| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: mögliche virusinfektion?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
17.01.2012, 19:37
| #1 |
 |  mögliche virusinfektion? Hi, ich habe mir heute beim surfen wahrscheinlich einen virus/trojaner gefangen. Es tauchte plötzlich ein Fenster im semi-professionellem Behördenstyle auf mit der Aufforderung eine Strafe zu zahlen. Gleichzeitig schlugen AVG + Antivir mit diversen virenmeldungen an; ich habe alles sofort in die quarantäne verschoben. Das fenster verschwand bzw ließ sich schließen, allerdings war die startleiste unten komplett weiß, also verschwunden und hat nichtmehr funktioniert. ich hatte zu der zeit diverse software offen und konnte auch noch weiterarbeiten, allerdings laggte der computer ständig erheblich und der taskmanager zeigte in schüben eine deutlich erhöhte cpu auslastung an (allerdings kein prozess dem das zugeordnet werden konnte). ich habe den computer neugestartet, worauf hin die startleiste wieder ganz normal war. außerdem habe ich einen vollscan mit malware durchgeführt und alle 4 funde gelöscht. hier ist die logdatei: Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Datenbank Version: v2012.01.17.02 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Maximilian :: WIELAND-485D939 [Administrator] 17.01.2012 18:07:24 mbam-log-2012-01-17 (18-07-24).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 331346 Laufzeit: 1 Stunde(n), 9 Minute(n), 19 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|NoDesktop (PUM.Hidden.Desktop) -> Bösartig: (1) Gut: (0) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\Dokumente und Einstellungen\Maximilian\test.exe (Spyware.Passwords.XGen) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\59\64658d3b-4ad3079b (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\System Volume Information\_restore{449A0179-9244-4193-BEBE-A47C92A35151}\RP591\A0132675.exe (Spyware.Passwords.XGen) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) während der scan lief zeigte mir AVG auch nochmal mehrfach funde an. jedesmal tauchte "Generic" in der bezeichnung des fundes auf. Der computer scheint jetzt soweit ohne probleme zu funktionieren (sogar die desktop symbole die seit der letzten virusinfektion nichtmehr angezeigt wurden sind nach dem scan wieder aufgetaucht). ich möchte jedoch sichergehen schadfrei zu sein, da ich den computer für onlinebanking etc nutze. danke im voraus! |
|
18.01.2012, 20:44
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | mögliche virusinfektion?Zitat:
Umgehend eins der beiden deinstallieren. Falls aber noch vorhanden, poste alle Logs der Scanner wenn da Funde waren.
__________________ |
|
18.01.2012, 21:21
| #3 |
| | mögliche virusinfektion? oka, ich hab jetzt nurnoch AVG drauf.
__________________das einzige was ich gefunden hab, sinde diese meldungen von gestern die noch bei AVG gespeichert waren: "Trojaner: Downloader.Generic11.ABRW";"e:\System Volume Information\_restore{449A0179-9244-4193-BEBE-A47C92A35151}\RP592\A0132698.exe";"In Virenquarantäne verschoben";"17.01.2012, 19:13:16";"Datei";"F:\Malwarebytes' Anti-Malware\mbam.exe" "Trojaner: Downloader.Generic11.ABRW";"e:\Poker\PartyPokerSetup.exe";"In Virenquarantäne verschoben";"17.01.2012, 19:09:57";"Datei";"F:\Malwarebytes' Anti-Malware\mbam.exe" "Trojaner: Generic22.AFGT";"c:\System Volume Information\_restore{449A0179-9244-4193-BEBE-A47C92A35151}\RP591\A0132675.exe";"In Virenquarantäne verschoben";"17.01.2012, 18:58:19";"Datei";"F:\Malwarebytes' Anti-Malware\mbam.exe" "Trojaner: Generic22.AFGT";"c:\Dokumente und Einstellungen\Maximilian\test.exe";"In Virenquarantäne verschoben";"17.01.2012, 18:10:05";"Datei";"F:\Malwarebytes' Anti-Malware\mbam.exe" |
|
18.01.2012, 21:49
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | mögliche virusinfektion? Führ bitte auch ESET aus, danach sehen wir weiter: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
21.01.2012, 13:56
| #5 |
| | mögliche virusinfektion? okay, das kam dabei heraus: ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=b621c9e233c4254cbbb652fba36b7403 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2012-01-21 12:50:05 # local_time=2012-01-21 01:50:05 (+0100, Westeuropäische Normalzeit) # country="Germany" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1032 16777189 100 94 6428 70320766 0 0 # compatibility_mode=8192 67108863 100 0 3700 3700 0 0 # scanned=123915 # found=4 # cleaned=0 # scan_time=4386 C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\12\48e4250c-70e85142 Java/Exploit.CVE-2011-3544.AA trojan (unable to clean) 00000000000000000000000000000000 I C:\Dokumente und Einstellungen\Maximilian\Lokale Einstellungen\Anwendungsdaten\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE\@APPDIR@\HMHud.exe probably a variant of Win32/Agent.PQGVNB trojan (unable to clean) 00000000000000000000000000000000 I C:\Dokumente und Einstellungen\Maximilian\Lokale Einstellungen\Anwendungsdaten\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\TheApp\STUBEXE\@APPDIR@\HMImport.exe probably a variant of Win32/Agent.HNCVHWF trojan (unable to clean) 00000000000000000000000000000000 I C:\Dokumente und Einstellungen\Maximilian\Lokale Einstellungen\Anwendungsdaten\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\TheApp\STUBEXE\@APPDIR@\HoldemManager.exe probably a variant of Win32/Agent.DKVTQKN trojan (unable to clean) 00000000000000000000000000000000 I |
|
23.01.2012, 11:39
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | mögliche virusinfektion? Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten. Wird so gemacht: [code] hier steht das Log [/code] Und das ganze sieht dann so aus: Code:
ATTFilter hier steht das Log
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
__________________ --> mögliche virusinfektion? |
|
23.01.2012, 12:47
| #7 |
| | mögliche virusinfektion? erledigt: OTL Logfile: Code:
ATTFilter OTL logfile created on: 23.01.2012 12:39:17 - Run 4 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Dokumente und Einstellungen\Maximilian\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,25 Gb Total Physical Memory | 2,57 Gb Available Physical Memory | 79,04% Memory free 5,09 Gb Paging File | 4,40 Gb Available in Paging File | 86,38% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 30,28 Gb Total Space | 3,36 Gb Free Space | 11,10% Space Free | Partition Type: NTFS Drive E: | 121,57 Gb Total Space | 77,06 Gb Free Space | 63,39% Space Free | Partition Type: NTFS Drive F: | 81,03 Gb Total Space | 79,49 Gb Free Space | 98,10% Space Free | Partition Type: NTFS Computer Name: WIELAND-485D939 | User Name: Maximilian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Maximilian\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) PRC - F:\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com) PRC - C:\Programme\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe () PRC - C:\Programme\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe () PRC - C:\Programme\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - C:\Programme\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) PRC - C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.) PRC - E:\Tunes\iTunesHelper.exe (Apple Inc.) PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) PRC - E:\Poker\postgresql\8.3\bin\postgres.exe (PostgreSQL Global Development Group) PRC - E:\Poker\postgresql\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Protexis\License Service\PsiService_2.exe (Protexis Inc.) PRC - C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe (InterVideo) ========== Modules (No Company Name) ========== MOD - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\62e34cfb5a8b233667c7c5a47a32ad93\System.Web.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3c272cad7afb127e2a2bdb8a5a808512\System.Runtime.Remoting.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll () MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll () MOD - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL () MOD - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll () MOD - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll () MOD - C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll () MOD - C:\Programme\DivX\DivX Update\DivXUpdate.exe () MOD - C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe () MOD - C:\Programme\ICQ6Toolbar\ICQ Service.exe () MOD - C:\Programme\OpenOffice.org 3\program\libxml2.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3142.27155__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3142.27162__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.3142.27305__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3142.27360__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3142.27331__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3142.27118__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3142.27165__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3142.27323__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3142.27285__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3142.27255__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3142.27140__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3142.27362__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.3142.27163__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3142.27133__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.3142.27162__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.3142.27389__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3142.27295__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3142.27296__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.3142.27388__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3142.27294__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3142.27259__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3142.27325__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3142.27167__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3142.27248__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3142.27142__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3142.27312__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3142.27166__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3142.27279__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3142.27258__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3142.27256__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3142.27174__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3142.27278__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3142.27282__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.3142.27287__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3142.27257__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.3119.30067__90ba9c70f846762e\CLI.Foundation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3142.27257__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.3119.30063__90ba9c70f846762e\LOG.Foundation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3119.30065__90ba9c70f846762e\NEWAEM.Foundation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3119.30232__90ba9c70f846762e\CLI.Foundation.XManifest.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3119.30127__90ba9c70f846762e\DEM.OS.I0602.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0703\2.0.2651.18802__90ba9c70f846762e\DEM.Graphics.I0703.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3119.30100__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3119.30089__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3119.30092__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3119.30081__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.3119.30117__90ba9c70f846762e\MOM.Foundation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.3119.30171__90ba9c70f846762e\DEM.OS.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.3119.30128__90ba9c70f846762e\DEM.Graphics.