Program Files (x86)\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\sysnative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe () O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\sysnative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\sysnative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [IMBooster] C:\Program Files (x86)\Iminent\IMBooster\imbooster.exe (Iminent) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [{090394B8-A505-11E0-AFCA-806E6F6E6963}] C:\Users\Tini\AppData\Roaming\Microsoft\svhcost.exe (Bitsum Technologies) O4 - HKCU..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EADM\Core.exe (Electronic Arts) O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found O4 - HKCU..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Tini\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Tini\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Free YouTube Download - C:\Users\Tini\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Tini\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra 'Tools' menuitem : &Turnabout Options... - {1C1CB5F8-D5A3-4FD9-876C-ECD2BDA32716} - C:\Program Files (x86)\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8FE1A452-3145-478C-9AAA-303684A458FD}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AF2AFF62-7CE8-434A-9510-E13B2C0A5A75}: DhcpNameServer = 62.109.123.196 213.191.74.18 O18:64bit: - Protocol\Handler\data - No CLSID value found O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\data {038664DA-5BA5-47FC-88D9-15ADE940ED55} - C:\Program Files (x86)\Reify Software\Turnabout\turnabout.dll (Reify Software, Inc.) O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\sysnative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O29:64bit: - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{788096a1-0be3-11e1-80e1-2c27d7c5dd7d}\Shell - "" = AutoRun O33 - MountPoints2\{788096a1-0be3-11e1-80e1-2c27d7c5dd7d}\Shell\AutoRun\command - "" = F:\Startme.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.11.29 22:30:34 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Tini\Desktop\OTL.com [2011.11.29 22:25:14 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{FD51462F-D521-45E1-85DE-D61F5429F221} [2011.11.29 22:24:47 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{F3FCFE4F-EDAB-4DC4-9F5A-BF7B233187CF} [2011.11.29 22:10:37 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{2E2BB45B-3FB2-4DB4-8B10-7DB617E45819} [2011.11.29 22:10:25 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{66CB115C-78C0-4A65-95E5-A54A941F1BE0} [2011.11.29 22:05:04 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{0E6FA91D-17CC-4A7A-A17D-D43006A574DB} [2011.11.29 22:04:53 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{50590CBC-42BD-4E39-A14C-1DC592EEBB6D} [2011.11.29 21:48:20 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{95D50635-7281-4028-9E6D-C130280BC3C9} [2011.11.29 21:48:08 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{6B907598-5125-4438-B5CA-7BF6FABA06FE} [2011.11.28 20:49:45 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C62F6CB3-7325-4ADA-8166-31F6209592AB} [2011.11.22 18:41:21 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{3BF8C2BF-EAD9-4C8F-8BA7-39B1572C3210} [2011.11.22 18:41:07 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{3AA83AA6-D8FA-4553-A3B2-AE5C89F00DA7} [2011.11.21 21:46:45 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{5EAE81EC-766D-47D6-9519-97D5B5DCFE07} [2011.11.21 21:46:32 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{44E091B3-4FB7-4242-AEB6-817759C4ECA2} [2011.11.21 18:23:23 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{B63C721F-327E-4FCA-BF30-9F278F347D22} [2011.11.21 18:23:10 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C39760E6-B3A5-4A67-921C-303FE6D3DAF3} [2011.11.20 15:26:33 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{80F7E67D-1153-41CB-B0AD-6B0F6D6E48A4} [2011.11.20 15:26:12 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{80779D8A-CCE1-457E-8852-A1CBFE215FBA} [2011.11.19 19:26:53 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{2BF47B37-6C28-4159-AD5B-FDC71D53C5FD} [2011.11.18 19:12:34 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{E14657B0-D459-47B3-BDCF-FCBDE94DBA11} [2011.11.18 19:12:21 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{366CE108-592D-433C-B3F2-84CDCC62C39B} [2011.11.18 14:21:09 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{1E6E5101-02BF-4629-8ED4-CBADE73487AF} [2011.11.18 