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3119.30094__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3119.30104__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3119.30177__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3119.30120__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3119.30176__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3119.30149__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.3119.30169__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3119.30096__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3119.30148__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3119.30145__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3119.30144__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3119.30144__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3119.30169__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3119.30148__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3119.30118__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3119.30141__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3119.30130__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3119.30122__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3119.30146__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3119.30082__90ba9c70f846762e\CLI.Component.Client.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.3119.30140__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3119.30130__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.3119.30119__90ba9c70f846762e\APM.Foundation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3119.30139__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3119.30129__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3119.30093__90ba9c70f846762e\AEM.Server.Shared.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory.resources\2.0.3142.27111_de_90ba9c70f846762e\CLI.Component.SkinFactory.resources.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.3142.27349__90ba9c70f846762e\MOM.Implementation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3142.27346__90ba9c70f846762e\LOG.Foundation.Implementation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3142.27379__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3119.30085__90ba9c70f846762e\LOG.Foundation.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3119.30121__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.3119.30074__90ba9c70f846762e\LOCALIZATION.Foundation.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll () MOD - C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Implementation\2.0.3142.27393__90ba9c70f846762e\LOCALIZATION.Foundation.Implementation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3142.27105__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.3142.27338_de_90ba9c70f846762e\CLI.Component.Systemtray.resources.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3142.27126__90ba9c70f846762e\CLI.Component.Dashboard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3142.27338__90ba9c70f846762e\CLI.Component.Systemtray.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3142.27148__90ba9c70f846762e\CLI.Component.Wizard.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.3142.27109__90ba9c70f846762e\ATIDEMOS.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.3142.27108__90ba9c70f846762e\APM.Server.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3142.27111__90ba9c70f846762e\CLI.Component.SkinFactory.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3142.27108__90ba9c70f846762e\CLI.Component.Runtime.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3119.30123__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.3142.27106__90ba9c70f846762e\AEM.Server.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3119.30076__90ba9c70f846762e\CLI.Foundation.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3119.30101__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.3142.27348__90ba9c70f846762e\CCC.Implementation.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3119.30121__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3119.30113__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll () MOD - C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3119.30150__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll () MOD - C:\Programme\ATI Technologies\ATI.ACE\Branding\Branding.dll () MOD - C:\WINDOWS\system32\msdmo.dll () MOD - C:\WINDOWS\system32\redmonnt.dll () MOD - C:\WINDOWS\system32\pdfcmnnt.dll () ========== Win32 Services (SafeList) ========== SRV - (AppMgmt) -- File not found SRV - (!SASCORE) -- File not found SRV - (AVGIDSAgent) -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.) SRV - (avgwd) -- C:\Programme\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe () SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation) SRV - (pgsql-8.3) -- E:\Poker\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) SRV - (PSI_SVC_2) -- C:\Programme\Gemeinsame Dateien\Protexis\License Service\PsiService_2.exe (Protexis Inc.) SRV - (IviRegMgr) -- C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe (InterVideo) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (AVGIDSDriver) -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. ) DRV - (Avgtdix) -- C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.) DRV - (Avgrkx86) -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys (AVG Technologies CZ, s.r.o.) DRV - (Avgmfx86) -- C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.) DRV - (AVGIDSEH) -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys (AVG Technologies CZ, s.r.o. ) DRV - (AVGIDSShim) -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. ) DRV - (AVGIDSFilter) -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. ) DRV - (Avgldx86) -- C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.) DRV - (snapman) -- C:\WINDOWS\system32\DRIVERS\snapman.sys (Acronis) DRV - (gdrv) -- C:\WINDOWS\gdrv.sys (Windows (R) 2000 DDK provider) DRV - (hotcore3) -- C:\WINDOWS\system32\drivers\hotcore3.sys (Paragon Software Group) DRV - (KMWDFILTER) -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider) DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.) DRV - (AtiHdmiService) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys (ATI Research Inc.) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (RTHDMIAzAudService) -- C:\WINDOWS\system32\drivers\RtHDMI.sys (Realtek Semiconductor Corp.) DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation ) DRV - (regi) -- C:\WINDOWS\system32\drivers\regi.sys (InterVideo) DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices) DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology) DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology) DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology) DRV - (SjyPkt) -- C:\WINDOWS\system32\drivers\SjyPkt.sys (Windows (R) 2000 DDK provider) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.web.de/ IE - HKCU\..\URLSearchHook: - No CLSID value found IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..browser.startup.homepage: "www.web.de" FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1209 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: E:\Tunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.1864: C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.1924: C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.857: C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Programme\DivX\DivX Plus Web Player\firefox\html5video [2011.03.26 17:05:02 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Programme\DivX\DivX Plus Web Player\firefox\wpa [2011.03.26 17:05:02 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Programme\AVG\AVG10\Firefox4\ [2011.12.22 15:43:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.01.20 11:30:57 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.04.01 17:11:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.03.14 15:51:31 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2011.03.26 17:05:01 | 000,000,000 | ---D | M] [2010.05.21 16:18:11 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Extensions [2010.03.14 15:51:44 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2009.03.09 15:23:23 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Extensions\mozswing@mozswing.org [2012.01.04 18:12:55 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions [2011.03.29 12:10:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012.01.04 18:12:55 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012.01.02 13:12:15 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2012.01.17 11:15:31 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-1.xml [2011.01.06 19:57:56 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-2.xml [2011.03.06 13:01:07 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-3.xml [2011.03.27 22:00:35 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-4.xml [2011.04.01 17:11:45 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-5.xml [2011.05.23 17:16:22 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-6.xml [2011.06.20 20:52:04 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-7.xml [2011.07.30 15:31:43 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-8.xml [2010.11.27 11:28:30 | 000,001,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin.xml [2011.12.20 17:02:02 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2011.12.20 17:02:02 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011.04.01 17:11:07 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions [2011.04.01 17:11:07 | 000,000,000 | ---D | M] (WEB.DE Toolbar) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MAXIMILIAN\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\CQ3USER1.DEFAULT\EXTENSIONS\STEALTHYEXTENSION@GMAIL.COM.XPI [2011.12.22 15:43:33 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAMME\AVG\AVG10\FIREFOX4 [2012.01.20 11:30:57 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll [2010.07.17 04:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll [2012.01.20 11:30:52 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.01.20 11:30:52 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml [2012.01.20 11:30:52 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml [2012.01.20 11:30:52 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml [2012.01.20 11:30:52 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml [2012.01.20 11:30:52 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2011.05.03 17:18:02 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AVG_TRAY] C:\Programme\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [DivXUpdate] C:\Programme\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) O4 - HKLM..\Run: [GEST] = File not found O4 - HKLM..\Run: [iTunesHelper] E:\Tunes\iTunesHelper.exe (Apple Inc.) O4 - HKLM..\Run: [OSSelectorReinstall] C:\Programme\Gemeinsame Dateien\Acronis\Acronis Disk Director\oss_reinstall.exe () O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKCU..\Run: [SUPERAntiSpyware] F:\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com) O4 - Startup: C:\Dokumente und Einstellungen\Maximilian\Startmenü\Programme\Autostart\OpenOffice.org 3.2.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 File not found O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Programme\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\PartyPoker\PartyPoker\RunApp.exe () O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\PartyPoker\PartyPoker\RunApp.exe () O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A949D833-4E77-49CD-AF74-94E0F4CC8C25}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - (F:\SASWINLO.DLL) - File not found O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - F:\SASSEH.DLL File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.01.12 11:19:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010.02.18 13:21:14 | 000,000,000 | ---D | M] - E:\AutoHotkey -- [ NTFS ] O33 - MountPoints2\{309fd096-e220-11dd-87c3-0013f76e35e1}\Shell\verb1\command - "" = desktop.