14:20:56 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C643B4D2-4E8C-4566-B9B8-0E4D5605237C} [2011.11.18 00:38:36 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{4961BDF7-3893-42D3-9D89-0D38F27BF2ED} [2011.11.18 00:38:22 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{32ED14BB-BAA0-4503-8578-A9A731BB71D9} [2011.11.17 22:24:35 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{5CB748F0-19D6-4FAE-9AB5-1EA20AB4C068} [2011.11.17 22:24:22 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{E7C852A5-E961-428D-A8DC-B6EDA2370A99} [2011.11.17 00:25:31 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C2B8391B-8181-4AA9-BC46-128A572EE1AB} [2011.11.17 00:25:21 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{586F2ACC-61A0-455D-9115-2AD37890EEA4} [2011.11.16 10:36:46 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{5E3640CE-72B1-4F6C-899D-A6BAF05F4775} [2011.11.16 10:36:33 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{6FEC8604-00A1-4755-B59B-615E3134F699} [2011.11.15 21:32:10 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{FF852CB5-B2A6-4A79-A3FA-66C2DC8EB23E} [2011.11.15 21:31:58 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{8DEDE053-6F1F-44E0-B672-DB379A9862EB} [2011.11.15 18:27:34 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{D7A61EB5-1B2C-459A-9612-F69611006643} [2011.11.15 18:27:23 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{7AF069F5-3183-498F-81ED-D98036F44A53} [2011.11.15 16:10:00 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{084F1099-9A91-490F-8990-CAD9F4448A59} [2011.11.15 16:09:49 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{B487A23A-B6D1-4738-835F-62B05E8C062B} [2011.11.15 00:59:58 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{CAE23F1D-7853-4995-A64E-7387A79EE523} [2011.11.15 00:59:43 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{7D68C774-57BA-485B-8FB1-C7E5E4DCB3E7} [2011.11.14 19:52:04 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{F962DD3A-F6C3-40B6-8322-68A4F919D209} [2011.11.14 19:51:54 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{8766A627-0ECC-4A75-BDDB-719D76E54CA5} [2011.11.14 19:51:14 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Roaming\Windows Live Writer [2011.11.14 19:51:14 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\Windows Live Writer [2011.11.13 13:09:37 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{B6B4B720-A814-4F56-9CBB-423F7D2C5530} [2011.11.13 13:09:12 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{D046E9AF-2FA8-416D-9BE8-486A5960FACB} [2011.11.13 01:19:16 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{87F3300C-2EBA-4889-9D9D-4F9E907716C7} [2011.11.13 01:19:04 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{A9CEF38B-41FC-47C7-A40D-54BAA5E2F1D5} [2011.11.13 00:19:20 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{8CF468FA-A176-4DB3-B599-2B6063DD5408} [2011.11.13 00:19:06 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{F8209823-6A33-4F46-A13A-ABA13DD3AF9F} [2011.11.12 01:16:22 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{CC8158C3-A875-4F26-9664-67680DCE8237} [2011.11.12 01:16:10 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{6ED3E5AC-681D-40A6-8A18-859E4B032F91} [2011.11.11 15:56:02 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C8AB7E22-52D2-4500-8FA6-46ADD1C27EB7} [2011.11.11 15:55:50 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{8AAC81B5-DF0E-4BBE-B163-B3D882BF947D} [2011.11.11 01:25:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Yontoo Layers Runtime [2011.11.11 01:25:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer [2011.11.11 01:22:47 | 014,655,808 | ---- | C] (DVDVideoSoft Ltd. ) -- C:\Users\Tini\Desktop\FreeYouTubeDownload-3.0.16.exe [2011.11.11 01:22:47 | 001,127,832 | ---- | C] (Theme Your World LLC) -- C:\Users\Tini\Desktop\PageRage-SilentInstaller.exe [2011.11.10 22:34:17 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{0A1C64EE-5C4E-4AC8-85F0-A20999CE750B} [2011.11.10 22:34:05 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{B3E97DF4-70EB-4AB1-9EAC-94E213C2C2D9} [2011.11.10 11:23:30 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{DCF830CD-BA74-497E-BB81-8337159989D9} [2011.11.10 11:23:17 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{16771CB5-DEA7-4B18-B613-C58142A0F418} [2011.11.09 20:40:52 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{39FAD4F6-AE1D-4B10-A09A-07964E81E281} [2011.11.09 20:40:40 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{FEE7C1C0-2BC4-4FC9-AD6D-477D08F51B96} [2011.11.08 21:01:26 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{8C30B043-A5DA-40A5-B691-9D651D14E98C} [2011.11.08 21:01:15 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{7265BD7F-31B2-4129-9D96-9A5A1699D979} [2011.11.08 18:21:49 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{6B792835-61E9-42E7-A64C-3AC4CA9B6ED6} [2011.11.08 18:21:37 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{0780939C-0219-450D-BFB6-4BEF22FB6B6F} [2011.11.07 22:42:24 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{5FE1290B-65EF-477E-88F2-07A578F55C3F} [2011.11.07 22:42:13 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{55BE8DB7-6DE9-41BD-BD54-726352F52068} [2011.11.07 17:29:48 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{1091E7C6-2D86-4074-80DF-56ADE1CF37BC} [2011.11.07 17:29:37 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{355D3193-8836-4C86-9F86-C13CAD3A2533} [2011.11.07 17:11:21 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{36EFAA3D-AB3D-481D-8B3C-76446DFFC1AE} [2011.11.07 17:11:08 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{1C3269B7-2B31-4A36-BEEE-75FE9B6C0C37} [2011.11.07 00:55:35 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{E114AD90-DE03-40CE-89F4-86249EBB1D64} [2011.11.07 00:55:23 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{ECC011BA-3F14-4167-9EB6-A23180CB6C9C} [2011.11.06 22:45:29 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{669A9A59-62BA-4B8C-84D7-8A29D3E426DA} [2011.11.06 22:45:15 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{9B5413D3-EA8D-49C1-A5FA-120B9EB95F94} [2011.11.06 19:17:29 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{ED63A28C-EFB7-48ED-9693-EA90331FBAA5} [2011.11.06 19:17:18 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{1BD59EDA-636C-4C40-9A73-2001B9916A38} [2011.11.05 19:10:49 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{AD0AB511-4D48-4E08-A987-522B8A1B9C3F} [2011.11.05 19:10:39 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{15DB6BC7-9191-4059-BB9C-ECD72545FE0D} [2011.11.03 12:04:24 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{CC410B35-966C-4E7A-B6A4-7599B68E191F} [2011.11.03 12:04:13 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{B28695B9-A6C0-4116-AE09-3D6E8201CFBD} [2011.11.02 23:16:18 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{67BD2ED1-76D1-43AE-ABE3-3295F8811133} [2011.11.02 23:16:06 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{E907C140-2E2C-468C-9593-F821D6A11473} [2011.11.02 22:24:01 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{1396505E-1E95-4FD8-95BA-7E59CC66C87D} [2011.11.02 22:23:48 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{9E12C66F-D97D-4675-9703-0CED59DFC6EC} [2011.11.02 21:07:35 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{0E6B90CF-A052-4778-9275-79B8A03B178E} [2011.11.02 21:07:25 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C18EBB5C-E091-4990-A36E-A7DFB3089C5A} [2011.11.02 19:31:59 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C4B69EC1-6C1B-42AF-8CE0-990650C43061} [2011.11.02 19:31:46 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{931FBA8F-8B64-4382-9ED9-D27F15E54946} [2011.11.01 14:35:13 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C8BA9E31-AB05-4FDF-A952-74E9786FA790} [2011.11.01 14:35:00 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{5B0A1B34-C0B4-4A65-B70D-55032AA1F2DE} [2011.10.31 23:43:55 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{DDF9A213-7FE3-46FC-B9B6-84862253A374} [2011.10.31 23:43:38 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{44B1045F-DB28-4BAE-A943-1B27E6239CE8} [2011.10.31 22:32:17 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C7413966-6E03-443A-BE2F-C45A286953BB} [2011.10.31 22:32:06 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{520F548F-E1C9-4FDF-A9F6-FED80F2C4C74} [2011.10.31 18:55:08 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{1EE953E6-75B4-4514-AC46-10553D14B11B} [2011.10.31 18:54:55 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{C848659E-22A9-498B-B5AF-3AA4790BDB9D} [2011.10.31 17:15:07 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{953D9E2E-8217-41E2-AB19-AB9EA0BE5C1C} [2011.10.31 17:14:55 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{9EB1948F-4C02-4437-83A5-18139D880B0E} [2011.10.31 16:45:54 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{B43904F0-1678-4EAC-9CD4-5B2EBBA8D10F} [2011.10.31 