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: 6to4 - File not found NetSvcs: AppMgmt - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found SafeBootMin: !SASCORE - File not found SafeBootMin: AppMgmt - File not found SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: klmdb.sys - Driver SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PEVSystemStart - Service SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: procexp90.Sys - Driver SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vga.sys - Driver SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: !SASCORE - File not found SafeBootNet: AppMgmt - File not found SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: klmdb.sys - Driver SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PEVSystemStart - Service SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: procexp90.Sys - Driver SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vga.sys - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Sicherheitsupdate für Windows XP (KB923789) ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install ActiveX: {9309DD7E-EBFE-3C95-8B47-30D3A012F606} - .NET Framework ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /HideWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lhacm - C:\WINDOWS\System32\lhacm.acm (Microsoft Corporation) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) Drivers32: vidc.tscc - C:\WINDOWS\System32\tsccvid.dll (TechSmith Corporation) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012.01.23 12:37:43 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Maximilian\Desktop\OTL.exe [2012.01.21 16:15:52 | 000,000,000 | ---D | C] -- C:\Poker [2012.01.21 15:30:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Maximilian\Startmenü\Programme\PokerStars.FR [2012.01.21 12:35:22 | 000,000,000 | ---D | C] -- C:\Programme\ESET [2012.01.21 12:35:13 | 002,322,184 | ---- | C] (ESET) -- C:\Dokumente und Einstellungen\Maximilian\Desktop\esetsmartinstaller_enu.exe [2012.01.17 18:03:33 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012.01.09 18:27:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\HEM Data [2012.01.02 13:12:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft [2011.04.01 20:05:41 | 017,010,016 | ---- | C] (Microsoft Corporation) -- C:\Programme\IE8-WindowsXP-x86-DEU.exe [2011.03.30 18:42:22 | 007,734,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Programme\mbam-setup-1.50.1.1100.exe [2011.03.30 16:29:41 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Programme\HiJackThis204.exe [2011.03.29 17:27:00 | 003,050,472 | ---- | C] (Piriform Ltd) -- C:\Programme\ccsetup305.exe [2011.03.24 00:10:51 | 017,468,504 | ---- | C] (pdfforge GbR) -- C:\Programme\PDFCreator-1_2_0_setup.exe [2010.10.17 12:39:46 | 001,128,916 | ---- | C] (www.hellopdf.com ) -- C:\Programme\pdf2wordsetup11.exe [2010.10.16 18:21:48 | 013,356,901 | ---- | C] (Andrea Vacondio) -- C:\Programme\pdfsam-win32inst-v2_2_0.exe [2010.10.13 10:46:30 | 017,873,152 | ---- | C] (pdfforge GbR) -- C:\Programme\PDFCreator-1_0_2_setup.exe [2009.09.05 18:04:45 | 004,938,616 | ---- | C] (Microsoft Corporation) -- C:\Programme\Silverlight.exe ========== Files - Modified Within 30 Days ========== [2012.01.23 12:37:40 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Maximilian\Desktop\OTL.exe [2012.01.23 11:25:45 | 087,231,418 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2012.01.23 11:19:47 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012.01.23 11:19:46 | 000,047,604 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap [2012.01.22 17:44:52 | 000,156,459 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavichjg.avm [2012.01.21 12:35:10 | 002,322,184 | ---- | M] (ESET) -- C:\Dokumente und Einstellungen\Maximilian\Desktop\esetsmartinstaller_enu.exe [2012.01.20 18:45:40 | 000,002,251 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\URPreferences.xml [2012.01.18 16:20:00 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012.01.15 13:18:18 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012.01.11 14:07:26 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012.01.11 14:05:01 | 000,478,300 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2012.01.11 14:05:01 | 000,436,328 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012.01.11 14:05:01 | 000,091,730 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2012.01.11 14:05:01 | 000,069,032 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat ========== Files Created - No Company Name ========== [2012.01.21 19:14:01 | 000,000,447 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Uncover.lnk [2012.01.21 16:15:56 | 000,000,616 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Dafa Poker.lnk [2011.04.27 12:24:48 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2011.04.27 12:24:48 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2011.04.27 12:24:48 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe [2011.04.27 12:24:48 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2011.04.27 12:24:48 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2011.03.24 00:11:50 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2010.11.27 14:42:50 | 000,000,043 | ---- | C] () -- C:\WINDOWS\gswin32.ini [2010.11.24 13:09:01 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2010.11.24 13:09:01 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe [2010.11.24 13:08:37 | 001,720,832 | ---- | C] () -- C:\Programme\FreePDF4.02.EXE [2010.11.24 13:06:29 | 012,972,544 | ---- | C] () -- C:\Programme\gs854w32.exe [2010.10.19 20:12:44 | 000,095,568 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.07.29 10:58:03 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\Tx32.dll [2010.07.29 10:58:02 | 000,000,478 | ---- | C] () -- C:\WINDOWS\System32\ic32.ini [2010.07.09 13:39:00 | 000,000,139 | ---- | C] () -- C:\WINDOWS\SIERRA.INI [2010.04.02 13:13:27 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2010.03.14 21:04:17 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2010.03.14 15:51:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010.03.03 17:29:04 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010.02.16 22:49:32 | 000,000,045 | ---- | C] () -- C:\Dokumente und Einstellungen\Maximilian\Lokale Einstellungen\Anwendungsdaten\machpro.dat [2009.09.28 17:08:02 | 000,001,137 | ---- | C] () -- C:\Programme\cacert_basic_root_ca.cer [2009.06.03 19:12:38 | 000,002,828 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\KGyGaAvL.sys [2009.06.03 19:12:38 | 000,000,008 | RHS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DF458F4139.sys [2009.06.02 15:58:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\HMHud.INI [2009.04.26 17:45:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2009.04.04 17:35:49 | 000,034,304 | ---- | C] () -- C:\Dokumente und Einstellungen\Maximilian\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.03.13 16:21:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009.02.23 18:22:45 | 000,001,751 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache [2009.02.21 17:25:54 | 000,000,056 | ---- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2009.02.03 18:17:51 | 000,247,560 | ---- | C] () -- C:\WINDOWS\System32\prgiso.dll [2009.02.03 18:17:50 | 004,244,744 | ---- | C] () -- C:\WINDOWS\System32\qtp-mt334.dll [2009.02.03 18:17:50 | 000,013,576 | ---- | C] () -- C:\WINDOWS\System32\wnaspi32.dll [2009.01.14 10:47:35 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys [2009.01.13 16:43:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2009.01.13 09:54:38 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2009.01.13 09:54:31 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2009.01.13 09:54:29 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2009.01.13 09:54:28 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2009.01.13 09:54:28 | 000,174,820 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2009.01.13 09:47:42 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2009.01.12 11:21:13 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009.01.12 11:17:27 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009.01.12 11:04:17 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009.01.12 11:03:18 | 000,187,408 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2008.08.05 07:15:46 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\ATIBRTMON.EXE [2008.05.26 22:23:36 | 000,016,834 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2008.05.26 22:23:34 | 000,024,188 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2008.05.26 22:23:32 | 000,016,568 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2008.05.26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin [2008.05.26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin [2008.04.14 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008.04.14 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008.04.14 13:00:00 | 000,478,300 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat [2008.04.14 13:00:00 | 000,436,328 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008.04.14 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008.04.14 13:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat [2008.04.14 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008.04.14 13:00:00 | 000,091,730 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat [2008.04.14 13:00:00 | 000,069,032 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008.04.14 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008.04.14 13:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat [2008.04.14 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008.04.14 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008.04.14 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008.04.14 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2008.04.14 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2007.08.21 07:51:16 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe [2007.08.21 05:36:12 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe [1997.06.14 09:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll ========== LOP Check ========== [2011.08.04 08:53:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\!SASCORE [2011.06.07 08:32:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG10 [2011.02.27 12:51:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files [2011.07.05 08:42:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Easybits GO [2010.11.24 13:18:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FreePDF [2010.11.01 15:35:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ [2011.05.01 14:59:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MFAData [2011.12.19 20:19:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MGS [2009.02.23 16:31:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony [2010.08.11 11:04:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TechSmith [2011.02.17 23:20:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp [2009.11.12 19:26:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\XHEO INC [2009.02.25 15:45:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} [2011.02.27 12:51:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\AVG10 [2011.03.26 17:06:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DDMSettings [2012.01.02 13:12:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DVDVideoSoft [2011.04.21 20:03:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DVDVideoSoftIEHelpers [2011.07.05 08:42:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\go [2012.01.09 18:27:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\HEM Data [2011.08.10 14:17:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\ICQ [2010.04.07 14:49:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire [2010.07.29 10:58:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\M-HTOEFL [2012.01.18 16:51:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microgaming [2011.01.02 12:29:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\OpenOffice.org [2009.02.23 16:31:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Sony [2011.07.14 12:47:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\TeamViewer [2010.03.14 15:51:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Thunderbird [2009.01.13 17:00:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Windows Desktop Search [2009.01.18 16:32:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Windows Search ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2010.07.11 13:26:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Adobe [2009.02.25 15:45:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Apple Computer [2009.01.13 16:43:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\ATI [2011.02.27 12:51:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\AVG10 [2009.06.03 19:12:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Corel [2011.03.26 17:06:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DDMSettings [2011.03.26 17:04:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DivX [2012.01.12 20:16:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\dvdcss [2012.01.02 13:12:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DVDVideoSoft [2011.04.21 20:03:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\DVDVideoSoftIEHelpers [2011.07.05 08:42:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\go [2009.01.21 19:03:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Help [2012.01.09 18:27:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\HEM Data [2011.08.10 14:17:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\ICQ [2009.01.12 12:06:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Identities [2009.01.13 09:46:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\InstallShield [2010.04.07 14:49:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire [2010.07.29 10:58:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\M-HTOEFL [2009.01.27 19:14:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Macromedia [2011.03.30 18:42:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Malwarebytes [2012.01.18 16:51:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microgaming [2011.03.05 17:36:48 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft [2010.01.04 21:24:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Move Networks [2010.05.21 16:17:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla [2010.07.31 17:32:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla-Cache [2011.01.02 12:29:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\OpenOffice.org [2010.03.14 21:04:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real [2012.01.22 23:18:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Skype [2011.05.28 09:37:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\skypePM [2009.02.23 16:31:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Sony [2009.03.07 20:42:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Sun [2011.05.10 17:40:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\SUPERAntiSpyware.com [2009.03.28 12:37:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\teamspeak2 [2011.07.14 12:47:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\TeamViewer [2010.03.14 15:51:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Thunderbird [2012.01.12 22:03:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\vlc [2009.01.13 17:00:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Windows Desktop Search [2009.01.18 16:32:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Windows Search [2009.02.26 13:12:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\WinRAR < %APPDATA%\*.exe /s > [2009.03.09 15:23:17 | 000,163,840 | ---- | M] (Mozilla Foundation) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\crashreporter.exe [2009.03.09 15:23:18 | 000,196,608 | ---- | M] (Mozilla Foundation) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\updater.exe [2009.03.09 15:23:18 | 000,014,848 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xpcshell.exe [2009.03.09 15:23:18 | 000,077,824 | ---- | M] (Mozilla Foundation) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xpicleanup.exe [2009.03.09 15:23:18 | 000,266,240 | ---- | M] (Mozilla Foundation) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xpidl.exe [2009.03.09 15:23:18 | 000,018,432 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xpt_dump.exe [2009.03.09 15:23:18 | 000,014,336 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xpt_link.exe [2009.03.09 15:23:20 | 000,073,728 | ---- | M] (Mozilla Foundation) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xulrunner-stub.exe [2009.03.09 15:23:20 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\LimeWire\browser\xulrunner\xulrunner.exe [2012.01.11 18:50:17 | 000,013,406 | R--- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{4A5D68E3-CFE0-4235-9796-C2F60E1A8A84}\_250851E303C0C1199D04D4.exe [2012.01.11 18:50:17 | 000,013,406 | R--- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{4A5D68E3-CFE0-4235-9796-C2F60E1A8A84}\_DF6427BFA61C2AF0982D9C.exe [2009.01.13 09:57:57 | 000,009,158 | R--- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}\ARPPRODUCTICON.exe [2009.07.30 13:08:48 | 000,010,134 | R--- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{D98C9637-93DA-44DB-B73A-B11A1192AB26}\ARPPRODUCTICON.exe [2009.07.30 13:08:48 | 000,045,056 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{D98C9637-93DA-44DB-B73A-B11A1192AB26}\GameShadow.exe1_D9316813509243FDA4C292F72F483E61.exe [2009.07.30 13:08:48 | 000,045,056 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{D98C9637-93DA-44DB-B73A-B11A1192AB26}\GameShadow.exe_D9316813509243FDA4C292F72F483E61.exe [2009.07.30 13:08:48 | 000,040,960 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{D98C9637-93DA-44DB-B73A-B11A1192AB26}\GSDR.exe_D9316813509243FDA4C292F72F483E61.exe [2009.07.30 13:08:48 | 000,008,854 | R--- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Microsoft\Installer\{D98C9637-93DA-44DB-B73A-B11A1192AB26}\NewShortcut1_D98C963793DA44DBB73AB11A1192AB26.exe [2009.02.12 19:37:34 | 000,097,144 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Move Networks\ie_bin\MovePlayerUpgrade.exe [2009.11.11 19:05:55 | 000,034,062 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Move Networks\ie_bin\Uninst.exe [2010.06.25 19:03:13 | 000,439,816 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\setup3.10\setup.exe [2010.09.19 10:28:51 | 000,452,104 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\setup3.12\setup.exe [2010.11.21 17:52:05 | 000,506,024 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\setup3.13\setup.exe [2011.01.31 20:09:04 | 000,510,120 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\setup3.14\setup.exe [2012.01.15 16:40:33 | 000,315,512 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\UpgradeHelper\RealPlayer\9.01\rnupgagent.exe [2011.12.23 22:36:31 | 026,922,432 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\UpgradeHelper\RealPlayer\9.01\stub_data\RealPlayer.exe [2011.12.23 22:36:03 | 000,713,472 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Real\Update\UpgradeHelper\RealPlayer\9.01\stub_exe\RealPlayer.exe < %SYSTEMDRIVE%\*.exe > [2009.01.27 18:28:40 | 062,064,090 | ---- | M] (Acronis) -- C:\DiskDirectorSuite10.0_d_de.exe [2010.02.21 16:25:01 | 002,959,376 | ---- | M] (Microsoft Corporation) -- C:\dotnetfx35setup.exe < MD5 for: AGP440.SYS > [2008.04.14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys < MD5 for: ATAPI.SYS > [2008.04.14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys [2008.04.14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys < MD5 for: EVENTLOG.DLL > [2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\dllcache\eventlog.dll [2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll < MD5 for: NETLOGON.DLL > [2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\dllcache\netlogon.dll [2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll < MD5 for: SCECLI.DLL > [2008.04.14 13:00:00 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\dllcache\scecli.dll [2008.04.14 13:00:00 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll < MD5 for: USER32.DLL > [2008.04.14 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\dllcache\user32.dll [2008.04.14 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll < MD5 for: USERINIT.EXE > [2008.04.14 13:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\dllcache\userinit.exe [2008.04.14 13:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe < MD5 for: WINLOGON.EXE > [2008.04.14 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\dllcache\winlogon.exe [2008.04.14 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe < MD5 for: WS2IFSL.SYS > [2008.04.14 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys [2008.04.14 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > [2009.01.12 12:02:25 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav [2009.01.12 12:02:25 | 001,069,056 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav [2009.01.12 12:02:25 | 000,466,944 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < > < End of report > [/code] |
|
23.01.2012, 13:31
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | mögliche virusinfektion? Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL
PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
MOD - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.web.de/
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q="
[2011.03.29 12:10:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.01.04 18:12:55 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.01.02 13:12:15 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.01.17 11:15:31 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-1.xml
[2011.01.06 19:57:56 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-2.xml
[2011.03.06 13:01:07 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-3.xml
[2011.03.27 22:00:35 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-4.xml
[2011.04.01 17:11:45 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-5.xml
[2011.05.23 17:16:22 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-6.xml
[2011.06.20 20:52:04 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-7.xml
[2011.07.30 15:31:43 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-8.xml
[2010.11.27 11:28:30 | 000,001,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin.xml
[2011.04.01 17:11:07 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2011.04.01 17:11:07 | 000,000,000 | ---D | M] (WEB.DE Toolbar) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [GEST] = File not found
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - F:\SASSEH.DLL File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.01.12 11:19:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010.02.18 13:21:14 | 000,000,000 | ---D | M] - E:\AutoHotkey -- [ NTFS ]
O33 - MountPoints2\{309fd096-e220-11dd-87c3-0013f76e35e1}\Shell\verb1\command - "" = desktop.exe
:Files
C:\Programme\ICQ6Toolbar
:Commands
[emptytemp]
[resethosts]
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt. Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
23.01.2012, 13:41
| #9 |
| | mögliche virusinfektion? Ergebnis: Code:
ATTFilter All processes killed
========== OTL ==========
No active process named ICQ Service.exe was found!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
C:\Programme\ICQ6Toolbar\ICQToolBar.dll moved successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=" removed from keyword.URL
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} folder moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-7.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin-8.xml moved successfully.