16:10:09 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{D9A3BC39-2B47-4CC6-ACCB-0123DAD63863} [2011.10.31 16:09:56 | 000,000,000 | ---D | C] -- C:\Users\Tini\AppData\Local\{654F45EA-1FC9-4D57-BE3E-080496C9D0FB} [4 C:\Users\Tini\Documents\*.tmp files -> C:\Users\Tini\Documents\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.11.29 22:30:54 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Tini\Desktop\OTL.com [2011.11.29 22:28:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.11.29 22:28:33 | 3180,220,416 | -HS- | M] () -- C:\hiberfil.sys [2011.11.29 22:27:29 | 000,023,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.11.29 22:27:29 | 000,023,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.11.29 22:24:31 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.11.29 21:54:01 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.11.29 21:47:28 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForTini.job [2011.11.20 20:06:03 | 000,005,632 | ---- | M] () -- C:\Users\Tini\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.11.20 18:59:20 | 007,397,878 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.11.20 18:59:20 | 002,649,240 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.11.20 18:59:20 | 002,288,182 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.11.20 18:59:20 | 002,052,068 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.11.20 18:59:20 | 000,005,194 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.11.11 01:24:58 | 001,127,832 | ---- | M] (Theme Your World LLC) -- C:\Users\Tini\Desktop\PageRage-SilentInstaller.exe [2011.11.11 01:24:45 | 014,655,808 | ---- | M] (DVDVideoSoft Ltd. ) -- C:\Users\Tini\Desktop\FreeYouTubeDownload-3.0.16.exe [2011.11.10 23:39:41 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggsemc_01007.Wdf [2011.11.10 23:39:41 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggflt_01007.Wdf [2011.11.10 22:46:59 | 000,002,268 | ---- | M] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk [2011.11.10 22:33:12 | 000,312,864 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [4 C:\Users\Tini\Documents\*.tmp files -> C:\Users\Tini\Documents\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.11.10 23:39:41 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggsemc_01007.Wdf [2011.11.10 23:39:41 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggflt_01007.Wdf [2011.11.10 22:46:59 | 000,002,268 | ---- | C] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk [2011.10.26 20:39:26 | 000,144,612 | ---- | C] () -- C:\Users\Tini\AppData\Roaming\VideoPad.dmp [2011.07.03 15:42:17 | 000,005,632 | ---- | C] () -- C:\Users\Tini\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.04.18 01:10:44 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011.04.18 01:09:14 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat [2011.04.18 01:04:59 | 000,002,901 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat [2011.04.18 00:59:49 | 000,000,048 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2011.01.09 18:11:06 | 000,000,202 | ---- | C] () -- C:\Windows\SysWow64\HPWA.ini [2011.01.09 18:04:09 | 000,009,644 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat [2010.12.17 03:26:22 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll [2010.12.01 23:12:44 | 000,002,901 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2010.11.29 06:21:30 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2010.11.29 06:21:28 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin [2010.11.29 06:21:28 | 000,206,952 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin [2010.09.24 14:41:34 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat ========== Alternate Data Streams ========== @Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:2B9555D8 @Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:7EF55396 @Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:E5B07840 @Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:BACD3198 @Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:E5F8E280 @Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:2211E7A0 @Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:C2F24DB5 @Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:927EC486 @Alternate Data Stream - 114 bytes -> C:\ProgramData\Temp:F760FD47 < End of report > |
|
30.11.2011, 11:22
| #2 | ||||
| /// Helfer-Team    | Trojaner blockiert Windowssystem Hallo und Herzlich Willkommen!