C:\Dokumente und Einstellungen\Maximilian\Anwendungsdaten\Mozilla\Firefox\Profiles\cq3user1.default\searchplugins\icqplugin.xml moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\weather folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\ticker folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\shopping folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\search\engine folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\search folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\pref folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\phish folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\newtab\initial-thumbs folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\newtab folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\neterror folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\horoscope folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\homebutton folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\highlight folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\help folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\email folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\ebay folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin\brand folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\skin folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\weather folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\ticker folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\shopping folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\search folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\pref folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\phish folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\newtab folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\neterror folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\main folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\horoscope folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\highlight folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\help folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\email folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US\ebay folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\en-US folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\weather folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\ticker folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\shopping folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\search folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\pref folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\phish folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\newtab folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\neterror folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\main folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\horoscope folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\highlight folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\help\page folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\help folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\email folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE\ebay folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale\de-DE folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\locale folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\defaults\preferences folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\defaults folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\weather folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\util folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\tracking folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\ticker folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\shopping folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\search\mcollect folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\search folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\pref folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\phish folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\newtab folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\neterror folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\main folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\hotnews folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\horoscope folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\highlight folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\help folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\email folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content\ebay folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\content folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\components folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de folder moved successfully.
C:\Programme\Mozilla Firefox\distribution\extensions folder moved successfully.
Folder C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
File C:\Programme\ICQ6Toolbar\ICQToolBar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\GEST deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\AUTOEXEC.BAT moved successfully.
File not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{309fd096-e220-11dd-87c3-0013f76e35e1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{309fd096-e220-11dd-87c3-0013f76e35e1}\ not found.
File desktop.exe not found.
========== FILES ==========
C:\Programme\ICQ6Toolbar folder moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: gfsdfsf
->Temp folder emptied: 606770 bytes
->Temporary Internet Files folder emptied: 61975 bytes
->FireFox cache emptied: 88193325 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Maximilian
->Temp folder emptied: 481642462 bytes
->Temporary Internet Files folder emptied: 323737160 bytes
->Java cache emptied: 20934013 bytes
->FireFox cache emptied: 462707583 bytes
->Flash cache emptied: 46694 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1282310 bytes
User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: sdfsdf
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3547068 bytes
RecycleBin emptied: 891819935 bytes
Total Files Cleaned = 2.169,00 mb
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTL by OldTimer - Version 3.2.31.0 log created on 01232012_133445
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
|
|
23.01.2012, 13:44
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | mögliche virusinfektion? Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet, Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten. Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C nach, da speichert der TDSS-Killer seine Logs.Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!  Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen: Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )  Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
23.01.2012, 14:01
| #11 |
| | mögliche virusinfektion?Code:
ATTFilter 13:57:29.0406 3760 TDSS rootkit removing tool 2.7.6.0 Jan 19 2012 13:09:04
13:57:29.0468 3760 ============================================================
13:57:29.0468 3760 Current date / time: 2012/01/23 13:57:29.0468
13:57:29.0468 3760 SystemInfo:
13:57:29.0468 3760
13:57:29.0468 3760 OS Version: 5.1.2600 ServicePack: 3.0
13:57:29.0468 3760 Product type: Workstation
13:57:29.0468 3760 ComputerName: WIELAND-485D939
13:57:29.0468 3760 UserName: Maximilian
13:57:29.0468 3760 Windows directory: C:\WINDOWS
13:57:29.0468 3760 System windows directory: C:\WINDOWS
13:57:29.0468 3760 Processor architecture: Intel x86
13:57:29.0468 3760 Number of processors: 2
13:57:29.0468 3760 Page size: 0x1000
13:57:29.0468 3760 Boot type: Normal boot
13:57:29.0468 3760 ============================================================
13:57:30.0875 3760 Drive \Device\Harddisk0\DR0 - Size: 0x3A38A25E00 (232.88 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
13:57:31.0015 3760 Initialize success
13:57:56.0593 1976 ============================================================
13:57:56.0593 1976 Scan started
13:57:56.0593 1976 Mode: Manual;
13:57:56.0593 1976 ============================================================
13:57:56.0968 1976 Abiosdsk - ok
13:57:56.0984 1976 abp480n5 - ok
13:57:57.0015 1976 ACPI (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:57:57.0015 1976 ACPI - ok
13:57:57.0031 1976 ACPIEC (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
13:57:57.0031 1976 ACPIEC - ok
13:57:57.0046 1976 adpu160m - ok
13:57:57.0062 1976 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
13:57:57.0062 1976 aec - ok
13:57:57.0093 1976 AegisP (30bb1bde595ca65fd5549462080d94e5) C:\WINDOWS\system32\DRIVERS\AegisP.sys
13:57:57.0093 1976 AegisP - ok
13:57:57.0109 1976 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
13:57:57.0109 1976 AFD - ok
13:57:57.0125 1976 Aha154x - ok
13:57:57.0125 1976 aic78u2 - ok
13:57:57.0140 1976 aic78xx - ok
13:57:57.0140 1976 AliIde - ok
13:57:57.0171 1976 AmdK8 (58be3c2f1aa041ea56f7305a6463035c) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
13:57:57.0171 1976 AmdK8 - ok
13:57:57.0187 1976 amsint - ok
13:57:57.0218 1976 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
13:57:57.0218 1976 Arp1394 - ok
13:57:57.0218 1976 asc - ok
13:57:57.0234 1976 asc3350p - ok
13:57:57.0234 1976 asc3550 - ok
13:57:57.0265 1976 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:57:57.0265 1976 AsyncMac - ok
13:57:57.0265 1976 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
13:57:57.0281 1976 atapi - ok
13:57:57.0281 1976 Atdisk - ok
13:57:57.0359 1976 ati2mtag (365e08750277c7319fbc721edd377929) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
13:57:57.0390 1976 ati2mtag - ok
13:57:57.0390 1976 AtiHdmiService (591a9eabb5ef5168e435c2f18b05dd76) C:\WINDOWS\system32\drivers\AtiHdmi.sys
13:57:57.0390 1976 AtiHdmiService - ok
13:57:57.0406 1976 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:57:57.0406 1976 Atmarpc - ok
13:57:57.0437 1976 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
13:57:57.0437 1976 audstub - ok
13:57:57.0468 1976 AVGIDSDriver (2d18221aab3db2d408d6c55c0f23090a) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys
13:57:57.0468 1976 AVGIDSDriver - ok
13:57:57.0515 1976 AVGIDSEH (1af676db3f3d4cc709cfab2571cf5fc3) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys
13:57:57.0515 1976 AVGIDSEH - ok
13:57:57.0531 1976 AVGIDSFilter (4c51e233c87f9ec7598551de554bc99d) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys
13:57:57.0531 1976 AVGIDSFilter - ok
13:57:57.0562 1976 AVGIDSShim (c3fc426e54f55c1cc3219e415b88e10c) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys
13:57:57.0562 1976 AVGIDSShim - ok
13:57:57.0593 1976 Avgldx86 (4e796d3d2c3182b13b3e3b5a2ad4ef0a) C:\WINDOWS\system32\DRIVERS\avgldx86.sys
13:57:57.0609 1976 Avgldx86 - ok
13:57:57.0609 1976 Avgmfx86 (5639de66b37d02bd22df4cf3155fba60) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
13:57:57.0609 1976 Avgmfx86 - ok
13:57:57.0609 1976 Scan interrupted by user!
13:57:57.0609 1976 Scan interrupted by user!
13:57:57.0609 1976 Scan interrupted by user!
13:57:57.0609 1976 ============================================================
13:57:57.0609 1976 Scan finished
13:57:57.0609 1976 ============================================================
13:57:57.0625 0304 Detected object count: 0
13:57:57.0625 0304 Actual detected object count: 0
13:59:29.0234 1136 ============================================================
13:59:29.0234 1136 Scan started
13:59:29.0234 1136 Mode: Manual; SigCheck; TDLFS;
13:59:29.0234 1136 ============================================================
13:59:29.0578 1136 Abiosdsk - ok
13:59:29.0593 1136 abp480n5 - ok
13:59:29.0625 1136 ACPI (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:59:30.0484 1136 ACPI - ok
13:59:30.0546 1136 ACPIEC (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
13:59:30.0671 1136 ACPIEC - ok
13:59:30.0687 1136 adpu160m - ok
13:59:30.0718 1136 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
13:59:30.0828 1136 aec - ok
13:59:30.0843 1136 AegisP (30bb1bde595ca65fd5549462080d94e5) C:\WINDOWS\system32\DRIVERS\AegisP.sys
13:59:30.0859 1136 AegisP ( UnsignedFile.Multi.Generic ) - warning
13:59:30.0859 1136 AegisP - detected UnsignedFile.Multi.Generic (1)
13:59:30.0890 1136 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
13:59:30.0921 1136 AFD - ok
13:59:30.0937 1136 Aha154x - ok
13:59:30.0937 1136 aic78u2 - ok
13:59:30.0953 1136 aic78xx - ok
13:59:30.0953 1136 AliIde - ok
13:59:30.0984 1136 AmdK8 (58be3c2f1aa041ea56f7305a6463035c) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
13:59:31.0000 1136 AmdK8 - ok
13:59:31.0000 1136 amsint - ok
13:59:31.0031 1136 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
13:59:31.0156 1136 Arp1394 - ok
13:59:31.0156 1136 asc - ok
13:59:31.0156 1136 asc3350p - ok
13:59:31.0171 1136 asc3550 - ok
13:59:31.0187 1136 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:59:31.0296 1136 AsyncMac - ok
13:59:31.0328 1136 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
13:59:31.0437 1136 atapi - ok
13:59:31.0437 1136 Atdisk - ok
13:59:31.0531 1136 ati2mtag (365e08750277c7319fbc721edd377929) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
13:59:31.0625 1136 ati2mtag - ok
13:59:31.0640 1136 AtiHdmiService (591a9eabb5ef5168e435c2f18b05dd76) C:\WINDOWS\system32\drivers\AtiHdmi.sys
13:59:31.0671 1136 AtiHdmiService - ok
13:59:31.0671 1136 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:59:31.0781 1136 Atmarpc - ok
13:59:31.0796 1136 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
13:59:31.0890 1136 audstub - ok
13:59:31.0937 1136 AVGIDSDriver (2d18221aab3db2d408d6c55c0f23090a) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys
13:59:31.0937 1136 AVGIDSDriver - ok
13:59:31.0968 1136 AVGIDSEH (1af676db3f3d4cc709cfab2571cf5fc3) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys
13:59:31.0984 1136 AVGIDSEH - ok
13:59:32.0000 1136 AVGIDSFilter (4c51e233c87f9ec7598551de554bc99d) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys
13:59:32.0000 1136 AVGIDSFilter - ok
13:59:32.0031 1136 AVGIDSShim (c3fc426e54f55c1cc3219e415b88e10c) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys
13:59:32.0031 1136 AVGIDSShim - ok
13:59:32.0062 1136 Avgldx86 (4e796d3d2c3182b13b3e3b5a2ad4ef0a) C:\WINDOWS\system32\DRIVERS\avgldx86.sys
13:59:32.0078 1136 Avgldx86 - ok
13:59:32.0078 1136 Avgmfx86 (5639de66b37d02bd22df4cf3155fba60) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
13:59:32.0093 1136 Avgmfx86 - ok
13:59:32.0109 1136 Avgrkx86 (d1baf652eda0ae70896276a1fb32c2d4) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
13:59:32.0140 1136 Avgrkx86 - ok
13:59:32.0156 1136 Avgtdix (aaf0ebcad95f2164cffb544e00392498) C:\WINDOWS\system32\DRIVERS\avgtdix.sys
13:59:32.0171 1136 Avgtdix - ok
13:59:32.0171 1136 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
13:59:32.0281 1136 Beep - ok
13:59:32.0343 1136 catchme - ok
13:59:32.0359 1136 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
13:59:32.0468 1136 cbidf2k - ok
13:59:32.0468 1136 cd20xrnt - ok
13:59:32.0484 1136 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
13:59:32.0609 1136 Cdaudio - ok
13:59:32.0625 1136 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
13:59:32.0750 1136 Cdfs - ok
13:59:32.0765 1136 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:59:32.0890 1136 Cdrom - ok
13:59:32.0890 1136 Changer - ok
13:59:32.0906 1136 CmdIde - ok
13:59:32.0921 1136 Cpqarray - ok
13:59:32.0921 1136 dac2w2k - ok
13:59:32.0937 1136 dac960nt - ok
13:59:32.0937 1136 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
13:59:33.0046 1136 Disk - ok
13:59:33.0093 1136 dmboot (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
13:59:33.0218 1136 dmboot - ok
13:59:33.0234 1136 dmio (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
13:59:33.0343 1136 dmio - ok
13:59:33.0359 1136 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
13:59:33.0453 1136 dmload - ok
13:59:33.0468 1136 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
13:59:33.0578 1136 DMusic - ok
13:59:33.0593 1136 dpti2o - ok
13:59:33.0593 1136 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
13:59:33.0703 1136 drmkaud - ok
13:59:33.0718 1136 ENTECH (bdd170fecb0e496a914318009d85b819) C:\WINDOWS\system32\DRIVERS\ENTECH.sys
13:59:33.0734 1136 ENTECH ( UnsignedFile.Multi.Generic ) - warning
13:59:33.0734 1136 ENTECH - detected UnsignedFile.Multi.Generic (1)
13:59:33.0765 1136 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
13:59:33.0875 1136 Fastfat - ok
13:59:33.0890 1136 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
13:59:34.0000 1136 Fdc - ok
13:59:34.0015 1136 Fips (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
13:59:34.0109 1136 Fips - ok
13:59:34.0125 1136 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
13:59:34.0234 1136 Flpydisk - ok
13:59:34.0250 1136 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
13:59:34.0359 1136 FltMgr - ok
13:59:34.0375 1136 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:59:34.0484 1136 Fs_Rec - ok
13:59:34.0484 1136 Ftdisk (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:59:34.0593 1136 Ftdisk - ok
13:59:34.0609 1136 gdrv (5c230948dd6652228f88ca7ae6cb276c) C:\WINDOWS\gdrv.sys
13:59:35.0406 1136 gdrv - ok
13:59:35.0453 1136 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
13:59:35.0484 1136 GEARAspiWDM - ok
13:59:35.0515 1136 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:59:35.0625 1136 Gpc - ok
13:59:35.0640 1136 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
13:59:35.0750 1136 HDAudBus - ok
13:59:35.0781 1136 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
13:59:35.0890 1136 hidusb - ok
13:59:35.0906 1136 hotcore3 (d308726110a6011514dcdfc6e3fc21f2) C:\WINDOWS\system32\drivers\hotcore3.sys
13:59:35.0921 1136 hotcore3 - ok
13:59:35.0921 1136 hpn - ok
13:59:35.0968 1136 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
13:59:36.0000 1136 HTTP - ok
13:59:36.0000 1136 i2omgmt - ok
13:59:36.0015 1136 i2omp - ok
13:59:36.0031 1136 i8042prt (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:59:36.0140 1136 i8042prt - ok
13:59:36.0171 1136 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
13:59:36.0265 1136 Imapi - ok
13:59:36.0265 1136 ini910u - ok
13:59:36.0375 1136 IntcAzAudAddService (7ffe2751ae9b3082cd55bfcc2e9becdb) C:\WINDOWS\system32\drivers\RtkHDAud.sys
13:59:36.0531 1136 IntcAzAudAddService - ok
13:59:36.0531 1136 IntelIde - ok
13:59:36.0546 1136 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
13:59:36.0656 1136 Ip6Fw - ok