__________________ Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
Für Vista und Win7: Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen! 1. TDSSKiller von Kaspersky
2. Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
3. Falls davon einige installiert und nicht absichtlich installiert hast bzw benötigst, kannst deinstallieren! ► Die hier aufgelisteten Programme/Erweiterungen gelten als unnötig, manche davon gehört sogar zur gefährlichsten Art der Adware , oder auch zum eine "Foistware-Gruppe". Bestandteile der Standardinstallation vieler Freeware-Programme und teilweise sogar von kostenpflichtigen Programmen, die Palette reicht von Toolbars und anderen Browser-Addons bis hin zu System-Utilities und oft die Checkbox bereits angeklickt ist, so dass man keine Möglichkeit hat, solche Zusätzprogramme abwählen. Code:
ATTFilter Babylon toolbar
Bing Bar
Conduit Engine
DAEMON Tools Toolbar
DVDVideoSoftTB Toolbar
Facemoods Toolbar/Plug-In
Google-Toolbar (Helper) & Partner Service - Google Inc
kikin plugin
McAfee Security Scan Plus <- nicht schädlich, aber unnötig
diverse All-in-one Windows Registry Cleaner, freies System-Optimierer, kostenlose Windows-Uninstaller
RelevantKnowledge
(Windows) Searchqu Toolbar
Whenu Save!
YouTube Downloader Toolbar
Filesharing Software (wie z.B uTorrent, eMule & Co), Instant-Messaging-Client, QIP, IZArc, CPUID HWMonitor , Flash Player, Adobe Air, Silverlight, Foxit-Reader, CCleaner, Adobe Reader, Skype, Dingsby oder den RealPlayer in der Default-Einstellung installiert, Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil dann oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte. Bei Installation bitte die Lizenzbestimmungen immer lesen, und nicht sofort überall den Haken setzen bzw gesetzten Haken belassen, weil damit stimmt man nämlich zu, dass andere "Fremdprogramm", oder sogar Adware (Werbe-Pop-ups) durch Partnerprogrammen, Sponsoren etc - mitinstalliert wird, weil sich Freeware damit finanziert. In diese Kategorie gehören noch einige, wie z.B: -> Unerwünschte Toolbars deinstallieren Zitat:
Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
5. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool CCleaner herunter → Download installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ Sprache → Deutsch auswählen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein Zitat:
Zitat:
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw gruß kira
__________________ Geändert von kira (30.11.2011 um 11:28 Uhr) |
|
| Themen zu Trojaner blockiert Windowssystem |
| alternate, autorun, bho, blockiert, bonjour, conduit, converter, dvdvideosoft ltd., fehler, firefox, format, helper, home, igdpmd64.sys, iminent toolbar, infizierte, intrusion prevention, launch, logfile, mp3, plug-in, problem, realtek, registry, scan, security, senden, services.exe, software, studio, symantec, system, systemblockierung, tarma, trojaner, version=1.0, webcheck, wieder herstellen, windows, windows system, wurde ihr, yontoo |
Linear-Darstellung