13:59:36.0671 1136 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:59:36.0781 1136 IpInIp - ok
13:59:36.0796 1136 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:59:36.0921 1136 IpNat - ok
13:59:36.0937 1136 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:59:37.0031 1136 IPSec - ok
13:59:37.0046 1136 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
13:59:37.0093 1136 IRENUM - ok
13:59:37.0109 1136 isapnp (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:59:37.0218 1136 isapnp - ok
13:59:37.0250 1136 Iviaspi (4ac11b2250106774f694df2db4ffed61) C:\WINDOWS\system32\drivers\iviaspi.sys
13:59:37.0265 1136 Iviaspi ( UnsignedFile.Multi.Generic ) - warning
13:59:37.0265 1136 Iviaspi - detected UnsignedFile.Multi.Generic (1)
13:59:37.0265 1136 Kbdclass (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:59:37.0375 1136 Kbdclass - ok
13:59:37.0390 1136 kbdhid (b6d6c117d771c98130497265f26d1882) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
13:59:37.0484 1136 kbdhid - ok
13:59:37.0515 1136 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
13:59:37.0609 1136 kmixer - ok
13:59:37.0625 1136 KMWDFILTER (566c5fd480fdbce3ba5cf9fbcffaea9a) C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys
13:59:37.0656 1136 KMWDFILTER - ok
13:59:37.0703 1136 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
13:59:37.0750 1136 KSecDD - ok
13:59:37.0765 1136 lbrtfdc - ok
13:59:37.0796 1136 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
13:59:37.0906 1136 mnmdd - ok
13:59:37.0937 1136 Modem (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
13:59:38.0031 1136 Modem - ok
13:59:38.0046 1136 Mouclass (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:59:38.0156 1136 Mouclass - ok
13:59:38.0171 1136 mouhid (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:59:38.0265 1136 mouhid - ok
13:59:38.0281 1136 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
13:59:38.0406 1136 MountMgr - ok
13:59:38.0406 1136 mraid35x - ok
13:59:38.0421 1136 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:59:38.0515 1136 MRxDAV - ok
13:59:38.0546 1136 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:59:38.0593 1136 MRxSmb - ok
13:59:38.0625 1136 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
13:59:38.0718 1136 Msfs - ok
13:59:38.0734 1136 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:59:38.0859 1136 MSKSSRV - ok
13:59:38.0875 1136 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:59:38.0984 1136 MSPCLOCK - ok
13:59:38.0984 1136 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
13:59:39.0093 1136 MSPQM - ok
13:59:39.0125 1136 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:59:39.0218 1136 mssmbios - ok
13:59:39.0234 1136 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
13:59:39.0250 1136 Mup - ok
13:59:39.0250 1136 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
13:59:39.0359 1136 NDIS - ok
13:59:39.0375 1136 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:59:39.0406 1136 NdisTapi - ok
13:59:39.0421 1136 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:59:39.0531 1136 Ndisuio - ok
13:59:39.0546 1136 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:59:39.0656 1136 NdisWan - ok
13:59:39.0687 1136 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
13:59:39.0734 1136 NDProxy - ok
13:59:39.0734 1136 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
13:59:39.0843 1136 NetBIOS - ok
13:59:39.0859 1136 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
13:59:39.0968 1136 NetBT - ok
13:59:40.0000 1136 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
13:59:40.0093 1136 NIC1394 - ok
13:59:40.0093 1136 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
13:59:40.0203 1136 Npfs - ok
13:59:40.0203 1136 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
13:59:40.0328 1136 Ntfs - ok
13:59:40.0343 1136 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
13:59:40.0437 1136 Null - ok
13:59:40.0468 1136 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:59:40.0578 1136 NwlnkFlt - ok
13:59:40.0593 1136 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:59:40.0687 1136 NwlnkFwd - ok
13:59:40.0718 1136 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
13:59:40.0828 1136 ohci1394 - ok
13:59:40.0843 1136 Parport (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\DRIVERS\parport.sys
13:59:40.0953 1136 Parport - ok
13:59:40.0953 1136 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
13:59:41.0062 1136 PartMgr - ok
13:59:41.0078 1136 ParVdm (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
13:59:41.0171 1136 ParVdm - ok
13:59:41.0171 1136 PCI (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
13:59:41.0296 1136 PCI - ok
13:59:41.0296 1136 PCIDump - ok
13:59:41.0328 1136 PCIIde (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
13:59:41.0421 1136 PCIIde - ok
13:59:41.0437 1136 Pcmcia (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
13:59:41.0546 1136 Pcmcia - ok
13:59:41.0546 1136 PDCOMP - ok
13:59:41.0562 1136 PDFRAME - ok
13:59:41.0562 1136 PDRELI - ok
13:59:41.0562 1136 PDRFRAME - ok
13:59:41.0578 1136 perc2 - ok
13:59:41.0578 1136 perc2hib - ok
13:59:41.0609 1136 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:59:41.0718 1136 PptpMiniport - ok
13:59:41.0750 1136 Processor (2cb55427c58679f49ad600fccba76360) C:\WINDOWS\system32\DRIVERS\processr.sys
13:59:41.0843 1136 Processor - ok
13:59:41.0859 1136 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
13:59:41.0953 1136 PSched - ok
13:59:41.0968 1136 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:59:42.0062 1136 Ptilink - ok
13:59:42.0093 1136 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
13:59:42.0093 1136 PxHelp20 - ok
13:59:42.0109 1136 ql1080 - ok
13:59:42.0109 1136 Ql10wnt - ok
13:59:42.0125 1136 ql12160 - ok
13:59:42.0125 1136 ql1240 - ok
13:59:42.0140 1136 ql1280 - ok
13:59:42.0140 1136 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:59:42.0250 1136 RasAcd - ok
13:59:42.0265 1136 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:59:42.0359 1136 Rasl2tp - ok
13:59:42.0375 1136 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:59:42.0468 1136 RasPppoe - ok
13:59:42.0484 1136 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
13:59:42.0578 1136 Raspti - ok
13:59:42.0593 1136 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:59:42.0703 1136 Rdbss - ok
13:59:42.0718 1136 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:59:42.0812 1136 RDPCDD - ok
13:59:42.0843 1136 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
13:59:42.0875 1136 RDPWD - ok
13:59:42.0890 1136 redbook (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
13:59:43.0000 1136 redbook - ok
13:59:43.0015 1136 regi (001b4278407f4303efc902a2b16f2453) C:\WINDOWS\system32\drivers\regi.sys
13:59:43.0031 1136 regi - ok
13:59:43.0109 1136 RTHDMIAzAudService (fffdfa85cf01dee5457f4ea41fd9ed04) C:\WINDOWS\system32\drivers\RtHDMI.sys
13:59:43.0250 1136 RTHDMIAzAudService - ok
13:59:43.0265 1136 rtl8185 - ok
13:59:43.0265 1136 RTLE8023xp (89619ef503f949fae09252a8b883ee11) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
13:59:43.0296 1136 RTLE8023xp - ok
13:59:43.0312 1136 SASDIFSV - ok
13:59:43.0312 1136 SASKUTIL - ok
13:59:43.0328 1136 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:59:43.0375 1136 Secdrv - ok
13:59:43.0390 1136 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
13:59:43.0484 1136 serenum - ok
13:59:43.0500 1136 Serial (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys
13:59:43.0609 1136 Serial - ok
13:59:43.0640 1136 sfdrv01 (56250672235bbe54ba8a4963b1ac997c) C:\WINDOWS\system32\drivers\sfdrv01.sys
13:59:43.0656 1136 sfdrv01 ( UnsignedFile.Multi.Generic ) - warning
13:59:43.0656 1136 sfdrv01 - detected UnsignedFile.Multi.Generic (1)
13:59:43.0687 1136 sfhlp02 (3ad2b15ccc03febfbaf5ff057822aa75) C:\WINDOWS\system32\drivers\sfhlp02.sys
13:59:43.0703 1136 sfhlp02 ( UnsignedFile.Multi.Generic ) - warning
13:59:43.0703 1136 sfhlp02 - detected UnsignedFile.Multi.Generic (1)
13:59:43.0718 1136 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
13:59:43.0828 1136 Sfloppy - ok
13:59:43.0843 1136 sfsync02 (798d918d8f20380008277ce3ce5319d1) C:\WINDOWS\system32\drivers\sfsync02.sys
13:59:43.0859 1136 sfsync02 ( UnsignedFile.Multi.Generic ) - warning
13:59:43.0859 1136 sfsync02 - detected UnsignedFile.Multi.Generic (1)
13:59:43.0859 1136 Simbad - ok
13:59:43.0890 1136 SjyPkt (3d7ef286e806f9bd9339aa52e28dcd67) C:\WINDOWS\System32\Drivers\SjyPkt.sys
13:59:43.0906 1136 SjyPkt ( UnsignedFile.Multi.Generic ) - warning
13:59:43.0906 1136 SjyPkt - detected UnsignedFile.Multi.Generic (1)
13:59:43.0937 1136 snapman (7cdb603a351b65c1a3347840625ad74d) C:\WINDOWS\system32\DRIVERS\snapman.sys
13:59:43.0953 1136 snapman ( UnsignedFile.Multi.Generic ) - warning
13:59:43.0953 1136 snapman - detected UnsignedFile.Multi.Generic (1)
13:59:43.0953 1136 Sparrow - ok
13:59:43.0968 1136 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
13:59:44.0078 1136 splitter - ok
13:59:44.0093 1136 sr (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
13:59:44.0140 1136 sr - ok
13:59:44.0171 1136 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
13:59:44.0218 1136 Srv - ok
13:59:44.0234 1136 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
13:59:44.0343 1136 swenum - ok
13:59:44.0359 1136 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
13:59:44.0468 1136 swmidi - ok
13:59:44.0484 1136 symc810 - ok
13:59:44.0484 1136 symc8xx - ok
13:59:44.0500 1136 sym_hi - ok
13:59:44.0500 1136 sym_u3 - ok
13:59:44.0515 1136 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
13:59:44.0625 1136 sysaudio - ok
13:59:44.0656 1136 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:59:44.0703 1136 Tcpip - ok
13:59:44.0718 1136 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
13:59:44.0812 1136 TDPIPE - ok
13:59:44.0828 1136 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
13:59:44.0937 1136 TDTCP - ok
13:59:44.0968 1136 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
13:59:45.0078 1136 TermDD - ok
13:59:45.0078 1136 TosIde - ok
13:59:45.0109 1136 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
13:59:45.0203 1136 Udfs - ok
13:59:45.0218 1136 ultra - ok
13:59:45.0250 1136 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
13:59:45.0343 1136 Update - ok
13:59:45.0375 1136 USBAAPL (c1ca131f4e3ed63d6bc89a35ffad4cda) C:\WINDOWS\system32\Drivers\usbaapl.sys
13:59:45.0406 1136 USBAAPL - ok
13:59:45.0437 1136 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
13:59:45.0546 1136 usbaudio - ok
13:59:45.0562 1136 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:59:45.0671 1136 usbccgp - ok
13:59:45.0671 1136 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:59:45.0781 1136 usbehci - ok
13:59:45.0796 1136 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:59:45.0906 1136 usbhub - ok
13:59:45.0921 1136 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
13:59:46.0015 1136 usbohci - ok
13:59:46.0046 1136 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:59:46.0140 1136 USBSTOR - ok
13:59:46.0156 1136 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
13:59:46.0281 1136 VgaSave - ok
13:59:46.0281 1136 ViaIde - ok
13:59:46.0296 1136 VolSnap (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
13:59:46.0390 1136 VolSnap - ok
13:59:46.0421 1136 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:59:46.0515 1136 Wanarp - ok
13:59:46.0531 1136 WDICA - ok
13:59:46.0546 1136 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
13:59:46.0656 1136 wdmaud - ok
13:59:46.0687 1136 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
13:59:46.0781 1136 WmiAcpi - ok
13:59:46.0812 1136 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
13:59:46.0843 1136 WpdUsb - ok
13:59:46.0859 1136 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
13:59:46.0890 1136 WudfPf - ok
13:59:46.0890 1136 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
13:59:46.0906 1136 WudfRd - ok
13:59:46.0921 1136 MBR (0x1B8) (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
13:59:47.0156 1136 \Device\Harddisk0\DR0 - ok
13:59:47.0156 1136 Boot (0x1200) (7423c7534a799d92af460511b4df1efb) \Device\Harddisk0\DR0\Partition0
13:59:47.0156 1136 \Device\Harddisk0\DR0\Partition0 - ok
13:59:47.0187 1136 Boot (0x1200) (797e74a61f55a91224d149c770fa8ba5) \Device\Harddisk0\DR0\Partition1
13:59:47.0187 1136 \Device\Harddisk0\DR0\Partition1 - ok
13:59:47.0203 1136 Boot (0x1200) (ca46e2184b26d1586cb2914df0ecb720) \Device\Harddisk0\DR0\Partition2
13:59:47.0203 1136 \Device\Harddisk0\DR0\Partition2 - ok
13:59:47.0203 1136 ============================================================
13:59:47.0203 1136 Scan finished
13:59:47.0203 1136 ============================================================
13:59:47.0312 3256 Detected object count: 8
13:59:47.0312 3256 Actual detected object count: 8
13:59:59.0531 3256 AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 ENTECH ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 ENTECH ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 Iviaspi ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 Iviaspi ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 sfdrv01 ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 sfdrv01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 sfhlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 sfhlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 sfsync02 ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 sfsync02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 SjyPkt ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 SjyPkt ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:59:59.0531 3256 snapman ( UnsignedFile.Multi.Generic ) - skipped by user
13:59:59.0531 3256 snapman ( UnsignedFile.Multi.Generic ) - User select action: Skip
|
|
23.01.2012, 14:36
| #12 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | mögliche virusinfektion? Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat! Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
23.01.2012, 15:27
| #13 |
| | mögliche virusinfektion? Bei combofix tritt ein problem auf, das ich auch schon früher mal bei einer infektion hatte. ich kann combofix starten, aber nach der meldung, dass das ganze 10Min dauern kann etc. passiert nixmehr. denke das programm hängt sich auf (konnte es bei abbruch nach >30min auch nicht normal beenden) |
|
23.01.2012, 15:28
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | mögliche virusinfektion? Probier es im abgesicherten Modus mit Netzwerktreibern mal aus
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.01.2012, 15:00
| #15 |
| | mögliche virusinfektion? gleiches ergebnis... |
|
| Themen zu mögliche virusinfektion? |
| administrator, anti-malware, antivir, auslastung, autostart, avg, computer, cpu, dateien, dateisystem, diverse, ebanking, explorer, generic, heuristiks/extra, heuristiks/shuriken, java, logdatei, malware, microsoft, probleme, prozess, schließen, service pack 3, software, surfen, system volume information, taskmanager, trojan.agent, virus/trojaner |
Textbox von OTL - wenn OTL auf deutsch ist wird sie mit 
beschriftet
.
Linear-Darstellung
